Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a04d6b54-d309-322f-bbd5-9ed5f0ea5910.roa
File:                     a04d6b54-d309-322f-bbd5-9ed5f0ea5910.roa (raw, json)
Hash identifier:          dhOI4pNrleFlewLvseBPMv3XAGCIx2+56VAF1DjOeFg=
Subject key identifier:   FE:70:B3:6D:68:5D:FC:F0:DC:6A:85:FB:FD:AE:8E:21:E7:DA:D4:73
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584913AC29ACDCCC94262DEF0540
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a04d6b54-d309-322f-bbd5-9ed5f0ea5910.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     203
IP address blocks:        130.174.86.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:29:ac:dc:cc:94:26:2d:ef:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=8503cd56-e274-4c86-8bfd-abadab681463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1a:a4:ed:12:58:21:62:b0:9b:54:7b:00:cb:
                    4b:c9:3e:de:2e:cd:5c:5a:2d:0a:a7:0e:d0:4a:e4:
                    1e:19:23:a8:0b:fd:21:94:6f:35:a8:e6:43:dd:85:
                    98:2e:c1:4b:b7:ba:ff:37:de:81:06:ea:93:09:8d:
                    25:eb:41:81:67:f3:8e:4b:35:91:a5:72:6f:23:8c:
                    bd:a1:a2:a6:5a:9b:f1:6f:c1:ad:6c:87:7b:3d:cd:
                    82:57:0e:a8:1e:21:a8:4e:f0:06:a7:23:41:3d:cd:
                    04:41:c7:5c:0f:96:fa:03:ab:de:10:c6:a1:75:b4:
                    b0:37:38:a2:36:10:20:9d:12:04:5b:39:ad:73:38:
                    bf:ba:3c:4e:da:bf:07:52:9d:7c:3e:84:72:d6:2c:
                    04:91:b0:f3:d4:b2:a8:38:31:71:f0:07:8a:7b:e1:
                    45:80:f9:fa:e5:41:7d:64:ef:e3:8c:17:85:30:f0:
                    a7:2f:d6:4d:a7:c7:95:3e:8e:c3:79:aa:81:f3:c1:
                    00:6a:b6:56:6a:0d:a4:e9:a1:8e:99:20:98:c3:3f:
                    92:b4:ad:33:ed:76:68:2e:dc:7b:b7:fe:f3:94:d3:
                    42:54:f9:a7:fa:e8:82:73:17:e7:e6:5f:b3:33:ec:
                    b3:29:74:1d:86:ca:5d:10:32:02:25:36:e4:32:22:
                    cb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:70:B3:6D:68:5D:FC:F0:DC:6A:85:FB:FD:AE:8E:21:E7:DA:D4:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a04d6b54-d309-322f-bbd5-9ed5f0ea5910.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:e6:81:57:71:30:38:3a:bf:89:c8:91:3a:f2:19:ea:3b:60:
         da:44:f3:44:d7:90:85:2c:68:be:db:ad:48:df:fa:7a:5b:f3:
         43:b3:eb:51:71:4f:4a:f3:06:bc:57:5b:b3:93:d3:63:7c:d9:
         ce:95:54:5b:d4:53:e1:fa:93:9e:18:70:8a:2f:a2:f6:2e:45:
         e8:6f:03:f4:d6:58:93:93:b1:be:95:83:e3:a5:38:77:f1:5f:
         8a:eb:92:dd:4b:83:0a:38:72:77:87:e0:3c:76:5b:a7:60:33:
         3f:74:23:52:c7:59:89:e4:29:c6:25:f4:54:b0:86:0d:74:76:
         5b:06:73:81:1f:fc:b8:50:40:d0:91:34:33:7f:2f:71:11:d1:
         5c:ba:e6:44:f8:98:02:ca:18:2d:36:12:06:d0:aa:42:d2:1f:
         00:06:63:44:60:36:b6:61:55:45:d9:98:a8:f3:6e:18:42:01:
         e7:38:9f:f3:ed:40:89:ed:9c:ff:95:b3:e9:22:70:ef:5c:77:
         e0:8c:48:9a:af:c0:2c:fb:03:7b:a5:5d:ef:9d:0a:f9:76:98:
         bb:14:3b:c4:e6:3f:62:3d:8b:ee:52:47:a7:e0:77:fc:e2:92:
         f1:76:c3:b5:c1:22:1b:55:cc:56:b2:dd:14:6d:75:e0:a3:ba:
         23:9f:06:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrCms3MyUJi3vBUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk
ODUwM2NkNTYtZTI3NC00Yzg2LThiZmQtYWJhZGFiNjgxNDYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBqk7RJYIWKwm1R7AMtLyT7eLs1cWi0Kpw7Q
SuQeGSOoC/0hlG81qOZD3YWYLsFLt7r/N96BBuqTCY0l60GBZ/OOSzWRpXJvI4y9
oaKmWpvxb8GtbId7Pc2CVw6oHiGoTvAGpyNBPc0EQcdcD5b6A6veEMahdbSwNzii
NhAgnRIEWzmtczi/ujxO2r8HUp18PoRy1iwEkbDz1LKoODFx8AeKe+FFgPn65UF9
ZO/jjBeFMPCnL9ZNp8eVPo7DeaqB88EAarZWag2k6aGOmSCYwz+StK0z7XZoLtx7
t/7zlNNCVPmn+uiCcxfn5l+zM+yzKXQdhspdEDICJTbkMiLL+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP5ws21oXfzw3GqF+/2ujiHn2tRzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTA0ZDZiNTQtZDMwOS0z
MjJmLWJiZDUtOWVkNWYwZWE1OTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5WMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABvmgVdxMDg6v4nIkTryGeo7YNpE80TXkIUsaL7brUjf+npb80Oz61Fx
T0rzBrxXW7OT02N82c6VVFvUU+H6k54YcIovovYuRehvA/TWWJOTsb6Vg+OlOHfx
X4rrkt1Lgwo4cneH4Dx2W6dgMz90I1LHWYnkKcYl9FSwhg10dlsGc4Ef/LhQQNCR
NDN/L3ER0Vy65kT4mALKGC02EgbQqkLSHwAGY0RgNrZhVUXZmKjzbhhCAec4n/Pt
QIntnP+Vs+kicO9cd+CMSJqvwCz7A3ulXe+dCvl2mLsUO8TmP2I9i+5SR6fgd/zi
kvF2w7XBIhtVzFay3RRtdeCjuiOfBkc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:23:00 2025 by rpki-client