Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/a7a900ce-23ee-33b0-85ce-32106cfd925c.roa
File:                     a7a900ce-23ee-33b0-85ce-32106cfd925c.roa (raw, json)
Hash identifier:          etoQmXhYfz5Z7j7jNqDaFBY2bAUkd27agWKmPlj6DGo=
Subject key identifier:   79:77:83:CC:F3:0E:A2:EB:85:AF:66:BD:92:48:42:4D:31:9C:04:2A
Certificate issuer:       /CN=b32217e1-2473-49a5-919e-08e1896c5019
Certificate serial:       010D0C9F4328584800FFCD6299BE55BB7B3B0180
Authority key identifier: 48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/a7a900ce-23ee-33b0-85ce-32106cfd925c.roa
Signing time:             Tue 26 Nov 2024 04:42:18 +0000
ROA not before:           Tue 26 Nov 2024 04:42:18 +0000
ROA not after:            Mon 24 Feb 2025 04:42:18 +0000
asID:                     22191
IP address blocks:        130.45.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:ff:cd:62:99:be:55:bb:7b:3b:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32217e1-2473-49a5-919e-08e1896c5019
        Validity
            Not Before: Nov 26 04:42:18 2024 GMT
            Not After : Feb 24 04:42:18 2025 GMT
        Subject: CN=05ca9262-eead-4799-b5e3-e0055c6e8b7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d7:02:8b:68:e1:02:62:e0:d6:98:43:62:14:
                    88:04:e2:b4:10:3e:78:8b:ed:11:ed:bf:a3:dc:d0:
                    04:40:6c:74:70:3d:5b:a2:6b:3a:e3:6b:93:92:0a:
                    7c:eb:68:21:ba:89:32:7f:23:75:37:90:9d:84:18:
                    e4:b2:d9:bf:4e:7b:7d:5b:06:a2:f9:2b:e8:96:9b:
                    70:52:79:a8:00:86:8e:82:b4:7f:d0:4c:80:29:4a:
                    90:8a:4e:13:90:fe:8c:6f:b9:56:76:ae:dc:26:8c:
                    06:42:ea:57:6e:15:ba:34:ed:25:c6:bc:b8:77:b8:
                    46:c5:ce:8c:d0:6d:89:5f:44:27:61:fe:88:6b:ec:
                    ed:c9:b5:14:e1:1b:4e:ca:a1:11:a1:81:f4:61:d9:
                    18:23:82:a6:8c:66:b2:bf:06:e0:a9:03:59:dc:76:
                    07:ac:44:e0:e4:83:51:81:48:c7:8e:00:65:b5:61:
                    d8:09:05:a5:65:8a:fc:d3:2f:df:6a:f2:37:fb:e5:
                    5e:85:42:43:e7:52:8c:b2:89:85:b6:30:43:04:c1:
                    22:fd:41:12:63:7d:11:18:f0:eb:af:d6:44:4a:27:
                    02:b3:5c:3e:a0:65:de:a8:c8:36:5f:cf:ed:41:86:
                    32:53:6a:c7:55:e5:7c:b3:27:a0:af:85:6e:4f:ff:
                    66:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:77:83:CC:F3:0E:A2:EB:85:AF:66:BD:92:48:42:4D:31:9C:04:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/a7a900ce-23ee-33b0-85ce-32106cfd925c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl

            X509v3 Authority Key Identifier:
                keyid:48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.45.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:0c:bd:bc:da:8e:4f:8f:2f:f8:bf:aa:d6:a9:fd:0c:2b:44:
         98:17:74:f8:62:64:73:8c:f5:e8:51:33:4b:71:58:52:c6:6f:
         0d:27:1c:1f:d4:d0:f7:67:a6:dc:91:6f:29:81:f3:66:45:d0:
         6d:b3:10:c2:f6:bf:09:55:2f:6f:c2:db:38:3c:27:79:99:50:
         d8:ea:0d:0d:dd:82:af:34:57:7a:b7:e3:c2:4f:e5:e8:1f:93:
         73:bb:20:be:d1:76:6e:c7:b6:d4:72:23:3d:92:b8:cc:40:f0:
         ca:83:31:96:c4:20:b0:1f:e9:25:e0:fe:0a:fc:7b:fe:10:36:
         75:12:7b:4e:9a:8b:c1:4a:29:f1:b8:1e:4a:3f:7a:d4:66:ca:
         b5:b9:44:1e:a1:ba:8e:38:27:13:33:bf:6b:bf:70:3b:b5:0a:
         02:fc:e2:26:d1:05:9e:4d:78:00:6a:30:36:07:f3:b4:18:3f:
         2c:af:bd:6f:5e:44:46:79:27:d4:ee:e7:f5:72:3e:8b:fc:37:
         a2:e8:dd:82:c4:6b:0f:22:2e:43:85:26:93:dd:d9:16:69:53:
         b5:93:5f:78:e2:d3:3a:3b:6a:be:27:96:47:ae:30:d4:da:4e:
         1a:4f:b8:11:f4:fb:f8:2d:de:88:3e:19:de:54:03:10:8a:f0:
         38:c8:93:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:24:48 2025 by rpki-client