Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/155ef00e-8903-3078-b1a9-610088db3245.roa
File:                     155ef00e-8903-3078-b1a9-610088db3245.roa (raw, json)
Hash identifier:          QmXzrsKo2zQy9ZwROCMYQjoIVXQAu/i/v2TeludGBkk=
Subject key identifier:   61:5E:22:B2:C3:99:BE:9F:1A:B8:4E:FE:F0:6F:3D:B8:FE:6D:40:8E
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858480BDA7BE91AFF31FEE5E03200
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/155ef00e-8903-3078-b1a9-610088db3245.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     14618
IP address blocks:        130.137.59.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:7b:e9:1a:ff:31:fe:e5:e0:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=c85f4a4f-8908-4dde-a372-06afbffd8407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:87:56:63:7f:29:0a:bd:43:3e:8d:59:ce:0a:
                    36:e5:03:e7:47:9f:12:12:25:36:75:1a:8d:41:f9:
                    ee:e6:7f:d1:88:f6:f0:5f:dc:9d:04:1f:10:96:1b:
                    83:fb:cf:5e:db:2f:1d:3e:3c:87:3a:ff:a1:9f:8d:
                    44:a1:96:c8:b3:97:21:e0:81:65:0c:ce:9b:d8:42:
                    24:88:d6:7e:cb:b6:4e:bb:cf:09:08:6f:70:8f:c3:
                    69:ec:0d:52:72:51:ce:b3:2a:76:46:c6:22:cb:4d:
                    92:ca:6b:1a:eb:c7:06:1e:a6:67:87:e3:80:13:51:
                    e7:62:4c:5a:d9:ce:b3:37:92:82:36:ac:3e:d7:d6:
                    a0:4a:23:35:d4:48:31:8a:b3:12:91:8c:2d:d3:c0:
                    f1:16:3f:8f:0b:fc:1f:b5:4f:1e:04:cf:7e:4b:49:
                    61:e4:8e:1b:d9:53:86:3d:9b:a7:8c:30:2f:cc:57:
                    71:94:1e:ea:97:ce:22:9f:ad:7c:11:52:d1:e3:2d:
                    64:c0:30:72:60:28:d7:5b:59:1b:b2:40:87:8f:d0:
                    aa:6c:3f:11:14:4f:ab:66:95:a7:c7:51:e4:96:79:
                    04:df:8f:3d:84:bd:d5:bd:cd:13:88:8e:68:4d:39:
                    f9:b2:ec:70:7e:48:0d:9f:66:bd:30:28:75:34:72:
                    72:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5E:22:B2:C3:99:BE:9F:1A:B8:4E:FE:F0:6F:3D:B8:FE:6D:40:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/155ef00e-8903-3078-b1a9-610088db3245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:83:3a:51:a7:c6:4a:78:3b:d5:3a:b4:9c:5c:a2:f4:5c:90:
         ed:dd:9b:46:78:18:7e:8a:97:6e:0c:a0:72:77:e8:0d:48:ec:
         a8:a1:8b:05:16:8d:56:44:bb:c9:b5:88:11:ae:c6:4f:34:52:
         f9:f4:e9:7c:9b:c2:0a:c2:49:7b:98:9e:08:46:be:f2:cb:e7:
         bc:7c:2a:6c:3d:49:b9:af:a6:b3:e4:5f:6c:d0:13:24:4a:c0:
         38:21:a3:4d:0c:4a:cf:e2:d5:2f:1c:30:76:df:cb:48:f2:46:
         38:59:2f:87:84:0c:89:64:96:7d:13:0f:06:80:61:cd:80:47:
         f0:08:21:b9:ec:0a:e9:9a:d6:29:b8:84:20:b3:dd:6f:60:0f:
         cc:44:76:dc:8c:24:4a:96:5b:08:2f:9e:6d:5a:a3:c2:7d:f9:
         c0:c3:9f:f5:90:c9:7c:aa:36:ad:60:03:c4:4f:8a:03:83:03:
         f4:47:99:9a:3e:1c:af:ec:d6:42:ff:f1:60:5b:07:8e:38:a7:
         4e:44:44:13:06:7f:7a:97:ca:af:a0:48:56:2f:fc:18:2f:f1:
         95:f6:6a:d8:29:90:b9:fb:59:50:70:76:03:71:73:30:19:0d:
         b2:13:43:b5:c3:ad:92:8c:7b:1f:01:62:82:9c:26:19:82:7c:
         73:db:68:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:58 2025 by rpki-client