Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c852d60f-ea77-3ce3-8e09-634d422e697d.roa
File:                     c852d60f-ea77-3ce3-8e09-634d422e697d.roa (raw, json)
Hash identifier:          ekuhbcQzPjMO4bCUeLvCHtHHcb2asimzEi2m1Pg0wv8=
Subject key identifier:   9F:AB:BF:FF:86:6D:BD:32:B8:B2:8C:CC:75:10:A0:6A:21:E4:C9:94
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848345572320D6FEBD38F565A80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c852d60f-ea77-3ce3-8e09-634d422e697d.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     3356
IP address blocks:        130.174.83.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:72:32:0d:6f:eb:d3:8f:56:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=2ab12af6-4509-4b18-9d2b-5c4315d16848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:08:00:7f:40:4d:74:26:c5:8a:c0:1d:44:52:
                    07:f5:e0:ad:8f:3b:f7:0e:5c:b1:a9:85:c6:9a:cc:
                    4d:30:cc:6d:b3:67:9d:e2:69:b1:69:16:d7:5c:8c:
                    ae:2d:0b:e7:c7:58:d4:62:26:0a:90:bc:bd:81:16:
                    e2:88:21:f3:1b:05:2c:84:d6:28:21:e1:77:b2:06:
                    3c:84:85:c7:25:a2:c4:b0:1b:f6:3f:07:58:87:00:
                    58:2d:a8:86:93:cb:60:02:1b:1f:b0:d0:71:60:a0:
                    c4:a5:f8:9d:15:2b:45:3c:c5:c5:0f:69:ff:4f:a4:
                    ec:33:e8:26:4c:8f:1e:5b:c9:76:eb:30:e8:8d:4c:
                    92:e8:1e:41:5a:4f:a5:be:b0:58:06:43:b3:f5:68:
                    f1:00:8a:12:65:18:1a:59:3e:a1:93:79:08:a4:ef:
                    10:d6:9b:47:c6:d4:0b:f6:1c:b4:3f:e3:bc:29:a6:
                    70:e4:a7:ba:5c:d4:0c:79:e9:a1:27:c1:52:63:51:
                    54:d6:95:d4:d7:f0:cd:25:a2:35:22:cf:b7:ed:d2:
                    b0:70:40:59:22:db:da:74:9b:04:28:03:43:e7:96:
                    99:3e:bd:4e:2d:f6:fe:ad:01:4c:21:d1:1f:f0:8e:
                    2e:15:af:ce:e8:3b:ba:99:6c:5e:6f:e3:c1:8c:d2:
                    02:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AB:BF:FF:86:6D:BD:32:B8:B2:8C:CC:75:10:A0:6A:21:E4:C9:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c852d60f-ea77-3ce3-8e09-634d422e697d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:6f:a2:83:ef:44:1e:ac:67:4d:03:b5:c6:d7:6c:7a:9b:da:
         76:14:b1:27:14:e2:c7:c2:47:70:6a:d0:a3:91:29:80:ca:13:
         0f:7e:71:44:25:1a:0f:31:f8:f4:24:e2:a3:cb:40:b1:44:fe:
         d9:ed:70:8c:0c:31:97:80:b4:bd:5e:3e:25:08:5e:03:11:16:
         f3:09:7e:16:f7:b9:76:e7:0c:09:d3:8b:50:a9:e4:3c:ef:06:
         5d:0a:a0:e3:b6:a2:a2:9d:c7:01:78:fa:5d:40:a7:e4:3c:6d:
         99:33:b2:09:e3:77:1e:dd:b7:4a:83:0c:9a:cc:89:85:fc:cb:
         a4:94:ff:6e:16:2f:0e:48:a8:b1:18:70:c6:8e:0a:b3:53:9d:
         07:8b:0b:32:53:52:2a:a2:06:14:ef:7a:37:38:9f:06:cb:32:
         09:38:fa:34:c1:b8:f4:e3:a3:72:33:d6:3f:d1:6a:65:de:25:
         b2:83:45:ea:a1:07:f4:8f:ba:6b:7a:7d:1e:4b:f0:ac:d1:eb:
         60:ce:d3:81:ce:39:8c:ef:94:e6:38:14:80:6a:2e:51:84:c3:
         92:7d:b8:92:d3:4f:42:8b:0b:c5:d9:81:29:d8:3e:8d:c3:01:
         7e:f2:8f:27:96:d7:dd:d5:7b:07:96:ed:ae:2c:81:95:18:cb:
         d0:eb:9e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:57:26 2025 by rpki-client