Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e7fad54a-dec8-3455-970a-8d60663fe4cd.roa
File:                     e7fad54a-dec8-3455-970a-8d60663fe4cd.roa (raw, json)
Hash identifier:          CmEP9z5NqWpxKTi/cj2WkCT/LKbwWu3NiVAR8ZcFxfA=
Subject key identifier:   EF:54:B1:1E:4A:22:C1:D4:E3:1A:F8:4B:D1:47:87:2A:0D:47:E2:61
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285848090FA98C8B16BFAF06D7FC80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e7fad54a-dec8-3455-970a-8d60663fe4cd.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        130.137.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:a9:8c:8b:16:bf:af:06:d7:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=416de270-fb33-4323-a2d3-9a3e7ac2c725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:44:87:8c:1f:f0:3a:a5:51:28:3a:4e:44:c3:
                    71:25:2b:08:2b:1c:86:c1:88:79:f1:cc:15:fb:a0:
                    62:70:d1:2f:fc:8b:a3:8c:cb:25:26:55:33:7d:5f:
                    7c:78:d1:f6:90:04:bc:16:6e:2a:02:39:35:50:91:
                    c4:c9:fd:37:a2:b7:8d:de:d0:ef:f0:20:fb:82:0a:
                    c5:e1:24:ab:c3:26:d1:77:f6:b2:3c:4d:66:81:ff:
                    4b:61:d5:70:3b:62:7a:21:3f:78:f7:1a:42:f5:e1:
                    6a:ee:88:bc:21:63:1f:8f:0d:df:da:b6:a4:e9:fb:
                    03:21:0c:5d:70:2f:5f:87:65:4d:57:8f:e8:05:86:
                    27:96:f9:2c:e4:2a:d3:37:b6:da:51:55:1c:bb:24:
                    1f:50:d0:b0:2d:fe:0a:62:da:bb:22:ff:d2:75:f9:
                    ad:e0:d6:ce:aa:4a:0a:a6:7b:83:53:77:28:2d:46:
                    e2:08:07:90:12:99:e6:e0:0f:12:5f:40:00:97:30:
                    85:b5:c1:1f:18:d0:a0:3e:99:2f:31:db:19:4d:f3:
                    61:d7:66:79:38:d7:19:fc:5e:dc:2c:2f:dc:77:59:
                    47:e5:3f:38:94:65:60:16:83:04:25:ba:4b:18:6d:
                    4a:2c:33:6e:d7:4a:2f:07:94:7d:8f:f8:cf:3c:27:
                    28:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:54:B1:1E:4A:22:C1:D4:E3:1A:F8:4B:D1:47:87:2A:0D:47:E2:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e7fad54a-dec8-3455-970a-8d60663fe4cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:04:a9:0c:d0:0b:42:5f:5a:ba:a5:29:a9:f8:03:9a:e4:83:
         3f:e0:27:93:bc:2c:84:43:65:31:e6:59:df:27:50:c8:97:e7:
         49:5a:09:e6:b6:d1:15:12:72:bc:f5:c7:7e:5d:a8:58:7c:f4:
         55:a9:a2:f9:77:ac:73:66:3d:2d:41:d4:b7:01:9f:e0:d2:8d:
         16:ec:19:a3:4c:99:39:1a:74:15:6d:1c:f4:75:83:0d:8b:ec:
         85:72:ec:90:e7:2a:0a:ec:9b:b3:ce:99:6b:45:d7:9a:d7:78:
         89:c3:a2:53:3f:63:db:74:62:0f:5c:10:78:72:cb:5b:ef:2d:
         aa:a6:46:fa:2c:d1:e1:46:e8:1f:37:49:11:4f:97:8c:79:2b:
         d6:f5:7a:0e:cc:47:b2:43:f1:dc:4d:48:b4:b2:63:43:a9:3a:
         79:64:a0:55:eb:f2:68:75:1c:89:d7:79:5e:39:cf:de:1c:ca:
         88:8a:60:95:42:0a:aa:9e:bf:cb:2a:09:02:7f:59:f8:e3:72:
         87:7e:00:03:03:08:67:e1:95:0c:81:e7:fa:53:47:d1:67:d8:
         64:c3:77:f8:73:7b:04:27:a5:08:1b:0b:b3:5d:28:87:f1:bb:
         f3:bf:60:8b:f4:7a:7d:8a:e0:7c:86:3d:65:0e:81:f0:ad:44:
         d6:62:91:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:48 2025 by rpki-client