Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5/8cd94caf-de10-3dec-a3b0-dab0fd907b6a.roa
File:                     8cd94caf-de10-3dec-a3b0-dab0fd907b6a.roa (raw, json)
Hash identifier:          XYq95L4/UEjkNThkwgEoigftHqaSDeJ1TrNBwlGbeXw=
Subject key identifier:   68:D8:E2:1F:65:5E:FA:54:C2:65:D5:CF:AC:95:E4:14:69:75:36:20
Certificate issuer:       /CN=0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5
Certificate serial:       010D0C9F432858489340A7D708C9D672A400BEC0
Authority key identifier: F4:84:DA:23:24:5E:15:9E:3F:4F:82:F2:37:8E:CB:F9:BB:3A:4D:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5/8cd94caf-de10-3dec-a3b0-dab0fd907b6a.roa
Signing time:             Fri 17 Jan 2025 14:00:53 +0000
ROA not before:           Fri 17 Jan 2025 14:00:53 +0000
ROA not after:            Thu 17 Apr 2025 13:00:53 +0000
asID:                     14041
IP address blocks:        130.253.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:40:a7:d7:08:c9:d6:72:a4:00:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5
        Validity
            Not Before: Jan 17 14:00:53 2025 GMT
            Not After : Apr 17 13:00:53 2025 GMT
        Subject: CN=03af694a-38e7-477d-affb-87b6954ec60f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4f:f5:4b:98:fc:43:18:0d:e0:94:2c:a4:7a:
                    b7:6d:ca:48:1d:ac:ce:21:43:a4:e5:0c:ff:c3:55:
                    ed:c4:62:b7:74:98:d7:01:b1:94:8d:8a:6a:9f:84:
                    02:72:c8:ee:9c:39:ea:c5:f0:69:6f:0c:25:33:af:
                    c6:e4:7c:a2:5a:d2:13:3f:ab:03:58:50:41:08:b4:
                    01:8f:76:cf:db:81:7d:f3:3b:da:6d:98:b6:2d:6d:
                    96:06:5f:9d:fa:f3:68:48:85:54:28:b3:7a:1c:39:
                    09:8a:b6:e0:41:9c:45:66:01:7f:c7:3f:31:ff:2f:
                    8f:6f:85:29:85:5c:09:f9:a6:92:4a:36:7b:f8:42:
                    34:37:1d:3b:93:ba:c3:9d:31:70:75:e4:1e:97:aa:
                    1a:65:0c:9f:e5:a9:b2:51:66:3e:b2:c3:96:75:f6:
                    65:f5:6b:b1:e9:1f:19:2c:3b:5d:ef:46:30:a3:72:
                    d3:b9:72:26:2d:1e:32:67:29:bd:a0:7a:1d:9d:d4:
                    58:7e:69:ef:52:94:12:84:0f:f6:d7:84:a5:22:45:
                    0e:bd:dc:31:f9:7a:17:15:ce:a9:19:ce:a4:85:db:
                    48:a7:4b:7c:42:b1:80:d1:07:51:1f:85:e8:4d:25:
                    05:34:5f:a3:ac:12:e7:90:ec:22:fa:7b:a8:c4:de:
                    e3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D8:E2:1F:65:5E:FA:54:C2:65:D5:CF:AC:95:E4:14:69:75:36:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5/8cd94caf-de10-3dec-a3b0-dab0fd907b6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5/0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5.crl

            X509v3 Authority Key Identifier:
                keyid:F4:84:DA:23:24:5E:15:9E:3F:4F:82:F2:37:8E:CB:F9:BB:3A:4D:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e4c85d8-0ac3-43fe-bb7f-b6b75a61f8d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.253.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:4b:cd:d3:25:e4:07:53:3f:79:11:d0:25:85:91:59:32:e1:
         e7:21:79:31:a3:50:d7:c8:3d:21:1f:26:1d:b7:06:5e:60:c5:
         a6:0d:05:e1:27:05:e6:49:41:13:29:2f:3f:11:00:e0:8d:53:
         d5:2d:4a:37:57:41:20:4b:40:34:2c:83:e5:74:28:b6:de:84:
         5d:a9:24:6f:7b:9d:cc:4e:6f:54:73:77:f2:e9:96:c6:6e:9d:
         b8:74:02:6c:d3:28:24:e0:3d:7c:e3:4e:b7:79:de:f9:37:c8:
         38:1d:00:25:cc:e7:61:00:33:cf:e2:1f:e4:3a:26:83:b1:8b:
         4a:66:10:5b:a1:34:c8:6c:fe:21:46:5a:d7:61:e6:aa:26:5f:
         ce:81:15:2a:36:a8:3d:ed:89:fd:16:3a:27:ce:e8:81:a3:24:
         d8:77:ed:17:94:65:fe:8c:1a:2e:7e:e5:35:14:79:b0:53:bd:
         11:aa:15:1e:21:c0:82:08:5a:78:ef:49:47:0d:40:07:1d:b5:
         7e:14:c7:2c:6b:80:b6:fd:ec:1b:6e:53:f0:df:74:cd:5d:d0:
         19:37:19:11:ae:30:af:13:3a:f8:30:1d:86:23:72:42:15:fa:
         a2:27:1a:a8:de:4c:45:0c:6f:7f:17:6a:de:6f:7d:79:2c:43:
         78:b3:47:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:08:08 2025 by rpki-client