Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4a850ed4-4106-3fe5-af86-31e842945a97.roa
File:                     4a850ed4-4106-3fe5-af86-31e842945a97.roa (raw, json)
Hash identifier:          JbpaRN74BsB137ISacs2LbAJ7+XFQ3dXC34cg3rHU9Y=
Subject key identifier:   D8:D3:E5:C1:3D:50:76:68:C6:84:20:C6:91:0F:42:02:DE:E6:DD:58
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858491246B22ABE515BBF14AFA200
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4a850ed4-4106-3fe5-af86-31e842945a97.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     203
IP address blocks:        130.174.17.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:b2:2a:be:51:5b:bf:14:af:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=0a54d0a1-6b24-446e-b098-53ba224f2866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3d:22:a5:ba:77:0d:58:4e:0e:f2:db:9b:72:
                    6e:64:39:58:77:8c:4c:36:39:36:b0:73:25:dd:dc:
                    bb:cd:eb:7a:f6:df:db:42:37:27:b1:a0:af:ea:aa:
                    9b:c9:6a:07:42:e3:b2:0f:f9:67:fc:2b:0e:47:8e:
                    db:a6:9e:0e:ab:f6:cd:a9:dd:c9:d8:7d:07:31:a1:
                    63:15:41:d9:cf:19:df:ae:91:f4:5f:de:69:86:96:
                    dc:76:cd:e3:8c:7f:bb:e4:6d:84:97:c0:9f:b8:54:
                    89:20:41:c7:4e:c3:d9:de:5f:b6:5f:fc:c3:85:4d:
                    e6:eb:49:37:f4:62:1f:10:e2:c8:07:c1:ba:9b:e4:
                    7b:6e:ef:3d:8f:12:b5:93:df:36:70:48:e6:38:18:
                    5a:7d:85:27:17:4b:f9:cb:6d:bf:68:ad:5c:0e:71:
                    51:7d:3b:b8:23:e8:01:bf:0b:61:a9:bb:68:d6:17:
                    7d:ee:22:6c:7e:04:ac:58:bc:19:b3:0f:e6:f4:37:
                    3c:dd:29:2e:cc:05:cf:af:26:56:ff:24:5e:df:eb:
                    48:e0:2d:02:a8:0b:87:fa:8e:af:92:f9:cd:d4:09:
                    f3:09:4d:39:36:08:7f:5e:51:c0:59:cf:ed:16:15:
                    2b:4e:fd:d5:17:d8:62:96:f8:df:52:c3:74:4d:b7:
                    fd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D3:E5:C1:3D:50:76:68:C6:84:20:C6:91:0F:42:02:DE:E6:DD:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4a850ed4-4106-3fe5-af86-31e842945a97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:fd:b7:3d:a9:a6:66:ed:78:2a:f3:7a:78:3d:5e:32:08:c1:
         cf:d2:66:9b:81:5b:30:4e:ca:1d:92:6a:7f:3f:b8:e5:d8:42:
         fe:c3:ea:ff:c8:25:ef:31:79:56:3e:3c:90:dc:d0:a7:9f:19:
         71:f4:b6:7f:f8:1a:90:c9:2b:6b:d2:c7:ba:bd:48:71:86:7c:
         b3:a5:9c:5e:bf:e7:de:8a:db:76:28:29:42:8f:d6:17:05:12:
         38:82:cb:fd:ff:4c:48:88:9d:10:31:82:f8:e1:3c:cf:ce:57:
         ff:b4:46:16:34:ff:b2:3f:1a:4d:d5:f1:f9:4a:e3:e1:a0:1b:
         13:00:f3:a6:29:81:25:53:bd:ac:4b:36:78:d0:3d:c6:7a:c3:
         dd:2d:6a:ec:32:54:89:42:1b:36:5f:cf:4f:30:e4:23:06:91:
         75:0f:62:32:ab:90:0b:57:8c:b4:79:39:b0:28:3d:6e:d0:18:
         40:42:d2:4a:d6:74:12:32:5b:f5:ff:b1:9f:66:8c:0e:d9:f3:
         bb:4a:07:1f:c6:b5:bf:2d:f2:92:23:83:85:69:6e:67:65:56:
         ea:d1:46:62:6f:ca:c7:54:6d:8e:0b:31:be:c0:a7:d4:98:33:
         b3:41:09:7d:7b:b2:f3:6d:ed:f8:db:a2:9c:c4:aa:f1:69:b3:
         d1:3d:02:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:32:31 2025 by rpki-client