Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/969034eb-7b60-3ad8-a8dc-f3f4ba464cb7.roa
File:                     969034eb-7b60-3ad8-a8dc-f3f4ba464cb7.roa (raw, json)
Hash identifier:          ggKKX7RtuZK+DVxZXqfc+kVJeGNEXfrj0qy3Ie8ioww=
Subject key identifier:   CE:B7:3F:E9:66:64:D1:8C:DC:F5:D2:C2:5B:84:30:19:A7:9F:03:B4
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285848090FB0D2A0C5A312F731F87E
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/969034eb-7b60-3ad8-a8dc-f3f4ba464cb7.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        130.137.80.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:b0:d2:a0:c5:a3:12:f7:31:f8:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=899a1a05-23da-4f61-bd04-babf21a9301a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cb:46:7e:dd:bb:af:2b:c2:a8:f4:21:0e:97:
                    37:52:ca:ef:58:9d:78:88:bc:f1:df:08:c2:88:96:
                    9a:69:94:c1:c6:3c:2d:be:42:94:3f:c4:bc:77:73:
                    8e:3f:97:28:ea:3f:14:06:12:2a:27:c8:08:da:b0:
                    d9:78:db:29:6c:b6:97:ab:20:ab:70:fb:45:01:57:
                    40:73:fb:9b:57:c1:a7:53:53:f5:09:19:c2:6c:67:
                    c2:25:40:7d:39:ac:c1:1e:90:b8:f7:31:cb:50:3a:
                    95:a7:56:c9:3b:6d:a6:5b:9b:2f:ff:d8:01:72:2e:
                    0b:a0:34:b7:72:9a:8f:3c:f9:03:98:47:52:48:50:
                    99:7f:c0:55:48:be:88:35:33:5c:16:4e:d5:f9:86:
                    ec:73:26:2a:5b:26:87:5d:29:3d:67:78:99:92:67:
                    b2:54:ff:c5:e6:3b:13:52:b8:d1:20:0e:cf:5b:0f:
                    b6:61:6a:60:4d:c4:b6:e2:e0:16:d3:49:62:49:86:
                    44:a4:47:66:b8:51:6a:8f:89:5c:78:63:94:f1:cf:
                    87:ca:2b:15:80:b6:76:5a:12:c1:90:8e:b1:e9:e6:
                    d3:fb:65:97:b2:fd:46:29:c7:b5:a4:a1:46:0c:7e:
                    2f:1f:db:64:50:6e:09:23:ea:67:2d:0d:7a:3b:5b:
                    df:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B7:3F:E9:66:64:D1:8C:DC:F5:D2:C2:5B:84:30:19:A7:9F:03:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/969034eb-7b60-3ad8-a8dc-f3f4ba464cb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:b7:ad:29:1d:d3:2e:b4:4b:bd:b2:c0:5a:da:4e:7f:bd:ff:
         0d:0f:af:30:e2:42:eb:63:bc:9a:b5:75:b4:8a:cc:52:54:35:
         94:42:d6:28:f6:49:e3:1f:a5:d8:35:02:f6:3f:93:fe:fa:d5:
         54:47:60:85:d1:e9:05:50:3c:b2:78:03:63:09:29:a5:0a:f5:
         84:9d:bc:56:0a:28:45:a6:07:d5:aa:71:e9:8a:37:c0:0f:ca:
         46:52:b1:26:c7:3d:f8:ef:b2:21:ee:be:48:a4:d8:a1:83:d0:
         f7:3b:4a:27:a6:dd:92:a9:9f:aa:88:ba:cb:87:47:db:be:50:
         ea:31:dc:99:72:8d:c2:b0:67:7f:ff:5f:f9:7f:b7:04:32:dd:
         3f:e9:34:4b:84:87:e9:3c:ba:10:c8:a5:ce:6e:7b:73:9d:09:
         fd:9f:db:f0:8d:ba:b9:b2:dd:39:df:6e:13:30:f9:da:7f:9d:
         ee:32:78:e3:6e:ae:90:74:c3:13:da:b2:99:af:5c:86:fd:29:
         99:68:17:7a:69:17:51:31:a1:42:ee:66:0b:52:a7:d6:24:66:
         2f:4a:c9:df:6e:fa:18:e6:74:3d:74:7c:17:29:29:c2:16:1a:
         72:87:ab:23:8a:b1:01:19:ba:78:f4:e2:07:d6:d7:50:5e:7d:
         2d:8d:cf:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:41:05 2025 by rpki-client