Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/3133302e31322e3139342e302f32332d3234203d3e203131393637.roa
File:                     3133302e31322e3139342e302f32332d3234203d3e203131393637.roa (raw, json)
Hash identifier:          glgXl356KaeWerVAGiiP0D/+UbVWX18PuD2hdtFmXfk=
Subject key identifier:   69:55:B8:90:97:27:7C:8D:06:D5:24:8E:B9:F0:88:99:38:F3:9E:85
Certificate issuer:       /CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
Certificate serial:       5F488E30A276394682032FE23D24CD210284E195
Authority key identifier: 41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/3133302e31322e3139342e302f32332d3234203d3e203131393637.roa
Signing time:             Mon 13 Oct 2025 14:00:44 +0000
ROA not before:           Mon 13 Oct 2025 13:55:44 +0000
ROA not after:            Mon 12 Oct 2026 14:00:44 +0000
asID:                     11967
IP address blocks:        130.12.194.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:48:8e:30:a2:76:39:46:82:03:2f:e2:3d:24:cd:21:02:84:e1:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
        Validity
            Not Before: Oct 13 13:55:44 2025 GMT
            Not After : Oct 12 14:00:44 2026 GMT
        Subject: CN=6955B89097277C8D06D5248EB9F0889938F39E85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ef:0a:2e:d9:eb:41:55:ec:e5:94:45:b7:67:
                    c6:4b:19:35:10:63:f1:a9:28:70:09:24:30:8a:e2:
                    fd:91:2a:e0:69:6f:9d:bd:43:9e:a8:8d:fd:c4:43:
                    b0:eb:2c:40:0f:48:ac:97:4e:43:88:c4:ac:3e:63:
                    54:2c:ae:29:3e:5f:35:0d:37:86:2c:2a:dc:3f:46:
                    cd:1f:90:03:64:87:95:79:74:c9:a7:a6:42:09:f9:
                    c9:38:70:f1:ec:d4:0b:44:36:02:b8:50:c6:59:69:
                    4f:7a:5c:51:88:a6:1b:29:24:60:cf:78:83:b0:19:
                    f4:e7:d7:5c:1a:8e:9f:5d:eb:df:ee:38:03:d5:fe:
                    95:f5:5d:28:d5:11:18:6c:1a:82:57:2a:87:72:b6:
                    0e:42:d3:e5:d8:ba:85:0d:7c:4c:e5:66:16:03:0c:
                    7a:4e:27:08:c4:fb:5d:47:4c:8d:f8:1d:9f:10:3b:
                    e8:58:1a:c3:27:96:3a:10:3b:80:f3:00:1f:4b:e9:
                    44:04:84:a3:e9:8a:c2:ed:ad:ea:b5:a7:e3:2d:4f:
                    09:3d:6c:f4:ed:06:1d:b8:77:16:5d:b8:ba:6e:45:
                    a3:e7:13:b8:69:89:ac:12:7a:e7:83:e9:3b:d1:1f:
                    72:d8:9a:96:51:89:32:56:aa:e8:b1:48:eb:7b:45:
                    78:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:55:B8:90:97:27:7C:8D:06:D5:24:8E:B9:F0:88:99:38:F3:9E:85
            X509v3 Authority Key Identifier:
                keyid:41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/3133302e31322e3139342e302f32332d3234203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:83:a5:4a:05:20:5b:19:c4:d5:ea:ea:8b:4f:d7:a5:a1:4f:
