Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bc77cfac-75bb-3e8d-80b7-c0792e3df87b.roa
File:                     bc77cfac-75bb-3e8d-80b7-c0792e3df87b.roa (raw, json)
Hash identifier:          /gywwEwR3QWKG5dfOYVf8DwG7ujNR7ZL/8VZyjxHdlk=
Subject key identifier:   94:33:AA:78:42:6A:BD:18:6F:73:CC:2F:3E:D6:19:6C:EA:F2:15:06
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584832F038F8B6CF1D2E924D8F00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bc77cfac-75bb-3e8d-80b7-c0792e3df87b.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     203
IP address blocks:        130.174.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:38:f8:b6:cf:1d:2e:92:4d:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=ae979255-7865-4cad-b777-96915eac0705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:52:94:e4:e5:c7:d2:e3:94:61:05:0b:d3:
                    82:55:61:e4:5a:6c:e9:1b:53:0c:f5:cd:9b:0f:d0:
                    1b:e0:da:e3:ae:c6:e6:85:0c:9f:5c:14:02:8b:87:
                    a1:72:c4:46:5d:aa:90:8d:ff:9b:94:32:da:d2:39:
                    20:86:db:77:8f:a5:c4:af:b1:ac:03:2d:c2:ee:ce:
                    08:36:af:9d:16:a2:5c:98:16:31:5c:67:95:ef:c1:
                    0e:58:9b:6c:db:ba:b1:c1:83:53:00:f4:69:8a:f6:
                    7c:d3:0f:67:b4:58:94:e9:ba:19:b2:37:a8:4c:01:
                    74:e4:a9:f1:8e:74:a5:ec:50:0c:63:05:17:a2:69:
                    ff:38:2d:d3:d9:fa:c6:3b:85:7f:06:92:b1:00:5d:
                    02:4b:e0:36:c3:f1:55:ec:a9:35:47:9c:c9:4f:35:
                    fd:00:ab:75:e5:58:0e:c0:d3:d7:9f:96:f3:b6:08:
                    a3:79:6b:4a:77:06:e2:93:e1:ed:82:94:17:84:a7:
                    05:4e:20:54:2e:43:73:b8:6e:34:63:6b:9a:23:99:
                    11:e3:7c:9c:9c:01:d4:63:62:e8:97:d7:83:11:27:
                    b8:10:09:fc:59:74:64:e7:a8:39:93:a1:06:e3:55:
                    e1:8b:32:ce:fe:d9:86:36:bb:0e:70:2c:06:b2:d3:
                    ec:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:33:AA:78:42:6A:BD:18:6F:73:CC:2F:3E:D6:19:6C:EA:F2:15:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bc77cfac-75bb-3e8d-80b7-c0792e3df87b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:08:f6:7d:89:a1:e7:9c:80:b4:47:bf:33:50:89:e0:5a:55:
         51:b2:f1:31:90:10:4b:0f:c5:23:a2:01:34:73:1f:e9:c2:d3:
         1b:5f:fd:0d:20:70:8c:c9:e5:23:2e:70:6e:bc:69:40:be:55:
         8e:4b:a9:33:ae:16:e6:52:da:d3:13:a6:84:88:88:1c:8b:e2:
         9f:4d:c0:3c:77:53:b6:25:66:2f:2d:6f:42:7f:a4:d0:c8:81:
         01:f4:c6:45:39:c3:48:0c:92:dc:53:a1:10:d6:f3:e9:ba:ba:
         32:e2:a0:2b:dd:4c:71:9d:00:56:a0:d4:b0:99:53:f6:b2:c0:
         43:89:91:4a:4f:62:c9:54:e3:b4:20:ec:52:e6:19:0a:1f:6a:
         2b:fa:14:b4:1a:32:be:af:fa:88:80:19:7a:e7:05:c5:f3:40:
         68:21:e2:5a:30:f4:19:17:d9:06:7e:82:9e:ec:65:57:a8:58:
         b2:70:b8:ff:4f:14:cb:a5:c0:8b:dc:d7:4d:8e:e1:e4:89:5e:
         3e:3f:94:b0:d2:4a:eb:60:63:03:c1:af:63:26:44:66:b8:d4:
         ae:6d:d9:65:f6:e7:06:d2:a2:bd:33:a0:c5:c3:3c:ee:4d:45:
         3f:9e:33:d0:62:e6:18:27:8c:e9:1e:e1:5c:1d:f5:b7:23:21:
         3e:c5:b9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:09:26 2025 by rpki-client