Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b8b5192a-5f6f-3a86-8d67-ce2ce7a4ea67.roa
File:                     b8b5192a-5f6f-3a86-8d67-ce2ce7a4ea67.roa (raw, json)
Hash identifier:          4vEP09ZyLbTk3ZY8Muq+5FfXTnHjblHMcPhNhU+YAbE=
Subject key identifier:   67:2C:46:85:01:AC:A3:7A:4B:4E:81:CE:0A:EB:31:76:CC:82:30:0A
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858484EDAC9FA570866DB47AEC000
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b8b5192a-5f6f-3a86-8d67-ce2ce7a4ea67.roa
Signing time:             Tue 24 Dec 2024 02:00:38 +0000
ROA not before:           Tue 24 Dec 2024 02:00:38 +0000
ROA not after:            Mon 24 Mar 2025 01:00:38 +0000
asID:                     16509
IP address blocks:        130.137.131.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:da:c9:fa:57:08:66:db:47:ae:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Dec 24 02:00:38 2024 GMT
            Not After : Mar 24 01:00:38 2025 GMT
        Subject: CN=97d13c06-056d-44b1-a435-70b3d4096ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1d:db:a8:00:4e:a9:60:eb:61:7a:d7:78:e3:
                    bf:e6:c1:f8:cd:f0:36:d8:23:fe:d5:ca:7d:be:7c:
                    b0:ec:d7:64:79:01:23:5c:64:1d:ae:67:ab:6d:bf:
                    a5:8a:c4:e5:74:c2:01:9d:d7:e4:a8:04:92:dc:c0:
                    71:94:67:8d:85:30:b3:db:25:fb:a6:81:ee:51:23:
                    18:41:7e:5c:7a:7b:82:ea:2b:2b:d0:b0:fc:93:99:
                    11:d5:3c:9d:dc:15:ed:15:0e:99:6f:7a:d2:ab:3e:
                    f9:19:a0:e3:46:bc:9e:7f:9f:21:c1:6e:76:b8:d6:
                    61:4d:51:4e:f1:ae:cb:aa:ae:29:b9:f0:7d:c1:9c:
                    da:8a:0d:98:0d:32:24:a8:b0:e8:d2:ec:39:e2:90:
                    a4:77:59:bf:d2:92:05:d8:aa:fd:f0:9a:d0:a2:32:
                    4b:e1:ad:22:5e:ba:38:47:19:de:dc:81:26:b2:88:
                    67:bf:b9:c5:ff:bd:c7:fe:98:4d:85:0e:df:10:d5:
                    55:62:32:ce:3e:91:f1:c2:4f:36:87:0d:e1:a7:33:
                    57:5d:ea:d3:6b:b5:90:c7:14:ef:e9:16:0b:6c:b7:
                    4a:1c:3c:27:9a:4e:9c:b9:8a:e9:64:d3:a2:7f:0e:
                    bc:d4:be:15:da:a9:f7:9d:61:60:4f:b7:cc:4b:36:
                    df:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2C:46:85:01:AC:A3:7A:4B:4E:81:CE:0A:EB:31:76:CC:82:30:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b8b5192a-5f6f-3a86-8d67-ce2ce7a4ea67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:82:0b:43:73:2f:fd:c6:e6:ed:c9:26:57:ba:9b:cc:e4:1d:
         2e:59:e3:2d:d2:3e:29:d5:04:e5:8e:e4:63:c9:07:14:b8:ba:
         64:f8:ec:a2:be:de:8b:7b:32:89:77:67:b9:f5:42:97:13:ec:
         1d:98:06:62:ba:2c:2e:5c:7e:83:2d:d5:76:f7:5a:62:76:a3:
         85:75:2b:5c:58:ba:32:d4:f0:70:68:eb:da:09:50:8f:03:c6:
         fc:d7:66:58:9f:17:53:3e:59:1e:c9:3e:31:e4:ee:37:6b:d7:
         86:57:3e:30:88:0c:06:61:69:24:7d:f6:3b:27:2a:0c:c3:e3:
         0e:1a:29:58:6a:47:56:d2:25:22:b9:92:4f:b1:f4:7c:d1:72:
         b7:14:80:ce:45:c6:91:32:ae:b6:e3:c7:06:a2:32:4c:dd:8c:
         bb:b3:a7:66:85:19:00:7a:e9:f2:fb:84:7e:3d:5d:99:88:57:
         dd:b5:4e:60:4b:14:30:66:5a:9a:2e:ef:f4:76:cc:ae:1b:33:
         48:19:a8:06:d5:08:8d:58:e7:b0:2b:6e:ed:6b:51:63:14:65:
         90:62:90:51:a0:15:9d:5c:79:8c:98:4e:96:67:01:c1:bf:25:
         50:f6:52:ed:20:7b:78:6c:25:9d:a4:fe:4d:2c:91:0f:30:ec:
         41:90:f2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:36 2025 by rpki-client