Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/531d8398-b955-3ca2-9032-3d7609e92d88.roa
File:                     531d8398-b955-3ca2-9032-3d7609e92d88.roa (raw, json)
Hash identifier:          zskVOhBCYUdWyd2pYIAhL/fAPf5uOF0Y3+/VDuUQY60=
Subject key identifier:   D0:A6:67:DE:39:1A:FD:93:3A:88:68:C0:11:84:6E:C4:C8:A1:15:71
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858493243DA087B9935AA4F2E8940
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/531d8398-b955-3ca2-9032-3d7609e92d88.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     8987
IP address blocks:        130.137.189.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:da:08:7b:99:35:aa:4f:2e:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=cb145fe6-973e-40e6-b43a-bffe3bb47f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:8f:d1:88:56:9d:78:b7:64:7a:dc:9d:85:
                    a4:0f:47:24:79:01:5b:ba:5a:0f:51:c2:0b:bb:6e:
                    0b:14:d5:13:bc:9f:f2:1d:11:b4:e3:90:4c:9a:66:
                    9c:36:61:e3:13:50:49:69:c0:b2:a7:f9:4c:23:8d:
                    95:2a:c5:4e:39:a0:aa:69:64:89:d7:68:3f:eb:9f:
                    27:0a:48:c2:f5:d0:9a:cd:05:ee:9d:90:05:8b:6f:
                    94:96:5b:0a:37:d9:29:e2:43:15:bd:47:72:68:56:
                    2c:5a:1b:89:30:df:95:ff:0d:df:61:d0:38:b6:b9:
                    50:31:86:d6:42:be:dd:39:0a:81:07:c8:3d:18:d6:
                    d6:16:eb:d1:62:e0:d1:db:99:26:5b:c5:6b:b3:1e:
                    23:97:2b:13:30:e0:bf:a2:db:06:0c:a5:d5:88:5d:
                    21:d9:95:d9:9f:05:29:7d:95:a6:65:49:26:43:a0:
                    64:1a:14:a8:5c:79:78:9a:4f:32:d7:5e:0c:91:2a:
                    09:e7:25:b9:a6:c9:04:95:90:7f:85:f1:51:ce:89:
                    b3:f9:6f:4d:fe:f5:43:e4:01:7c:67:5a:08:36:45:
                    e3:a7:4b:0d:85:cd:e5:8b:26:9e:5d:a1:c5:b1:a0:
                    e9:00:cd:7d:4c:a6:ec:d0:f9:7f:4f:7c:0f:e9:ac:
                    7d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A6:67:DE:39:1A:FD:93:3A:88:68:C0:11:84:6E:C4:C8:A1:15:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/531d8398-b955-3ca2-9032-3d7609e92d88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:9f:a5:e1:09:13:b9:e3:17:a1:e5:3d:86:60:f2:e3:bd:8f:
         dd:67:c8:56:3d:68:ef:44:0a:93:a0:46:a9:a5:8f:55:68:f6:
         aa:4d:b2:2a:aa:1e:6e:4b:7c:98:77:27:ce:2a:d1:bb:a9:12:
         b7:aa:db:b5:4b:50:cb:0b:95:69:ec:55:56:a9:a3:73:0c:59:
         79:22:a7:97:32:84:ba:d0:1a:d2:a7:8a:f1:96:6b:9e:5f:8c:
         62:d0:79:eb:50:00:73:96:84:84:29:97:c2:50:db:51:4c:b1:
         88:8d:a9:ce:4c:28:bf:53:58:78:24:75:b6:f4:52:1b:93:22:
         f9:ad:2f:23:50:f7:17:1a:a2:0c:e3:83:27:86:94:f4:0a:13:
         7b:49:dc:15:42:9c:4c:e4:fd:ea:76:aa:51:ca:c9:02:13:57:
         36:bd:aa:97:b2:b0:b0:22:00:b3:f9:d8:3f:2a:10:17:d9:0c:
         b9:19:af:83:58:e7:8f:02:7e:5b:1e:31:d4:23:6c:4f:9c:81:
         d1:5c:9e:33:ef:08:be:ea:61:52:c1:ca:15:ab:01:e9:3e:b5:
         ab:fa:5d:26:ff:dc:3d:41:f2:49:78:6a:60:b6:1b:79:e3:64:
         57:41:c8:03:e8:f9:95:31:0a:91:34:9a:ed:74:19:32:88:9f:
         89:54:c3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:29:04 2025 by rpki-client