Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/da04dd20-8c62-3b29-86cd-0299e4c3aef6.roa
File:                     da04dd20-8c62-3b29-86cd-0299e4c3aef6.roa (raw, json)
Hash identifier:          k/nyQMv+LvOUInL/8UupYEf4NaX4ZgWCXGTfyeeQc7k=
Subject key identifier:   DB:53:09:05:57:F3:C7:50:97:F8:58:2B:6E:F7:C7:D0:A7:A6:53:95
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584832F0302420C4FA1003BAB600
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/da04dd20-8c62-3b29-86cd-0299e4c3aef6.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     202
IP address blocks:        130.174.14.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:30:24:20:c4:fa:10:03:ba:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=a0e4de7d-8a43-44ec-96a1-2b88a2719a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ae:29:96:09:6e:c2:1e:4e:c9:56:e8:60:33:
                    9c:0c:e1:6a:5f:1b:76:39:46:ba:d8:30:de:c8:d4:
                    cd:5b:5a:04:62:ac:13:43:3e:a1:e8:64:fb:a0:8a:
                    f7:ea:65:1b:7b:f9:2e:61:b5:da:32:eb:29:cd:28:
                    74:71:57:19:fe:2a:fa:be:55:69:ec:f4:40:89:de:
                    1c:9d:7a:a7:52:45:3a:ad:84:f5:70:ea:38:5c:73:
                    7d:24:67:16:57:de:54:c3:a3:08:89:9f:a2:96:0b:
                    74:ed:c0:9d:44:00:cf:85:e7:2f:3f:1c:da:9f:2b:
                    07:c1:be:7d:95:49:c7:50:eb:94:fa:8f:de:1b:e6:
                    85:a3:bb:26:bb:27:02:5a:42:39:6c:55:cf:30:f5:
                    dd:56:5b:91:c9:11:22:f2:bd:27:3e:2a:49:47:4d:
                    dc:6b:15:a9:55:18:cb:0c:cd:65:03:a7:5a:29:4d:
                    e5:18:5f:e5:d0:bd:a6:06:be:7f:0f:93:13:cb:e4:
                    ca:69:82:d9:0b:ea:8f:70:b1:83:ac:17:d4:4f:dd:
                    a1:cb:d1:92:d9:7b:2e:8b:40:d5:90:9b:a4:a4:ad:
                    ad:ff:9c:cb:92:cc:14:e9:b9:75:f7:af:f5:e0:e9:
                    95:c6:40:35:8f:2e:04:a9:a4:7e:ed:12:c9:47:27:
                    c3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:53:09:05:57:F3:C7:50:97:F8:58:2B:6E:F7:C7:D0:A7:A6:53:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/da04dd20-8c62-3b29-86cd-0299e4c3aef6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:cf:bf:68:23:0e:5d:4e:a3:16:08:38:ea:5c:45:e7:cd:90:
         e9:51:a1:ab:92:a5:5a:35:6d:48:f4:44:02:82:68:fa:ea:fc:
         44:68:db:82:35:aa:a1:8d:b3:88:4d:7f:3c:2e:72:04:42:d0:
         a1:22:24:bb:b6:8a:d9:7a:88:91:7d:8b:65:96:af:92:ba:02:
         0a:c0:e3:33:0a:ca:fb:c9:d3:47:c9:71:d5:7d:34:89:78:63:
         48:06:b0:d6:19:6b:1e:0a:7e:20:f2:1a:c9:38:fa:ae:00:ae:
         39:dc:ab:ff:15:31:82:dd:cb:f3:59:09:05:a6:c3:e5:ac:d1:
         4b:dd:90:3e:12:3c:22:82:b2:6c:fe:aa:d3:67:b0:a2:d3:d4:
         0f:36:89:de:c8:ff:9a:5c:26:f2:6e:63:8c:73:97:71:70:df:
         03:cf:94:66:ef:ec:bd:6b:1b:bd:cb:e5:b5:4f:37:d8:d3:b8:
         65:fc:55:61:eb:b8:58:c3:50:73:fb:c4:a7:d0:cd:4d:38:0f:
         7e:0c:cf:b2:ed:f8:96:7f:35:9f:8e:78:f1:49:8b:14:ed:76:
         27:4d:fe:e5:b9:e7:14:96:b4:0c:4e:1a:1f:dc:bc:da:3b:d9:
         05:64:b8:16:cd:12:9d:3f:28:95:5c:f0:a9:00:93:35:12:86:
         70:50:de:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8DAkIMT6EAO6tgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
YTBlNGRlN2QtOGE0My00NGVjLTk2YTEtMmI4OGEyNzE5YTRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt64plgluwh5OyVboYDOcDOFqXxt2OUa62DDe
yNTNW1oEYqwTQz6h6GT7oIr36mUbe/kuYbXaMuspzSh0cVcZ/ir6vlVp7PRAid4c
nXqnUkU6rYT1cOo4XHN9JGcWV95Uw6MIiZ+ilgt07cCdRADPhecvPxzanysHwb59
lUnHUOuU+o/eG+aFo7smuycCWkI5bFXPMPXdVluRyREi8r0nPipJR03caxWpVRjL
DM1lA6daKU3lGF/l0L2mBr5/D5MTy+TKaYLZC+qPcLGDrBfUT92hy9GS2Xsui0DV
kJukpK2t/5zLkswU6bl196/14OmVxkA1jy4EqaR+7RLJRyfDgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNtTCQVX88dQl/hYK273x9CnplOVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZGEwNGRkMjAtOGM2Mi0z
YjI5LTg2Y2QtMDI5OWU0YzNhZWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4OMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFfPv2gjDl1OoxYIOOpcRefNkOlRoauSpVo1bUj0RAKCaPrq/ERo24I1
qqGNs4hNfzwucgRC0KEiJLu2itl6iJF9i2WWr5K6AgrA4zMKyvvJ00fJcdV9NIl4
Y0gGsNYZax4KfiDyGsk4+q4Arjncq/8VMYLdy/NZCQWmw+Ws0UvdkD4SPCKCsmz+
qtNnsKLT1A82id7I/5pcJvJuY4xzl3Fw3wPPlGbv7L1rG73L5bVPN9jTuGX8VWHr
uFjDUHP7xKfQzU04D34Mz7Lt+JZ/NZ+OePFJixTtdidN/uW55xSWtAxOGh/cvNo7
2QVkuBbNEp0/KJVc8KkAkzUShnBQ3l4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:33:48 2025 by rpki-client