Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8a509389-0c08-38b5-a0f7-fc832fca5895.roa
File:                     8a509389-0c08-38b5-a0f7-fc832fca5895.roa (raw, json)
Hash identifier:          JjzMISCuBCxblOQkIEynWi9rsqV0SO/IJiiPuCfNbpQ=
Subject key identifier:   B0:BE:EA:DB:64:81:9C:F5:F7:50:4C:4C:72:24:DD:B6:9C:DA:BA:5D
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858494469423B91D89486AA6CB580
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8a509389-0c08-38b5-a0f7-fc832fca5895.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     64267
IP address blocks:        130.254.98.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:42:3b:91:d8:94:86:aa:6c:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=6e97acd0-8c68-41a4-bd5b-2d9135342495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dc:f2:98:58:5f:ce:7e:45:95:d4:45:31:06:
                    8d:a9:d3:0d:0c:38:89:ba:ef:67:d8:ae:86:e1:f2:
                    f0:80:4c:46:0e:70:5a:e7:96:86:c6:b6:84:ae:6c:
                    aa:92:4d:2c:46:35:72:ca:f0:9c:ce:c2:5d:46:c4:
                    2f:56:75:32:f0:4e:b1:f5:c1:24:85:0f:93:1d:38:
                    fb:cb:91:19:05:fe:54:5b:21:e4:d4:3c:09:ca:9b:
                    94:35:be:9f:46:eb:ae:6b:9f:84:73:ad:02:67:b1:
                    da:f4:7e:80:49:0a:43:5e:37:08:64:57:5c:27:b1:
                    1c:51:df:ee:a1:73:e7:34:2c:59:8d:61:52:21:bc:
                    3a:2f:42:57:48:fa:f5:1d:53:c7:ff:49:23:21:4e:
                    77:3e:83:cc:63:e2:e3:89:ed:59:f8:25:96:23:9b:
                    6e:03:b5:aa:76:62:c7:28:6f:1a:0e:7e:91:ba:b5:
                    85:3a:41:50:58:ba:37:5b:97:e4:6a:70:86:17:28:
                    f4:8e:2e:e4:56:5c:23:5d:9f:0f:7c:27:f5:8e:3a:
                    b4:e7:f9:f7:10:87:26:93:3b:25:4e:79:5e:dd:37:
                    9c:18:b9:6d:1a:10:7b:8a:a1:1d:43:56:f2:09:9a:
                    84:56:10:a0:b6:80:2f:68:f5:1a:94:88:da:2f:36:
                    54:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BE:EA:DB:64:81:9C:F5:F7:50:4C:4C:72:24:DD:B6:9C:DA:BA:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8a509389-0c08-38b5-a0f7-fc832fca5895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:bb:7c:54:c0:90:57:da:8d:b2:cb:c7:27:d7:71:61:c2:ac:
         9d:2f:43:30:d7:67:13:39:83:af:db:4b:5b:90:de:7f:80:fb:
         20:ef:6e:07:b1:a6:0f:7f:11:37:41:8e:b1:9e:03:69:bd:8a:
         c2:8e:98:01:6b:c2:d6:15:26:c4:a4:7f:eb:d9:1b:f2:b4:4c:
         c8:83:71:a4:27:d4:f1:51:e7:a9:de:41:2f:e4:26:fc:59:de:
         00:b4:a1:62:ee:e5:b5:5d:11:4f:cc:02:3e:2c:03:c3:af:8a:
         ff:c6:95:28:88:c6:f9:79:c3:2f:65:4f:a3:fd:d7:b2:88:82:
         19:51:fa:9e:10:51:86:6d:00:61:e0:f2:fd:56:1e:cb:13:0c:
         39:ed:6c:e9:bb:b8:fb:64:b9:b6:d2:4a:1e:48:09:b5:8f:a4:
         05:a9:04:87:d9:04:07:e1:0e:65:2a:fb:ce:16:9d:32:f4:d3:
         72:51:f9:ee:91:72:69:50:45:7b:24:0c:4c:d4:fe:87:c7:de:
         3a:3b:55:e0:2b:f7:ec:2f:15:ad:72:31:b7:8b:a6:a2:32:fd:
         4e:a0:3c:53:c2:25:0f:c4:b4:ae:f9:df:f5:38:da:6f:57:af:
         17:30:49:18:92:b9:67:4e:4f:bc:bc:0f:c4:c9:78:14:db:44:
         09:dc:a8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:05:41 2025 by rpki-client