Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/67692146-8b96-30d9-8258-e3d8bd7fdda7.roa
File:                     67692146-8b96-30d9-8258-e3d8bd7fdda7.roa (raw, json)
Hash identifier:          fAH4avW0MojiMyA+3OsGCQA8mdMFmBoWVNheHWC960o=
Subject key identifier:   6E:31:28:C2:F8:36:8E:CF:74:F2:13:7F:36:8F:04:64:62:D0:D6:89
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285848090FB35F582A72F9DF5FD780
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/67692146-8b96-30d9-8258-e3d8bd7fdda7.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     14618
IP address blocks:        130.137.187.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:b3:5f:58:2a:72:f9:df:5f:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=f1d334f8-4068-421e-894c-93b300ca61f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d6:05:ad:f0:40:08:a1:ac:a6:1f:f4:94:ef:
                    cc:a1:38:43:d1:f8:e0:d2:f5:d8:43:87:04:8c:f8:
                    09:1e:29:4a:e5:26:b0:2a:51:ce:95:23:ff:46:ef:
                    34:bb:89:d9:ef:02:bf:39:ce:09:2e:4d:c2:14:83:
                    38:82:df:d1:db:5c:6a:5e:bf:0d:c5:2e:a0:9a:1b:
                    f9:3c:59:c9:46:eb:b0:20:3f:23:04:46:d2:23:9d:
                    8f:bf:59:7f:c4:bc:a4:f1:26:cd:dc:b7:c0:6c:61:
                    c9:f6:54:f4:88:80:3f:9a:2e:27:69:98:82:71:22:
                    4f:66:49:59:68:28:4c:8e:6c:10:fa:70:88:e5:a4:
                    a5:51:b5:47:91:cd:90:cb:4a:f0:32:63:be:0f:d3:
                    65:0b:00:39:6d:91:23:da:3d:5e:fa:e0:81:73:9c:
                    cb:49:4c:85:e8:a8:37:31:94:f4:43:6a:57:09:57:
                    c1:59:cc:bd:f5:b4:d8:d1:2f:fd:ad:c6:55:de:d1:
                    70:4b:09:0c:33:52:99:57:3c:32:85:91:e8:3f:d8:
                    46:88:d8:c8:f9:a9:7c:4e:e2:ea:42:a4:ee:c1:6c:
                    1c:6d:31:d9:94:48:56:11:96:0f:c2:12:eb:26:30:
                    9e:e1:31:fd:8c:7b:80:ae:07:a3:ca:95:e0:fc:34:
                    21:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:31:28:C2:F8:36:8E:CF:74:F2:13:7F:36:8F:04:64:62:D0:D6:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/67692146-8b96-30d9-8258-e3d8bd7fdda7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:fb:26:6e:92:f5:dd:8a:d5:df:12:31:e7:0f:4c:6c:87:ad:
         94:15:cd:bf:f2:c2:b5:ad:5e:1a:c9:fe:47:57:36:2d:89:99:
         22:a9:65:ff:d1:8f:b5:c7:70:ad:97:11:0b:fa:b4:f7:4d:e7:
         ba:b2:7f:9a:d1:97:bc:f2:76:4f:47:f5:df:4e:92:a9:10:58:
         e7:58:c1:2e:37:53:79:3d:3a:8a:9d:39:3b:c3:f3:94:89:e4:
         d7:b0:de:83:5c:dd:f9:a8:63:61:6d:88:54:37:13:21:a0:6d:
         66:64:1e:34:5a:84:50:e9:71:db:54:e3:b8:b1:62:45:23:2e:
         27:13:ec:1b:32:c1:e5:79:cb:81:69:83:06:0a:92:31:21:5f:
         fd:91:3a:17:1d:22:c9:34:98:03:f8:6d:de:c4:b8:34:ea:c0:
         6a:84:28:6d:d7:f4:01:4e:0a:63:b3:7f:d0:f7:43:0e:47:93:
         02:31:d6:0e:07:4b:93:c9:23:28:3b:62:84:04:14:06:94:3b:
         fc:74:50:c3:d1:89:a3:22:b4:7e:ee:2a:de:5c:95:c2:e6:2e:
         94:6a:fc:fa:88:85:f9:83:88:66:b3:e8:b8:4d:38:76:f8:07:
         ec:46:d1:0c:f0:22:f7:e0:83:d1:e9:08:8a:47:67:fc:54:7d:
         e8:58:9a:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgJD7NfWCpy+d9f14AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux
NzY5MB4XDTI0MTEyOTAyMDAzOVoXDTI1MDIyNzAyMDAzOVowLzEtMCsGA1UEAxMk
ZjFkMzM0ZjgtNDA2OC00MjFlLTg5NGMtOTNiMzAwY2E2MWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9YFrfBACKGsph/0lO/MoThD0fjg0vXYQ4cE
jPgJHilK5SawKlHOlSP/Ru80u4nZ7wK/Oc4JLk3CFIM4gt/R21xqXr8NxS6gmhv5
PFnJRuuwID8jBEbSI52Pv1l/xLyk8SbN3LfAbGHJ9lT0iIA/mi4naZiCcSJPZklZ
aChMjmwQ+nCI5aSlUbVHkc2Qy0rwMmO+D9NlCwA5bZEj2j1e+uCBc5zLSUyF6Kg3
MZT0Q2pXCVfBWcy99bTY0S/9rcZV3tFwSwkMM1KZVzwyhZHoP9hGiNjI+al8TuLq
QqTuwWwcbTHZlEhWEZYPwhLrJjCe4TH9jHuArgejypXg/DQhDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG4xKML4No7PdPITfzaPBGRi0NaJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk
MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNjc2OTIxNDYtOGI5Ni0z
MGQ5LTgyNTgtZTNkOGJkN2ZkZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx
ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl
MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl
OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgom7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAv7Jm6S9d2K1d8SMecPTGyHrZQVzb/ywrWtXhrJ/kdXNi2JmSKpZf/R
j7XHcK2XEQv6tPdN57qyf5rRl7zydk9H9d9OkqkQWOdYwS43U3k9OoqdOTvD85SJ
5New3oNc3fmoY2FtiFQ3EyGgbWZkHjRahFDpcdtU47ixYkUjLicT7BsyweV5y4Fp
gwYKkjEhX/2ROhcdIsk0mAP4bd7EuDTqwGqEKG3X9AFOCmOzf9D3Qw5HkwIx1g4H
S5PJIyg7YoQEFAaUO/x0UMPRiaMitH7uKt5clcLmLpRq/PqIhfmDiGaz6LhNOHb4
B+xG0QzwIvfgg9HpCIpHZ/xUfehYmuI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:38:17 2025 by rpki-client