Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8f69ec2f-8b42-385c-86e9-585793c72a07.roa
File:                     8f69ec2f-8b42-385c-86e9-585793c72a07.roa (raw, json)
Hash identifier:          5EKfIkixRK5i5KrZt/gILnLdM7rnnQKyRj9R0H39iLk=
Subject key identifier:   68:47:5F:67:F0:36:FC:1A:9D:2F:82:FA:36:E7:1C:E4:97:18:D6:37
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285848090FB22D0C28CD17A14F8B00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8f69ec2f-8b42-385c-86e9-585793c72a07.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        130.137.102.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:b2:2d:0c:28:cd:17:a1:4f:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=0ea8d5d7-0e1d-4d81-9782-5cf39f5b6b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e6:f8:a6:27:5d:ba:10:27:cd:52:b5:d1:8a:
                    33:ec:58:e7:09:55:ea:61:51:bb:f0:27:67:8a:77:
                    16:9e:9d:c9:03:4d:46:32:f6:2f:46:a0:39:99:10:
                    c6:3b:61:17:09:36:5e:ca:da:db:26:c1:3f:f0:1b:
                    46:7d:0e:74:85:83:16:2b:35:30:e6:33:8b:7d:ed:
                    e9:fe:5a:f2:92:30:e1:e4:bf:f0:a6:83:5e:a1:3d:
                    e4:71:be:1b:f9:c2:8f:76:b6:1b:ac:2a:5d:de:3f:
                    c4:d3:92:84:22:03:2e:48:63:6b:54:a7:1c:0a:14:
                    1b:1b:f2:e8:42:60:65:75:bb:3c:67:a0:3f:38:42:
                    2c:1b:68:d3:ac:06:db:fb:6b:99:c1:60:cd:b6:11:
                    b0:fe:ec:b7:cb:10:8e:6d:81:d1:7b:a5:53:15:16:
                    9d:bb:43:d2:b3:10:0f:50:cc:ca:8d:8d:c9:f3:c8:
                    c6:d2:cc:a1:38:54:7c:31:e9:d7:ce:5f:1b:c8:35:
                    20:a5:df:85:4e:07:ac:8b:4c:16:5b:33:14:ac:ab:
                    1c:97:dc:bb:de:4d:93:b6:a7:cf:b3:e9:10:66:e0:
                    7b:00:48:b1:d4:78:2f:7d:ea:fb:f6:7a:0f:06:54:
                    17:88:3c:f9:b1:4d:0a:51:1b:a6:93:cf:f4:80:db:
                    40:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:47:5F:67:F0:36:FC:1A:9D:2F:82:FA:36:E7:1C:E4:97:18:D6:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8f69ec2f-8b42-385c-86e9-585793c72a07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:59:be:f2:b9:e7:cc:43:31:1f:b8:f8:08:d2:ab:fc:77:7c:
         ec:88:41:38:eb:c6:b8:37:73:51:5e:f9:1f:f0:12:bc:6f:6e:
         62:88:a0:fc:ab:7f:47:0b:0d:20:b4:61:e4:88:2d:07:88:fd:
         97:74:c5:e0:d5:ee:46:20:98:60:10:96:23:bf:bd:7a:c8:0c:
         0f:17:68:ef:f1:ec:d1:63:6e:47:05:d2:28:b3:f3:a1:b1:a2:
         f3:79:6f:b5:dd:97:4a:f5:8f:f9:c2:7a:4d:33:39:f8:45:09:
         48:57:87:f8:8a:3c:76:bc:a7:46:44:b2:36:a9:fe:e5:a2:c7:
         a0:d7:93:f6:00:d2:98:5d:49:09:18:12:f6:c7:19:5b:0f:9a:
         d2:23:59:3e:8e:d7:75:51:19:17:ab:60:ec:81:05:71:ce:99:
         e8:a3:3f:cb:71:ac:5a:8a:f3:1d:15:4a:10:e7:66:aa:d6:3f:
         13:a7:30:24:67:6d:3d:34:d3:a8:11:c8:3d:b7:7d:05:53:8d:
         4c:da:6d:b9:ab:04:07:49:03:bd:c0:b7:e2:df:96:95:9d:b0:
         5b:75:69:9e:ef:9f:53:9e:9a:02:a7:6a:53:26:0d:76:47:70:
         da:ff:45:1b:63:be:31:e5:46:6b:05:ba:42:ae:62:e2:92:42:
         79:a0:08:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:25:37 2025 by rpki-client