Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/00433da8-ff5f-32d8-ac8d-6d63c3385461.roa
File:                     00433da8-ff5f-32d8-ac8d-6d63c3385461.roa (raw, json)
Hash identifier:          J9IVD07vbj19MsyuxBjcRXugFQktjZ/fH40s44+TfJE=
Subject key identifier:   73:36:87:2A:59:28:9A:8C:30:F6:7F:6D:2B:C0:BB:82:5F:CD:7A:DD
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858480BDA7C17C12F5713F7689500
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/00433da8-ff5f-32d8-ac8d-6d63c3385461.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        130.137.64.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:7c:17:c1:2f:57:13:f7:68:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=144092cb-4c08-44c8-a913-5be09e5431c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9c:11:fe:f8:6f:a6:ff:1f:3b:be:d2:eb:97:
                    55:8c:80:12:f6:f4:e3:8a:71:d3:e8:2d:cf:a6:e2:
                    88:8c:09:61:31:b5:bd:25:fe:de:e8:9c:4c:24:4f:
                    f7:79:4b:c8:3c:c3:17:47:c1:6c:8e:c7:48:c0:01:
                    25:cf:a8:19:c8:96:1c:63:15:e8:54:fe:80:eb:6f:
                    f0:15:41:be:f3:32:7b:36:ef:12:79:5a:81:c1:bf:
                    a9:49:d6:68:e2:57:73:37:ba:38:e1:a4:de:9e:7c:
                    aa:d3:92:9d:56:c7:df:26:a3:c7:16:64:aa:e3:44:
                    63:04:63:b1:9d:67:56:e3:f9:47:84:43:7e:13:ab:
                    0b:93:56:e8:fa:78:29:b7:11:23:60:85:61:bc:fc:
                    a2:db:7a:41:f5:ed:c6:eb:9a:3b:8c:b7:1e:1f:56:
                    89:25:83:62:1a:8d:c0:25:02:47:86:a9:25:23:cc:
                    07:5a:b8:43:9f:ac:f9:90:ee:dc:d7:25:a3:b2:22:
                    c8:f0:8a:0c:1f:de:fa:c6:34:05:3e:eb:9b:40:6b:
                    f1:22:9b:9e:72:83:fc:69:21:4a:4e:c3:39:55:79:
                    e5:b8:7a:c8:ca:2b:a5:e4:b8:c5:ba:7a:9f:9f:36:
                    2c:ae:78:a8:b6:81:9c:9b:e1:cf:cd:6f:4c:84:48:
                    81:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:36:87:2A:59:28:9A:8C:30:F6:7F:6D:2B:C0:BB:82:5F:CD:7A:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/00433da8-ff5f-32d8-ac8d-6d63c3385461.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:55:e7:34:df:62:21:d5:7e:fe:d7:00:e4:26:f7:bc:c4:9e:
         4c:68:bf:e9:75:c5:2e:ec:c7:2f:0c:e1:02:6a:a7:84:10:58:
         1f:d4:70:95:7f:f0:b1:3c:22:7a:6d:60:05:6e:ed:96:9c:87:
         3e:1e:19:4c:fe:34:40:60:26:0e:d6:87:fc:2b:f0:b1:8e:84:
         eb:7c:2e:6e:19:88:76:b3:4a:ab:c0:43:0b:d3:ae:2c:9c:42:
         77:61:cf:d7:86:a6:4f:bd:df:d4:eb:82:0e:9a:19:9d:e5:e7:
         e1:3f:52:cd:1c:8f:b2:28:d4:e2:a6:aa:15:b5:aa:88:fc:e1:
         fe:9c:92:6c:82:77:14:8b:07:96:08:cb:fd:1c:47:95:72:08:
         44:90:92:ed:06:bd:7d:49:db:b1:9f:bc:9f:c4:9c:a6:97:6f:
         07:f7:3d:c1:1c:3e:27:c2:7f:dd:3d:0f:28:d9:b5:aa:e7:28:
         0a:5c:14:1b:f6:dc:17:54:e4:93:28:be:4c:6a:1d:84:59:97:
         a7:21:18:e1:e8:d1:d8:e5:d1:88:d0:3a:49:3f:57:4b:18:1f:
         a6:5a:b7:61:c3:ef:f5:d4:bc:0e:98:d3:c0:83:8b:f0:e5:07:
         2f:99:9a:bd:66:18:e3:1c:a6:57:35:dc:62:b8:72:6e:83:2c:
         f2:2f:c6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:23:25 2025 by rpki-client