Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d8c7df9f-7520-38eb-ad0b-9a939c6270fd.roa
File:                     d8c7df9f-7520-38eb-ad0b-9a939c6270fd.roa (raw, json)
Hash identifier:          xcDkREim/0wgsccK5NswFxFOeUBjRvG4wVmPeh1Bn30=
Subject key identifier:   53:BA:B0:49:6D:C9:B1:EA:18:EC:2A:62:1F:B6:29:52:61:41:CE:E7
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584834557E41D4A2D6D2AD1A7400
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d8c7df9f-7520-38eb-ad0b-9a939c6270fd.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     203
IP address blocks:        130.174.80.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:7e:41:d4:a2:d6:d2:ad:1a:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=5d8559d5-8efe-4d1b-8997-8c261516d7bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:70:b5:76:cc:b4:3f:05:23:02:d2:dc:5f:1e:
                    11:c9:c6:0f:37:da:28:aa:c9:19:29:a2:27:fc:96:
                    92:9d:db:f7:22:4c:1e:fb:cf:70:22:de:da:ec:d1:
                    4d:ca:03:b2:5a:0f:be:04:f2:c9:55:fe:b8:f0:9f:
                    f9:a9:a5:f6:aa:14:ab:8f:7e:00:ab:ef:9d:67:27:
                    b7:ff:f4:23:a2:09:e0:77:22:80:e8:9e:a7:fc:b2:
                    79:ed:84:7c:12:00:81:4e:42:78:c2:f2:51:39:43:
                    4f:a0:65:87:6e:0f:ac:83:21:8c:75:56:bf:cc:c5:
                    4e:b3:2d:42:5f:41:c1:39:ca:9c:21:37:a6:1d:28:
                    bc:55:78:c8:3f:a5:11:f3:8d:a4:61:1b:9e:c6:a8:
                    f0:44:ba:b5:f1:73:59:3b:48:b4:7b:56:aa:03:e5:
                    9d:cb:2d:46:05:28:8d:7b:d8:48:18:22:a0:56:ff:
                    8f:f4:ca:d3:b0:c8:58:e2:6b:40:76:df:34:18:41:
                    5a:99:a5:4f:9c:df:ec:db:93:87:0a:49:9a:1d:90:
                    3d:d7:bb:a2:67:c9:c8:ca:4a:70:e3:a4:fc:1c:44:
                    97:fe:63:d1:3b:fa:ed:47:fa:85:9f:41:00:75:87:
                    41:7d:98:f1:8f:54:86:95:42:a2:95:af:62:b2:f2:
                    4c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BA:B0:49:6D:C9:B1:EA:18:EC:2A:62:1F:B6:29:52:61:41:CE:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d8c7df9f-7520-38eb-ad0b-9a939c6270fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:c0:62:2a:9d:30:ad:c3:8e:27:c8:29:55:7b:d7:b7:c2:08:
         95:94:b7:69:38:46:de:56:94:c1:66:8a:5b:b6:ed:93:bd:32:
         a8:4a:93:65:08:eb:36:ca:fa:c0:f4:49:37:b9:98:c3:24:80:
         7a:d0:e6:a0:c3:2c:7a:97:af:67:3c:57:3c:d4:2b:d4:e7:62:
         27:27:ef:88:4d:32:38:6b:a8:cd:f2:7c:26:79:20:b3:50:f5:
         90:25:c3:d5:bd:66:8c:8f:65:3b:f4:51:92:50:87:c7:9a:2d:
         59:c5:77:ca:3f:eb:73:eb:70:b4:18:8a:e9:78:91:ab:7f:4b:
         fb:80:83:a2:10:2b:2c:83:48:72:98:0e:96:4b:cc:15:58:29:
         7f:c0:9c:4c:6c:61:c2:7d:52:fa:03:ba:80:2d:ba:c0:51:21:
         9c:f3:04:6b:1b:e7:f6:84:46:d3:ca:f4:9e:23:f9:dc:e0:19:
         cb:6a:ff:08:5f:3c:29:b8:c2:63:8d:99:fa:0a:49:a4:8f:7d:
         f9:ed:0e:e2:f9:e0:31:bc:5e:aa:41:72:f9:94:72:04:5c:12:
         d1:15:a0:69:a7:e9:d1:53:3a:6d:8d:35:fe:da:8e:ad:55:f8:
         53:9c:cd:a6:67:a4:7c:7d:ba:aa:14:ea:f9:65:67:0d:b6:86:
         d3:68:f0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:08:32 2025 by rpki-client