Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6ffac14a-ed53-333d-9e67-875a57c19377.roa
File:                     6ffac14a-ed53-333d-9e67-875a57c19377.roa (raw, json)
Hash identifier:          bYBURfL9LaPldRGnceAVnlCgNRaRLMNwakogDiRvWq0=
Subject key identifier:   97:21:2F:DF:CC:D4:65:BF:2B:7C:DE:C8:3F:68:20:59:6F:62:60:5F
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858484C102206ED02E8167349DB40
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6ffac14a-ed53-333d-9e67-875a57c19377.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        130.137.247.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:22:06:ed:02:e8:16:73:49:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=381478ee-cd72-4b45-93a8-5dab32725fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e3:36:d3:a6:b6:7c:54:60:bb:7e:60:3c:6e:
                    5e:79:a8:33:48:d7:d8:d0:ca:f5:e0:b3:86:17:72:
                    a4:1e:e3:71:e6:c1:77:cd:fd:0d:6b:3d:10:73:bb:
                    f7:bd:9b:e9:39:c7:e2:06:e2:e6:86:45:41:e6:39:
                    71:f2:c8:fd:4c:40:02:20:3c:75:3d:a3:bd:fd:a8:
                    be:20:3e:0d:98:b2:9f:59:fa:10:68:58:2c:d4:53:
                    c0:5a:0a:d2:e9:04:88:76:42:b8:39:bb:3c:42:6c:
                    66:ff:12:8f:12:3b:a3:8a:c2:65:2f:32:1c:71:22:
                    64:31:0e:d1:9b:cd:ec:7e:ec:18:fa:dd:a2:5e:47:
                    3b:6f:b6:2f:d4:30:1c:4f:d9:fe:a1:c4:e3:16:9d:
                    72:3b:3f:e8:7a:ea:20:f1:a7:26:f2:43:1e:21:93:
                    f4:0e:f3:42:8e:d9:0e:84:51:e8:44:c9:f8:15:93:
                    14:44:0a:d5:1d:11:5f:ef:fa:c5:04:06:de:66:47:
                    60:e9:72:19:b3:7b:2b:94:cb:fc:d2:3c:a5:b1:8a:
                    7a:20:2b:e8:9b:27:ec:1d:f8:4b:00:8e:16:c1:e2:
                    52:fc:79:52:a0:d5:14:e7:2d:bf:0e:15:77:e0:20:
                    e9:13:9c:57:5b:81:8a:39:c4:1b:01:01:8b:19:1b:
                    e4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:21:2F:DF:CC:D4:65:BF:2B:7C:DE:C8:3F:68:20:59:6F:62:60:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6ffac14a-ed53-333d-9e67-875a57c19377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:0b:13:a8:ff:94:ed:5c:cf:ff:95:11:76:f5:ff:a7:98:cc:
         3d:3c:33:3e:76:55:8d:51:3d:fc:29:6e:e9:42:9a:26:12:5d:
         46:b2:d9:69:84:91:6f:0b:8a:57:c8:76:fb:03:eb:d8:ed:4b:
         a7:df:f5:56:e8:9c:62:b3:b0:c6:fa:88:74:03:29:14:ac:61:
         7b:1f:cb:e6:c8:b6:2e:04:b2:50:36:a3:da:49:8f:c4:90:73:
         91:b5:89:e2:9a:61:ee:f0:e4:b4:e2:6f:42:a0:e3:39:94:1c:
         42:30:5d:bd:5c:c5:48:35:7f:32:e1:69:7d:db:71:3c:8f:ef:
         6f:d2:18:87:3c:a1:e7:24:c7:4c:fd:b6:29:ad:ba:57:4a:64:
         4c:34:ba:40:d7:f8:3d:a8:e2:f1:11:f9:33:ca:5b:19:b1:c8:
         a7:2c:73:d5:af:f8:c0:e1:10:15:de:44:3a:a7:a3:67:05:8b:
         61:65:fe:ee:af:90:76:8a:5c:e0:f8:20:ed:c5:bb:84:8a:d3:
         9f:73:46:3d:4b:75:74:53:77:63:d2:98:ee:6b:85:f9:7d:b2:
         a1:35:64:36:ae:b5:ba:44:75:eb:a6:d0:1d:b6:8c:d7:a9:2d:
         74:ba:6f:ae:26:02:9f:e1:6d:95:eb:01:91:97:af:64:e9:31:
         c1:d5:5a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----