Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/780f2906-53d0-30c6-9ab4-f9b4cd496284.roa
File:                     780f2906-53d0-30c6-9ab4-f9b4cd496284.roa (raw, json)
Hash identifier:          xHXW/M3FY6jR9bCnV/NMZTOXgji9xgOVk1SYtUPDnsA=
Subject key identifier:   47:B5:17:1F:09:C2:1F:08:98:6F:54:6D:47:99:DE:16:0B:4F:98:CE
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858483B4FF92E977037A35C4C1A00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/780f2906-53d0-30c6-9ab4-f9b4cd496284.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     16509
IP address blocks:        130.137.152.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:4f:f9:2e:97:70:37:a3:5c:4c:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=3cbf33f6-2631-4fbb-996d-af4abc56cc35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:57:c7:96:0c:f3:08:d8:8a:b9:0b:6e:e6:9c:
                    f4:26:3e:3e:a8:52:7b:f9:c2:da:40:71:ba:66:1c:
                    1a:cb:ec:a9:95:85:ce:a2:af:f2:ef:c6:5a:bc:6f:
                    b7:6a:ec:b2:ed:bb:5e:bc:92:5c:d7:a6:c0:a2:34:
                    7c:fb:68:07:28:50:94:81:3f:95:ec:32:c0:54:87:
                    5c:e7:f9:fe:0a:2c:ee:80:85:51:9a:88:86:f3:07:
                    cd:95:0a:bd:2a:05:27:c6:4b:12:76:41:be:5b:05:
                    30:25:c4:0d:c0:3a:39:9c:49:2b:fb:3e:30:22:82:
                    b3:9c:9a:0e:18:bf:74:f7:f3:56:39:9c:de:17:4e:
                    1f:93:58:2f:06:30:67:58:f4:59:e1:51:ab:e5:5c:
                    a8:93:e7:09:bd:e0:04:25:ae:11:1c:61:54:b8:2f:
                    dd:51:d1:cc:47:66:e5:70:f0:10:79:9e:d1:4e:29:
                    c1:dc:cf:d0:fa:37:dd:94:08:aa:c7:f6:85:a2:ca:
                    93:7f:19:8e:60:c2:6b:ce:48:e4:25:e7:f8:72:55:
                    ca:14:ef:a6:7f:46:d8:55:47:31:78:49:47:de:e8:
                    c9:39:52:bd:30:11:ba:84:e2:22:23:b8:38:ad:ed:
                    fc:d2:79:16:b4:e0:38:53:e3:b4:6f:43:23:ee:bf:
                    a0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B5:17:1F:09:C2:1F:08:98:6F:54:6D:47:99:DE:16:0B:4F:98:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/780f2906-53d0-30c6-9ab4-f9b4cd496284.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:4c:90:80:1f:fd:cd:05:3c:b5:58:0a:db:ca:d6:97:3e:ef:
         17:ab:f3:8c:cf:0e:df:9c:0f:5a:da:da:8b:6c:65:ee:bb:fe:
         61:94:e0:30:cb:b4:97:95:94:f2:8e:09:2a:9c:a6:4c:00:d2:
         93:ac:2b:9d:70:a1:96:fa:17:25:22:69:f5:0c:40:71:06:58:
         f4:31:fe:90:4f:9a:99:35:d8:b4:4b:36:9d:72:54:ec:cb:c8:
         11:10:06:fe:7e:ea:d9:f5:b7:17:ca:04:e2:16:67:a1:41:4b:
         6d:70:d7:21:a1:a2:bd:b9:c5:bc:cb:c6:21:c8:90:66:13:41:
         3e:7e:26:b9:2a:3d:8f:03:f7:64:fc:3f:44:31:8e:cf:4f:a5:
         7c:26:58:ab:30:24:67:a9:18:bd:c8:92:bb:bb:8c:85:e7:35:
         28:d5:b3:c9:c4:ea:0f:58:26:94:e4:7c:b6:d7:93:57:44:b0:
         99:5a:3f:e7:01:0d:fe:51:3d:1a:91:ee:03:44:5c:e7:2a:8c:
         18:b6:e4:8e:9a:ef:ff:68:04:9d:b4:e2:9c:c7:14:69:cb:c4:
         09:ad:62:17:1b:00:9e:25:38:35:ad:96:af:52:b6:27:85:a0:
         d1:65:91:05:82:30:25:99:fe:76:ee:e8:ba:5a:6f:48:3f:2e:
         1e:10:c2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:32:57 2025 by rpki-client