Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cfdd2d58-cbce-38c9-89ff-224c5dc45381.roa
File:                     cfdd2d58-cbce-38c9-89ff-224c5dc45381.roa (raw, json)
Hash identifier:          Q+98q9MoseyE/V9CSyhCtSFUn0JwxsmKAZoj2J0jtFY=
Subject key identifier:   4A:47:B4:D8:94:27:1B:A8:F6:3C:57:61:7F:D8:10:23:27:67:68:E6
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858483455702062CF9FBF1A2D9A20
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cfdd2d58-cbce-38c9-89ff-224c5dc45381.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     202
IP address blocks:        130.174.130.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:70:20:62:cf:9f:bf:1a:2d:9a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=963a2538-31d2-44c4-9231-d2b783ef90cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b2:d4:0c:d8:54:27:82:0e:b6:f4:29:e5:1f:
                    ac:39:12:4e:56:df:8a:be:36:82:9b:6c:f1:2b:12:
                    0f:07:59:cb:f2:5f:a1:6b:0e:e9:ee:40:63:de:16:
                    54:98:d4:44:6d:a4:cd:24:a7:7a:91:7a:54:76:8e:
                    f0:50:63:06:da:89:23:62:23:f4:a6:c6:61:2c:12:
                    09:45:b4:fd:20:46:55:7d:c7:d4:ac:f8:9e:a3:3f:
                    02:e2:78:14:7e:93:d1:53:12:c2:97:c8:23:ba:95:
                    eb:67:0f:14:95:3f:15:e0:d7:e0:0e:ce:d5:f3:65:
                    fc:5e:fc:f8:0a:a2:08:b6:6d:d6:2a:6c:2e:5d:95:
                    70:cd:99:fe:78:14:bd:43:8d:e4:ee:45:84:88:20:
                    df:6e:b0:d4:a8:83:eb:d6:6d:03:e3:f6:d8:ff:bb:
                    b9:e7:10:ba:98:ef:09:2e:5f:87:78:8e:ff:67:01:
                    f9:60:90:5d:60:4b:f6:07:8e:ae:b1:d6:44:2c:ee:
                    78:91:cb:e3:10:0c:97:f8:e1:f7:c9:42:c1:d5:2b:
                    86:c1:cf:73:c1:f9:7d:8c:7b:34:fc:c1:07:05:e6:
                    0d:0d:34:ef:bc:de:97:2c:b7:2e:4a:64:e0:c8:c7:
                    f4:4b:b0:5e:ae:af:13:e9:80:c4:25:96:93:74:81:
                    ac:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:47:B4:D8:94:27:1B:A8:F6:3C:57:61:7F:D8:10:23:27:67:68:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cfdd2d58-cbce-38c9-89ff-224c5dc45381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:e5:2b:a9:a6:dc:4d:a2:db:6e:40:2e:05:f2:76:26:9a:6b:
         38:9d:82:97:da:03:71:b2:ac:65:cc:ca:79:ff:9c:54:b8:bb:
         71:ed:bb:66:ac:29:d6:de:0f:1a:fb:2c:7a:b5:ba:5b:be:19:
         cb:08:4d:f0:61:83:e6:76:40:f5:1d:29:f2:0e:f1:f0:a1:a0:
         02:08:99:b7:be:0a:9e:9a:37:33:53:4a:e9:87:cb:a6:ae:dd:
         a3:20:35:da:39:9b:4e:ff:6e:6b:b9:9b:40:68:a2:34:fa:bb:
         9e:41:09:dc:05:79:7d:87:cb:d8:3d:64:cc:51:fc:31:be:a7:
         1c:83:48:ce:9d:b5:a2:e1:a8:b9:41:da:52:cd:84:20:c4:de:
         b3:2d:73:a3:8e:90:fb:46:80:12:b9:49:64:d8:bd:23:26:9e:
         90:e5:f4:df:bd:ea:89:59:5e:ab:1c:a3:e9:86:93:a2:0a:17:
         59:32:dd:94:99:50:79:51:e4:3c:69:7a:70:14:bc:e2:04:40:
         b1:a1:08:2d:a4:f5:53:22:04:b8:e6:ec:9f:4e:8d:50:9d:60:
         2a:a8:82:ba:ce:c2:44:6b:01:32:89:7a:9c:1a:90:41:c6:e0:
         81:ba:52:b8:5f:c6:0c:89:7a:44:3f:42:86:be:a2:d8:42:92:
         ae:34:2d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:33:36 2025 by rpki-client