Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3d62d202-cf6b-393a-aa34-e209358d0373.roa
File:                     3d62d202-cf6b-393a-aa34-e209358d0373.roa (raw, json)
Hash identifier:          WwoGgg6gzzQUUtuLN2Z2WtCyGBObJQsiWXB6WPCv49I=
Subject key identifier:   2C:6A:9E:3C:C1:F8:3B:99:D1:2F:37:87:71:66:2C:DB:CB:00:D7:F2
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584913AC29033AD2B8CBAC05AE80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3d62d202-cf6b-393a-aa34-e209358d0373.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     203
IP address blocks:        130.174.83.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:29:03:3a:d2:b8:cb:ac:05:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=59ed3d9f-b9e5-4ee6-bc04-b6117463a660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:74:16:29:d1:38:57:13:eb:83:1a:fa:c0:55:
                    39:3c:e6:a8:4b:20:1f:6a:e7:b6:30:19:94:ca:83:
                    9c:b9:d8:13:f4:84:be:26:05:8d:c2:0e:8f:06:56:
                    d5:06:b3:b5:c3:30:4f:1a:cd:f2:21:95:18:1e:db:
                    29:0e:fb:da:3a:44:1d:88:cd:b9:98:b4:92:55:66:
                    2e:77:47:03:f7:e3:f2:9d:62:ab:02:d4:c9:6b:9a:
                    be:6f:3e:31:55:d7:05:cb:88:6b:86:4d:57:7f:8f:
                    e5:9e:56:c8:4d:41:8b:ba:b2:ef:b2:de:45:ff:cd:
                    04:57:01:03:47:b6:f2:b8:f9:3d:10:45:c5:bc:a6:
                    ab:24:2d:e3:ea:d2:21:42:e1:df:90:52:0c:a0:6b:
                    62:bd:71:f3:c7:92:6c:5d:c7:ef:2f:cc:e6:0f:86:
                    4a:44:99:3a:0c:90:ae:d5:8d:3e:63:3f:5a:2e:54:
                    d9:57:cf:35:16:3f:f2:d0:8c:38:dc:fb:34:95:f4:
                    a4:08:fd:8d:78:71:fb:ec:43:4d:66:75:88:ee:a8:
                    d5:f6:0d:9e:9d:99:47:07:ce:4d:89:87:39:1b:54:
                    94:ef:05:ba:fa:b8:a3:e0:bf:37:f7:54:d6:de:12:
                    ee:e5:00:1e:a0:ad:bd:5f:e8:40:71:23:64:c6:65:
                    a8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6A:9E:3C:C1:F8:3B:99:D1:2F:37:87:71:66:2C:DB:CB:00:D7:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3d62d202-cf6b-393a-aa34-e209358d0373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:11:94:9a:83:49:d0:b7:2a:1c:d9:c1:f9:1b:4b:fe:01:ce:
         17:39:2d:97:88:5f:5f:7e:e9:31:07:f0:8c:1f:32:ac:60:73:
         55:1e:aa:bd:3b:46:0a:6f:75:7e:3e:c9:21:d6:19:93:52:e9:
         ad:41:5d:37:2f:36:1c:fd:c5:cc:c1:d4:58:42:f7:73:e0:80:
         15:46:0a:10:4e:ce:69:7f:1b:3a:71:57:22:3b:2a:81:37:92:
         1a:91:7b:4e:4c:1c:22:6b:b7:dd:be:bf:f9:ee:b8:15:88:da:
         55:b5:c3:46:71:49:6a:8f:af:5e:7e:5a:47:98:d6:a4:71:07:
         e4:9f:d7:9c:0e:8f:f5:1b:68:04:58:51:b3:3c:66:ec:8e:fe:
         67:2a:ad:62:4f:3c:da:e2:ac:04:8a:83:1c:dc:d5:7f:e0:ab:
         79:d5:bb:0c:6b:35:08:81:b7:33:1a:b2:d8:64:12:88:0c:c9:
         55:e9:9d:86:1a:1c:0a:35:e2:7e:c2:25:e9:c1:b5:2a:c9:16:
         5f:96:e7:c2:30:25:08:e6:07:a2:1d:eb:9d:c1:dd:9a:77:a3:
         75:25:b4:b6:62:64:b8:25:80:19:d2:0c:2a:8b:d0:f6:52:6d:
         fd:53:00:5d:6d:67:1e:be:e1:7e:0c:be:fb:50:4a:e2:5c:76:
         af:b7:c4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:16:24 2025 by rpki-client