Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/32ada981-fe82-383c-a695-f1d4991055d2.roa
File:                     32ada981-fe82-383c-a695-f1d4991055d2.roa (raw, json)
Hash identifier:          L9tTwyLAVX8INDMsgsLdZB2RVc2rBtt5wXaT6c6ijDs=
Subject key identifier:   C2:14:3B:0F:D5:D1:CD:E5:C6:66:0A:82:E3:EE:EC:61:E0:3F:2E:25
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584913AC27624F04C3ABA03032E0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/32ada981-fe82-383c-a695-f1d4991055d2.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     3360
IP address blocks:        130.174.75.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:27:62:4f:04:c3:ab:a0:30:32:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=5b23b778-b87c-48ca-aec9-8a40f2ff0ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f9:4d:0d:74:5b:97:ef:ca:8a:9e:59:ac:71:
                    dd:18:f0:af:2c:58:b7:9f:09:59:b4:87:bc:12:e9:
                    31:fb:02:f4:ce:cb:de:8c:c3:8f:18:54:32:07:87:
                    1d:15:2f:8f:64:45:b2:2d:9a:73:a6:89:21:22:48:
                    dc:c5:de:f3:ba:89:72:44:d1:24:25:fa:21:5f:9f:
                    48:fc:62:79:ab:d0:65:74:8e:01:e7:3c:78:b4:0a:
                    c9:5c:02:1f:9c:86:46:48:36:94:3d:ba:ba:91:7e:
                    b7:9c:05:65:20:7f:e0:00:71:28:60:b2:9c:09:f6:
                    f7:76:b2:a5:8a:fa:22:73:12:5e:9d:a4:a4:d8:a3:
                    8d:58:99:ed:4e:f6:cf:a0:9e:db:c4:df:ab:6f:c6:
                    d9:ef:c7:5d:02:8d:a5:93:7d:97:85:17:b8:db:e5:
                    fb:47:c2:cf:65:14:c8:54:7f:54:88:cc:62:ee:8d:
                    fe:e9:61:2f:1a:4d:ab:3d:1c:94:96:71:14:a3:11:
                    00:20:91:12:6e:23:c0:52:6c:b0:32:e7:b6:8e:0c:
                    51:ac:a9:3f:2c:2f:93:d4:34:63:7a:02:de:bb:66:
                    46:29:49:f9:f3:7f:e7:f7:30:ae:ed:e9:a7:34:37:
                    b4:dd:8a:09:f3:89:d3:7d:79:cf:02:82:79:d6:10:
                    e4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:14:3B:0F:D5:D1:CD:E5:C6:66:0A:82:E3:EE:EC:61:E0:3F:2E:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/32ada981-fe82-383c-a695-f1d4991055d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:af:b7:12:53:7d:e8:e7:17:f3:ed:77:44:25:b7:06:dc:43:
         68:5b:73:4d:b3:2a:a2:95:80:69:60:f9:e2:91:60:13:f6:e4:
         47:af:ba:62:39:98:91:99:d7:b9:99:3c:e2:7b:f0:d1:b9:46:
         16:dc:57:2e:bc:a3:96:16:ab:b7:e1:54:38:66:26:d5:41:25:
         e1:77:9e:a1:d4:82:7a:86:7c:ef:22:2e:eb:58:32:ec:13:ba:
         08:e5:c0:72:71:41:f5:ab:23:7f:4a:c9:dc:2c:3d:d7:95:cc:
         d2:95:e0:3e:de:4d:01:2c:a8:fa:d4:62:c7:c7:00:15:20:d8:
         f8:67:53:84:49:1b:fe:e3:0c:67:9e:7d:b3:f9:cf:50:a5:88:
         3c:42:50:09:36:58:ad:8e:4b:a9:66:e9:6d:c2:01:26:cb:f5:
         e4:54:d2:ba:4e:78:d0:1c:80:8b:7b:a5:6c:ca:36:53:0c:8e:
         b2:1d:4a:99:24:96:95:3e:3e:f4:27:a1:c1:04:89:41:e8:5b:
         43:a0:ae:e0:3d:08:68:bd:88:92:3b:12:8e:7b:3a:87:50:f4:
         79:5f:3a:03:6d:c7:6a:41:89:a6:97:df:7a:5f:6f:6a:e8:e9:
         a7:cb:c6:04:76:08:8c:88:28:3d:f3:3f:bb:3b:c4:52:20:34:
         57:9c:00:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:07:45 2025 by rpki-client