Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d7bb3f29-eb6f-36f3-a315-fce87cd1e452.roa
File:                     d7bb3f29-eb6f-36f3-a315-fce87cd1e452.roa (raw, json)
Hash identifier:          jX8g5XhIDyEyfCU7KwMIr15DRCUQwI/rDYkqLmdk+Vs=
Subject key identifier:   64:52:0B:EB:B3:96:65:A4:3C:AD:09:D2:CB:78:6E:15:CC:DE:91:2B
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584913AC24C44BAA25A9AC9F1D80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d7bb3f29-eb6f-36f3-a315-fce87cd1e452.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     203
IP address blocks:        130.174.96.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:24:c4:4b:aa:25:a9:ac:9f:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=eb7a043a-6544-4d54-b012-6893d1b395bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:11:84:e7:57:f8:1d:1e:cb:0c:03:5a:99:04:
                    84:10:e2:86:b9:70:45:8c:ea:9e:24:46:3e:7d:16:
                    4c:74:b8:a4:82:59:74:54:78:fc:9e:92:e1:e9:15:
                    5a:8d:6f:d9:ac:ae:fe:9a:f2:4f:7e:25:66:e8:16:
                    4f:47:c7:05:e2:3e:46:46:00:e3:39:d3:16:c0:17:
                    5a:7f:76:33:46:b5:fb:cd:73:4d:cf:c5:86:82:1d:
                    8d:8c:0d:d0:0a:7f:dd:98:37:ac:13:44:f5:3f:f8:
                    6a:dd:bb:36:bb:5a:ff:52:2d:89:6a:94:b1:85:f9:
                    1c:43:84:68:71:b7:32:74:fd:8e:5f:b6:11:4e:24:
                    f1:d6:55:38:27:e3:92:50:86:f6:69:be:c8:0d:15:
                    2e:fc:7d:10:a9:3e:01:45:23:8f:85:ef:a8:d4:45:
                    ba:95:48:27:d6:f7:2c:ef:65:ac:35:67:03:6d:21:
                    22:f5:d2:a5:97:1e:3c:10:1d:45:fb:70:35:4b:d6:
                    dc:d1:ba:ee:88:d2:0c:18:27:23:1f:c0:53:c6:f2:
                    72:a2:9d:7e:f9:9f:9f:8c:a6:b4:6e:c4:63:e5:eb:
                    df:f4:e0:61:33:3a:31:42:41:a8:af:1f:0a:d1:8e:
                    cb:5b:3a:17:0f:0a:46:f9:0b:a3:ba:34:d0:62:6e:
                    5a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:52:0B:EB:B3:96:65:A4:3C:AD:09:D2:CB:78:6E:15:CC:DE:91:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d7bb3f29-eb6f-36f3-a315-fce87cd1e452.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:2b:78:af:85:3a:86:0d:56:61:c8:0f:b0:cd:ec:57:5e:01:
         e1:c1:95:c1:06:f0:7d:5a:aa:81:23:2f:26:b5:a4:47:93:25:
         51:06:4b:d5:77:16:64:6a:b6:49:15:6a:23:58:66:66:36:ff:
         3a:60:9a:af:e8:ff:eb:59:9d:45:fd:15:cf:f4:d3:05:ad:64:
         c3:89:d2:cc:ea:bf:a6:93:20:3f:00:9c:b3:b7:62:c6:0e:d1:
         fb:d1:1c:84:74:8e:e5:b1:7c:e8:09:98:65:92:b9:c2:41:9c:
         2c:9f:2e:48:d0:b9:96:1a:c9:0a:b8:16:87:06:47:96:2c:57:
         08:a5:40:1a:0f:06:53:fa:cb:e4:6a:ea:9f:8a:fb:50:2f:b3:
         f0:98:ef:2b:c0:d9:66:11:84:82:b4:db:a3:d6:e8:05:5c:9a:
         41:27:69:0c:14:1c:0d:f2:f1:bb:e0:8b:b9:a6:2f:a5:64:06:
         cb:a3:dc:5f:71:5f:3d:36:c4:e7:ea:43:3a:c0:fa:16:44:f4:
         9f:8d:d4:88:26:e5:b4:c6:3e:70:a8:66:ce:d2:b6:67:73:c0:
         05:ef:46:07:e0:01:83:8f:1d:82:9d:38:8d:f0:e1:65:12:aa:
         5f:f8:55:65:5b:2f:e0:b2:7d:cf:3c:e2:a9:61:f1:bc:20:d6:
         61:67:99:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrCTES6olqayfHYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk
ZWI3YTA0M2EtNjU0NC00ZDU0LWIwMTItNjg5M2QxYjM5NWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBGE51f4HR7LDANamQSEEOKGuXBFjOqeJEY+
fRZMdLikgll0VHj8npLh6RVajW/ZrK7+mvJPfiVm6BZPR8cF4j5GRgDjOdMWwBda
f3YzRrX7zXNNz8WGgh2NjA3QCn/dmDesE0T1P/hq3bs2u1r/Ui2JapSxhfkcQ4Ro
cbcydP2OX7YRTiTx1lU4J+OSUIb2ab7IDRUu/H0QqT4BRSOPhe+o1EW6lUgn1vcs
72WsNWcDbSEi9dKllx48EB1F+3A1S9bc0bruiNIMGCcjH8BTxvJyop1++Z+fjKa0
bsRj5evf9OBhMzoxQkGorx8K0Y7LWzoXDwpG+QujujTQYm5azwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGRSC+uzlmWkPK0J0st4bhXM3pErMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDdiYjNmMjktZWI2Zi0z
NmYzLWEzMTUtZmNlODdjZDFlNDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG4reK+FOoYNVmHID7DN7FdeAeHBlcEG8H1aqoEjLya1pEeTJVEGS9V3
FmRqtkkVaiNYZmY2/zpgmq/o/+tZnUX9Fc/00wWtZMOJ0szqv6aTID8AnLO3YsYO
0fvRHIR0juWxfOgJmGWSucJBnCyfLkjQuZYayQq4FocGR5YsVwilQBoPBlP6y+Rq
6p+K+1Avs/CY7yvA2WYRhIK026PW6AVcmkEnaQwUHA3y8bvgi7mmL6VkBsuj3F9x
Xz02xOfqQzrA+hZE9J+N1Igm5bTGPnCoZs7StmdzwAXvRgfgAYOPHYKdOI3w4WUS
ql/4VWVbL+Cyfc884qlh8bwg1mFnmSs=
-----END CERTIFICATE-----
Generated at Thu Apr 10 00:20:15 2025 by rpki-client