Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/12f21b5a-6e5d-339e-9173-6bd6aa699b77.roa
File:                     12f21b5a-6e5d-339e-9173-6bd6aa699b77.roa (raw, json)
Hash identifier:          yeQ4jyNcPKMP/THLNY3dPIiAbiJSZfbGCDu0/lHEdZQ=
Subject key identifier:   C6:A2:3C:E8:41:C6:58:82:B5:89:C4:FD:11:48:95:48:55:7E:CC:D6
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F43285848E9CBF233D49180EEC6765C80
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/12f21b5a-6e5d-339e-9173-6bd6aa699b77.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     54600
IP address blocks:        130.51.112.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:f2:33:d4:91:80:ee:c6:76:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=1663fac4-b8c4-493b-99a6-be01a3d55af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:57:ce:da:39:4b:9a:ec:ad:43:7e:cf:bd:ad:
                    3f:99:af:3c:40:38:b2:00:c2:dd:09:9f:ed:a9:26:
                    11:4a:cd:69:a3:fa:94:42:80:c2:b5:11:0a:02:b7:
                    a7:94:80:1c:16:b9:01:07:8d:74:88:59:75:cd:b7:
                    bc:c3:4d:bb:1d:5c:ca:04:10:f6:4e:e8:47:cf:af:
                    e1:ae:fb:3d:98:33:cd:9b:3b:64:e6:9b:2c:4b:f5:
                    a8:e9:76:45:bc:a9:2e:f1:36:90:1a:88:93:24:09:
                    21:e2:d5:8f:f4:e8:c7:b9:60:0e:1f:f2:da:dd:31:
                    1d:54:b4:1f:68:df:4a:09:d9:1d:3b:27:44:2a:4e:
                    07:32:ae:ad:02:e7:70:35:ac:f8:0a:36:93:04:ec:
                    5e:8e:2a:9a:7a:41:2a:74:18:04:ca:3f:e6:df:94:
                    7a:2e:34:e4:3a:14:6e:38:12:f8:f4:04:71:d3:c2:
                    98:ca:58:00:a4:1f:dd:59:2c:73:b6:d5:20:0a:40:
                    98:3b:4c:81:45:8c:e1:5e:21:12:64:c6:01:4e:d5:
                    6b:2f:08:36:26:6e:c3:8e:55:c6:09:df:b4:ea:ee:
                    03:3f:dc:06:9f:9e:ad:4f:20:c1:86:65:9b:fc:71:
                    94:a3:3f:3e:a4:57:c3:01:cc:c0:f7:40:10:d1:38:
                    c5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A2:3C:E8:41:C6:58:82:B5:89:C4:FD:11:48:95:48:55:7E:CC:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/12f21b5a-6e5d-339e-9173-6bd6aa699b77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:da:cd:d6:12:e3:2a:99:ed:4a:63:ec:14:40:ba:89:17:3b:
         ac:e6:3c:22:09:17:c1:40:d6:c7:b5:3d:ce:7e:5d:80:79:31:
         cb:5c:9b:a9:1d:d1:94:cb:a5:33:96:4b:09:44:67:70:9d:e5:
         46:46:bc:ea:bc:3a:02:e8:f0:9c:69:36:a1:56:9a:07:c2:c6:
         d8:e2:46:5e:a7:ad:53:68:f2:4e:db:a1:2e:c8:64:6d:64:86:
         25:da:63:db:86:f4:a5:01:95:7f:78:31:36:11:3f:81:25:87:
         99:8f:d4:8d:b3:d7:b7:23:34:69:bf:c7:34:5e:c5:07:7c:d1:
         1b:ff:60:ba:7a:f5:c4:f6:7b:51:64:c2:a3:71:97:c7:a9:ad:
         7a:bd:70:d5:d6:23:6f:eb:ca:02:a9:60:90:02:be:a8:51:90:
         56:d1:65:60:fc:16:de:ba:c5:b6:e5:16:cc:2a:56:87:21:30:
         9d:10:8e:1b:d4:ab:ca:ee:c2:01:75:04:bb:63:4a:ad:aa:e7:
         d9:06:2d:54:f5:dc:3a:d5:65:ff:9e:6d:aa:dc:d9:7f:5c:ac:
         cd:6b:69:cf:57:f4:d8:1c:b5:dd:6e:ce:0d:77:ea:99:a6:94:
         de:83:e6:3f:e9:af:e0:89:c4:c4:e1:dc:cd:7f:27:7e:80:29:
         c4:38:c7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:41 2025 by rpki-client