Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0b379c55-c247-3109-831b-d0d98c7f3668.roa
File:                     0b379c55-c247-3109-831b-d0d98c7f3668.roa (raw, json)
Hash identifier:          i1hSapECTNeelXQubA0IYysMlGtn1MdIbjd9Vni5AE4=
Subject key identifier:   B8:AF:DE:A2:DE:0B:C1:B4:B1:61:E1:BE:6D:0A:CE:D7:22:4B:53:E7
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858483B4FFACA10BB7F130495D880
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0b379c55-c247-3109-831b-d0d98c7f3668.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     16509
IP address blocks:        130.137.164.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:4f:fa:ca:10:bb:7f:13:04:95:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=2000e1d7-065d-4396-a202-b00d45e16024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6c:23:6f:d1:e7:7a:0e:e7:0d:e6:fd:ba:c8:
                    7e:e9:15:ae:bf:29:cf:c6:24:42:d0:f5:3f:42:94:
                    58:d3:5b:99:12:8a:96:5a:c6:4e:84:17:19:7f:f2:
                    5a:e5:dd:6e:2f:84:59:29:1f:d8:56:a0:0d:a7:d8:
                    7a:7f:46:c1:90:57:21:02:6b:89:15:85:69:a5:31:
                    94:6f:24:28:6a:14:68:8b:f6:01:23:91:28:0e:e0:
                    d6:94:d7:3b:5d:1a:e0:c5:a1:68:89:b1:bb:b2:30:
                    b0:06:9e:2d:87:d3:8b:ee:3b:c4:b0:83:de:da:c9:
                    34:6e:99:d7:1c:42:02:ee:aa:70:6a:35:ef:ad:b9:
                    5f:ba:23:86:69:0f:af:4d:79:30:b7:b8:32:95:ef:
                    5b:61:d3:f7:24:78:e7:12:cb:33:c4:6c:c2:4b:5b:
                    dd:07:ee:45:06:c9:97:54:9c:84:68:0c:30:b8:13:
                    42:33:e1:7a:86:15:b3:e6:48:03:7b:b1:8a:99:d9:
                    c6:a8:72:b3:71:af:23:c6:c4:9e:b5:96:16:64:8b:
                    16:74:d1:f9:32:99:18:c3:92:26:e4:b8:cf:b3:f1:
                    8d:15:d2:f2:a3:a5:58:0c:10:32:57:e3:5b:2d:28:
                    4f:80:8c:7b:25:94:b7:a9:9b:f6:d8:e6:a8:f6:bc:
                    75:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AF:DE:A2:DE:0B:C1:B4:B1:61:E1:BE:6D:0A:CE:D7:22:4B:53:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0b379c55-c247-3109-831b-d0d98c7f3668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:fb:50:1d:cb:2d:2b:9d:88:b7:55:8f:e6:bf:d1:14:fd:a9:
         c3:20:44:63:d6:55:5d:23:a2:d5:4f:67:9e:f7:da:df:f2:30:
         49:c2:d2:d6:0f:93:ef:05:03:49:46:a3:0b:47:fe:b9:85:2f:
         85:75:a3:7e:7a:a7:88:76:76:04:9c:10:1f:c8:3c:29:a8:7a:
         af:3e:cf:90:b5:70:a0:70:03:dd:97:be:08:aa:92:01:5c:d4:
         0e:76:d6:51:61:9f:fe:65:20:64:2f:eb:d9:0e:d9:9c:5d:48:
         7b:39:7b:c8:9f:90:70:4e:77:ea:c5:5d:f6:ad:f5:ca:b8:75:
         d9:33:7b:0a:35:04:55:88:d2:cc:e6:33:d2:fa:60:66:d1:b4:
         aa:2e:d3:79:6e:f3:e4:18:e1:14:ae:1f:ae:a2:e5:b4:3c:da:
         4a:e2:c7:ee:6a:35:32:c8:91:1b:68:86:21:f6:ef:5c:f2:4a:
         15:4a:d5:4f:67:26:32:fe:8f:3a:48:fb:c1:cf:88:3d:38:f1:
         07:2e:89:7b:6d:d9:0e:8c:9f:06:69:f0:4c:97:20:45:cf:d3:
         9d:3d:1d:30:ca:58:9e:f0:7e:f0:33:60:cc:38:20:9d:63:ba:
         3e:cd:38:fd:12:6f:f6:38:e6:7a:ef:8b:61:a1:e4:f5:fa:a4:
         9d:5f:f0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----