         9d:d6:cf:e8:46:5e:25:1d:17:48:67:1d:fb:aa:0f:ab:85:cb:
         6c:4f:9e:f4:86:1b:c7:46:44:b4:7d:7f:91:01:18:57:62:cd:
         c6:71:c6:0a:af:8b:1c:74:9b:0b:19:fa:7d:eb:87:35:25:ea:
         a6:08:97:04:d5:23:69:91:64:ea:d8:40:c3:24:26:bb:3b:e3:
         3e:f6:02:8c:1b:d9:cd:d2:5e:a3:70:e3:40:19:7b:76:7b:ba:
         02:59:09:d0:d6:a0:9d:8e:3e:2c:0f:d0:50:64:b9:80:73:b1:
         0b:d7:3e:fb:c2:8b:4b:19:84:5f:55:69:59:a0:ae:54:2f:2e:
         63:81:42:de:44:fd:e8:2e:51:37:3e:0a:3d:bc:7e:4a:3f:14:
         ac:6b:3c:49:e6:eb:ae:1a:e0:00:65:85:b8:50:65:2c:9d:20:
         f1:79:5b:60:a7:a2:f6:f0:32:6e:49:c5:83:24:aa:01:03:fe:
         7b:ac:e1:b4:d8:51:5f:92:b4:5c:02:5a:ab:1e:97:61:f9:cb:
         db:00:57:9d:4e:c9:ae:18:37:76:0f:70:4a:f3:5c:66:3d:01:
         39:9e:49:ec:63:cf:f4:f3:f7:b2:a3:f0:3b:39:82:ba:a2:73:
         c1:ea:08:88
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUX0iOMKJ2OUaCAy/iPSTNIQKE4ZUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzY5ZGJjMmVjMTc1NGRhMWRiYWFiYWIxOGE0YzU1OTBk
OWZiZjk0N2Y1MDNiNWZkNjAwHhcNMjUxMDEzMTM1NTQ0WhcNMjYxMDEyMTQwMDQ0
WjAzMTEwLwYDVQQDEyg2OTU1Qjg5MDk3Mjc3QzhEMDZENTI0OEVCOUYwODg5OTM4
RjM5RTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu8KLtnrQVXs
5ZRFt2fGSxk1EGPxqShwCSQwiuL9kSrgaW+dvUOeqI39xEOw6yxAD0isl05DiMSs
PmNULK4pPl81DTeGLCrcP0bNH5ADZIeVeXTJp6ZCCfnJOHDx7NQLRDYCuFDGWWlP
elxRiKYbKSRgz3iDsBn059dcGo6fXevf7jgD1f6V9V0o1REYbBqCVyqHcrYOQtPl
2LqFDXxM5WYWAwx6TicIxPtdR0yN+B2fEDvoWBrDJ5Y6EDuA8wAfS+lEBISj6YrC
7a3qtafjLU8JPWz07QYduHcWXbi6bkWj5xO4aYmsEnrng+k70R9y2JqWUYkyVqro
sUjre0V4DwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFGlVuJCXJ3yNBtUkjrnwiJk4
856FMB8GA1UdIwQYMBaAFEEXFvf96y9xcrzj5h2GyDuCQRH8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQzMDUzZjgyMGY1LzAv
NDExNzE2RjdGREVCMkY3MTcyQkNFM0U2MUQ4NkM4M0I4MjQxMTFGQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzY2MzNmLTM0M2QtNGFjMy1hOTM2LTk4OTU4ZTU2MzBlNi8zNjlk
YmMyZWMxNzU0ZGExZGJhYWJhYjE4YTRjNTU5MGQ5ZmJmOTQ3ZjUwM2I1ZmQ2MC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84MWE0NDU2NjQ1OGU0NTc4YjY3ZWVk
MzA1M2Y4MjBmNS8wLzMxMzMzMDJlMzEzMjJlMzEzOTM0MmUzMDJmMzIzMzJkMzIz
NDIwM2QzZTIwMzEzMTM5MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAYIMwjANBgkqhkiG9w0BAQsF
AAOCAQEAG4OlSgUgWxnE1erqi0/XpaFPndbP6EZeJR0XSGcd+6oPq4XLbE+e9IYb
x0ZEtH1/kQEYV2LNxnHGCq+LHHSbCxn6feuHNSXqpgiXBNUjaZFk6thAwyQmuzvj
PvYCjBvZzdJeo3DjQBl7dnu6AlkJ0NagnY4+LA/QUGS5gHOxC9c++8KLSxmEX1Vp
WaCuVC8uY4FC3kT96C5RNz4KPbx+Sj8UrGs8SebrrhrgAGWFuFBlLJ0g8XlbYKei
9vAybknFgySqAQP+e6zhtNhRX5K0XAJaqx6XYfnL2wBXnU7Jrhg3dg9wSvNcZj0B
OZ5J7GPP9PP3sqPwOzmCuqJzweoIiA==
-----END CERTIFICATE-----
Generated at Fri Oct 31 23:27:04 2025 by rpki-client