Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b2e1c4a7-2167-324c-9296-7760383f83fd.roa
File:                     b2e1c4a7-2167-324c-9296-7760383f83fd.roa (raw, json)
Hash identifier:          Y9EF5uwfyr26LLxxCIJMmdAnYE38SrUkswJSozCoExY=
Subject key identifier:   88:C1:EB:D9:71:87:0E:C7:04:58:08:7A:25:F6:44:86:CE:A7:F5:65
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584832F03A09EB48A29AEE3DCE40
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b2e1c4a7-2167-324c-9296-7760383f83fd.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     3356
IP address blocks:        130.174.30.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:3a:09:eb:48:a2:9a:ee:3d:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=00c99f21-2b61-4fa2-98ed-14179e89014c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5a:f4:cc:d1:a8:96:bd:7a:81:71:ba:25:91:
                    72:b5:f3:0f:b6:d8:ba:2c:c3:4c:b4:1b:b3:e9:1e:
                    3e:6b:af:39:10:b7:76:88:c4:03:0d:01:85:72:c1:
                    8c:32:3e:e3:fc:c4:33:19:d4:96:c2:53:b0:70:99:
                    85:8a:0c:8b:2e:3a:61:c7:5b:c2:e3:64:c3:ea:77:
                    15:1a:b5:96:2a:63:3f:34:77:30:f5:bd:8f:f4:a8:
                    65:ec:ef:c5:0b:c7:dc:d5:db:a6:04:3b:1f:6f:73:
                    2e:1b:0e:52:b2:61:c0:06:72:2e:18:c7:cf:7a:16:
                    16:bf:2d:5d:19:b4:35:02:a5:08:33:32:a4:c3:78:
                    06:21:68:9e:30:73:35:38:fd:bc:3e:a3:b8:98:f5:
                    eb:d6:f3:f8:c4:6f:f4:75:4b:b2:9f:74:0b:f0:ee:
                    37:6c:31:a3:d3:0e:59:a7:39:89:9e:8c:fa:25:72:
                    0c:1a:ac:4f:9b:2d:33:ee:0f:25:e5:e8:d4:fd:89:
                    88:cf:e3:4b:95:d3:44:2a:7b:56:fd:70:c0:7d:f0:
                    83:17:9f:79:6f:6c:37:17:ce:cd:08:e3:bd:c1:35:
                    e6:c3:20:a2:72:54:b0:c2:83:f0:f0:01:b9:8f:9f:
                    ce:33:7e:b7:46:65:1c:28:da:dc:db:6f:7a:5d:86:
                    c0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C1:EB:D9:71:87:0E:C7:04:58:08:7A:25:F6:44:86:CE:A7:F5:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b2e1c4a7-2167-324c-9296-7760383f83fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:d2:0a:f2:28:56:c0:2e:2a:8b:8f:dd:e9:4b:c6:91:19:2f:
         fe:27:79:00:44:81:a2:39:f9:c1:a2:66:01:aa:c4:94:6a:14:
         35:28:ef:dd:49:c2:86:a3:94:2a:19:e3:35:f2:8b:2a:dc:ef:
         77:fc:8b:4c:6d:bb:10:78:90:ac:da:7b:d5:5a:a5:26:75:7e:
         b9:80:32:a3:81:66:ed:34:90:67:b9:22:6d:ed:ac:66:39:06:
         74:d3:d8:62:f6:27:6d:84:4b:5a:d4:67:97:ca:7d:0d:ea:9b:
         46:be:b6:22:f1:c8:f1:63:c1:01:71:df:ab:1d:2c:fc:97:08:
         0d:e1:7e:0b:55:5c:19:f5:ff:6f:92:99:ce:07:0f:4b:c5:e7:
         ee:2e:7c:17:99:8a:49:59:a4:63:2b:f7:54:4c:a5:8b:49:ec:
         8c:ff:4b:7a:22:7c:7b:93:83:12:0d:13:b2:a8:5e:ed:3d:46:
         21:ec:3c:ef:65:f0:c1:1b:96:60:d9:5c:fe:e5:02:21:61:50:
         4c:bd:d5:c0:9b:8e:69:31:77:12:e8:db:f9:eb:cc:17:c6:8a:
         02:ab:98:54:e6:6d:1f:7a:d9:62:cd:e2:db:e8:3d:07:fc:ab:
         74:90:34:e7:ed:d7:ca:6f:d4:12:f2:bd:ee:22:fb:d8:41:29:
         6e:7c:85:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:53:25 2025 by rpki-client