Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5667b902-9972-38ac-9b5d-b2149d417a8f.roa
File:                     5667b902-9972-38ac-9b5d-b2149d417a8f.roa (raw, json)
Hash identifier:          McanslAbokdlxdIUhahmQ3sfK3iwRWwpLGO8a4MoKqQ=
Subject key identifier:   4C:A0:05:6F:D6:01:74:48:9C:0A:61:4C:92:90:15:8A:1E:27:5C:9A
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285848090FB25BAF841C5B47D59380
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5667b902-9972-38ac-9b5d-b2149d417a8f.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        130.137.177.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:b2:5b:af:84:1c:5b:47:d5:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=66685345-3ccd-4efd-9e3c-285c0703d135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c0:1c:cc:ca:77:4e:68:76:41:86:d1:03:10:
                    85:50:2c:a5:7d:3a:e3:03:c1:3b:c6:7d:90:ab:67:
                    2f:04:8d:f1:89:fb:29:fd:d2:50:9f:bc:9d:a0:6e:
                    89:4f:85:5b:cd:57:26:83:35:d3:7f:b3:39:ea:0b:
                    11:99:67:bf:d3:fd:af:03:3b:b9:e2:42:b8:d4:15:
                    3d:0f:34:4e:22:4c:f8:15:fc:36:4c:31:1a:87:d2:
                    b1:18:81:45:5b:9f:03:8c:89:c2:3a:ae:40:3d:6c:
                    dc:96:9e:fd:e4:b2:c9:91:de:f2:c9:42:7b:50:c2:
                    09:18:56:67:57:df:3c:91:43:ca:95:b2:f0:fb:d1:
                    2a:b7:a3:61:92:84:fa:1f:b8:f0:5c:7e:c7:6a:15:
                    c0:a9:b5:1a:f6:d0:57:04:d5:53:52:a3:93:1a:cc:
                    b6:1c:fe:e0:96:3d:a3:40:9c:86:a1:b7:a0:dc:d0:
                    0a:15:52:2a:5b:8e:09:0b:3c:e6:d5:dd:30:0b:c9:
                    ec:47:76:f7:4a:31:28:b1:3f:9c:07:aa:23:fe:d7:
                    ff:47:f8:b1:a3:d9:5c:8e:ff:43:a8:4a:c2:ef:7d:
                    44:02:22:96:33:e9:a9:d3:be:76:39:18:c9:3f:63:
                    13:0c:54:e2:26:2c:72:9a:f4:0c:06:eb:1f:07:da:
                    50:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A0:05:6F:D6:01:74:48:9C:0A:61:4C:92:90:15:8A:1E:27:5C:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5667b902-9972-38ac-9b5d-b2149d417a8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:c4:29:69:99:16:2f:20:d1:68:c6:58:3e:60:6c:19:41:9c:
         be:d0:ed:c0:7f:ee:ba:ea:3c:ef:64:9f:61:2f:81:66:d3:26:
         af:be:bc:1d:14:53:5b:60:be:d2:fd:b0:5f:c2:e7:c6:a9:0e:
         87:6d:83:00:92:6f:cb:42:2c:70:21:d6:de:f5:76:57:0e:27:
         f6:50:c7:8d:04:32:e5:38:4b:4a:e4:7f:8b:d0:3a:ea:92:90:
         55:1c:77:ce:0c:66:33:26:51:96:63:a8:f9:d1:ab:f3:9e:5f:
         0c:a6:4d:9f:4d:12:50:49:0b:fc:48:24:20:ac:b8:88:2b:0c:
         07:7f:1e:7e:7f:b3:a5:38:05:69:5a:58:c6:b9:4f:3f:2d:b6:
         cd:de:8d:69:3a:57:6c:65:0a:9a:f3:e5:95:12:9e:a0:f5:8d:
         52:78:07:48:60:78:3f:81:e7:9d:8d:21:ba:5b:0b:04:0c:47:
         fe:2d:e3:4e:0d:25:a1:f9:4f:c7:ab:db:24:fc:6e:72:42:e8:
         8e:d0:e9:20:64:9e:c8:9e:35:de:cb:d3:d5:b0:15:55:1e:2f:
         0b:11:57:19:6f:bb:74:ae:e3:55:01:72:56:0d:8d:3b:11:ff:
         7d:ed:7a:c3:6d:fc:fe:c7:a1:26:31:1c:61:09:f7:2c:7f:7a:
         bd:67:6c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:03 2025 by rpki-client