Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2d6f68e2-ec00-3459-a53e-7ad919136068.roa
File:                     2d6f68e2-ec00-3459-a53e-7ad919136068.roa (raw, json)
Hash identifier:          ORygW+O/AFdYXl8KbjTqCOSMEpL6/9pCMZLskwm9r8g=
Subject key identifier:   7F:FD:CE:45:E9:04:E4:54:A7:D7:90:B7:B9:3C:78:8E:8F:56:C5:E5
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584838855267046DD9D8225E9180
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2d6f68e2-ec00-3459-a53e-7ad919136068.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        130.137.204.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:52:67:04:6d:d9:d8:22:5e:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=c8975302-f62e-461e-9146-32044842cf20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8b:78:1f:92:07:8d:84:ed:63:c3:88:93:d0:
                    7a:bd:3b:bf:24:99:f3:15:97:cd:a7:54:c5:00:bf:
                    53:75:c2:84:e4:e4:37:b4:5d:1a:aa:62:6b:06:2d:
                    e9:b1:c0:c5:45:4d:52:93:1a:f5:35:84:ad:75:4a:
                    5c:30:60:33:1d:74:65:d2:b1:da:8e:a1:9f:ea:59:
                    22:eb:de:56:94:3d:7e:0b:18:2d:3b:15:b9:eb:ea:
                    d8:52:07:1c:20:70:35:aa:b7:3e:e5:56:85:13:0a:
                    5e:77:4d:37:10:52:2f:8c:0e:b5:63:3b:1a:68:92:
                    dc:98:bb:f6:73:47:1c:a0:d6:04:c1:f7:a7:81:7c:
                    f8:b3:1f:a3:d8:7f:f9:3a:9c:61:fa:0b:a0:a5:a4:
                    da:44:a0:3d:1a:29:ef:38:af:19:38:00:07:69:a6:
                    be:23:f6:42:e3:4b:da:9a:65:ab:f0:d4:89:7f:46:
                    9c:5c:c5:b2:62:f3:45:48:cb:d9:b7:7a:53:b0:b7:
                    ec:4a:44:47:1a:2d:3d:32:b2:d2:6d:65:57:43:64:
                    25:a2:d0:1f:48:9d:99:73:f4:ea:2b:45:a0:9f:b6:
                    f7:57:7d:b8:40:26:20:ae:8d:c8:e3:ea:7d:f2:42:
                    1e:34:03:bd:86:ba:cc:45:2d:c6:66:b2:c7:bc:08:
                    cc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FD:CE:45:E9:04:E4:54:A7:D7:90:B7:B9:3C:78:8E:8F:56:C5:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2d6f68e2-ec00-3459-a53e-7ad919136068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:a1:d4:21:17:cf:7f:64:ba:5d:57:2f:79:01:d6:3e:2f:8c:
         46:91:5b:dc:8d:d0:ee:74:28:e7:ad:73:0b:bc:94:33:6c:1e:
         08:f2:b5:73:87:10:2b:1f:99:73:fb:0e:7d:e3:32:35:da:9e:
         37:39:83:1c:8c:24:ce:f7:12:28:30:1c:11:b0:47:4c:9e:7a:
         b1:bf:5f:5b:c9:f6:25:62:bd:83:14:02:43:e4:cd:2a:c6:1c:
         64:61:02:ce:81:fa:c5:a9:2e:8b:e1:cd:d8:2a:4f:32:6f:8a:
         6f:1e:63:d3:37:76:5f:66:b3:49:4d:9e:34:36:11:e7:f5:0b:
         fb:45:ea:d0:d0:f7:c9:8e:ab:87:ae:fd:f7:41:73:6f:95:8c:
         61:41:3d:24:05:01:aa:26:5a:16:23:b8:b7:f9:bb:e2:07:f4:
         05:2d:0f:97:f2:73:f6:47:fd:8e:1e:f6:02:40:9d:e0:8b:cf:
         c1:15:6b:53:47:30:5b:1f:6a:25:5a:6c:03:81:f3:d9:e1:31:
         ef:55:50:cc:57:ae:43:71:65:93:94:ce:61:85:c4:2b:36:97:
         2d:d8:4a:95:c2:f9:c6:38:50:36:c2:62:fc:06:35:70:7c:fa:
         2c:01:ae:56:e2:b4:e8:4c:b7:66:fc:68:8b:86:11:ce:92:2e:
         f1:54:c4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:47 2025 by rpki-client