Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5d312c7e-8816-3001-8378-cb2369085559.roa
File:                     5d312c7e-8816-3001-8378-cb2369085559.roa (raw, json)
Hash identifier:          ZbAiWiQqn4PLMvsjtOR9oRUrjWfgLJs/fkjcLNHx0FM=
Subject key identifier:   EC:BD:44:79:F7:CA:CA:BD:CB:BC:97:B5:27:7E:68:7C:5E:70:E7:95
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285848090FB146AAD5FEE05E0CDF40
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5d312c7e-8816-3001-8378-cb2369085559.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        130.137.81.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:b1:46:aa:d5:fe:e0:5e:0c:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=56ddf430-5bb7-4099-87d0-801d92f11463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:18:08:27:3a:e1:66:33:17:12:a7:01:39:48:
                    bc:3e:b6:64:e8:c5:b0:a8:0a:27:98:39:8a:f7:f6:
                    e9:09:81:a8:32:7f:c4:45:dd:43:17:dd:7b:d6:bf:
                    55:a9:0f:4e:89:9f:d6:82:39:05:59:51:5e:51:1b:
                    9f:5e:98:8c:07:b2:20:cb:40:06:35:a8:8b:94:87:
                    5f:8e:3c:3d:f6:0c:a5:19:45:af:6f:0d:ee:c3:7f:
                    7e:06:7d:b7:e4:0d:db:94:fd:e1:b3:09:c3:1b:7e:
                    52:7c:46:23:5c:fd:87:ce:f0:b4:90:1e:8d:df:d1:
                    5f:31:a2:90:13:5e:79:d4:f6:a6:04:2a:f8:0f:ad:
                    5b:7b:a7:bb:42:9e:55:82:4e:46:cd:18:f5:d1:fb:
                    74:1f:b1:16:01:aa:d5:78:45:d3:2e:13:24:0b:bf:
                    c4:64:4f:df:97:c2:41:86:04:b2:c4:b8:d1:2f:4d:
                    03:dd:2d:bb:56:9a:12:b1:7e:fa:b6:41:11:4c:0d:
                    a1:45:c4:43:f9:ea:6e:fc:82:f4:46:49:2d:39:96:
                    94:cf:e9:7f:02:71:db:14:42:ec:7a:86:68:64:78:
                    ea:5b:62:f6:97:64:eb:f6:19:e3:f3:ed:58:67:e5:
                    a3:59:1f:3f:0b:f7:b6:21:95:a7:07:8f:a1:61:9e:
                    8d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BD:44:79:F7:CA:CA:BD:CB:BC:97:B5:27:7E:68:7C:5E:70:E7:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5d312c7e-8816-3001-8378-cb2369085559.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:be:be:ed:a5:03:62:3f:40:f4:00:a9:97:be:d1:ac:3e:9a:
         48:27:48:e8:62:b9:fe:d9:ea:f8:7f:ea:89:6d:40:98:43:4d:
         bc:85:85:30:a7:a7:45:a7:3a:f0:44:07:b6:e1:81:f3:b9:ef:
         8d:ca:2a:c9:41:b7:5b:e7:4b:b1:78:0d:67:8b:fa:58:e4:b7:
         de:8e:ca:26:09:ec:4c:cb:a7:0b:04:e0:ab:1a:76:32:37:cc:
         ce:7d:c6:91:88:83:e8:d1:29:39:ef:d3:c5:db:cf:45:1e:2c:
         f0:86:f4:26:f9:8b:6f:0d:fc:be:ef:3c:1d:89:52:ac:08:f6:
         65:e3:67:04:35:56:63:28:24:ed:0d:61:1d:3c:ea:cb:59:63:
         4f:81:af:44:3e:f1:d0:45:a9:42:be:90:05:25:fb:89:44:50:
         46:1b:95:e9:78:a7:b8:95:04:fc:a4:8f:27:72:d9:94:12:40:
         76:8f:28:f6:93:ca:ea:37:d0:34:50:e5:d4:5d:59:dd:a2:74:
         11:fc:56:1d:63:e2:74:c0:85:22:aa:ff:20:bd:58:57:fd:22:
         99:cd:cd:34:77:e6:50:73:f1:7d:b7:45:43:21:b8:eb:c9:b3:
         69:83:87:b9:4c:16:c4:35:88:11:45:5e:81:ed:8c:c6:3d:84:
         ad:57:32:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:06 2025 by rpki-client