Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ea69505a-3a5d-34e9-9501-48af502ea22e.roa
File:                     ea69505a-3a5d-34e9-9501-48af502ea22e.roa (raw, json)
Hash identifier:          zbFrshmFzXk30OTKpYWyq5LhMvoMbXZAswhcRTVntck=
Subject key identifier:   FE:1B:01:70:2B:A6:00:BF:5F:A1:99:46:8D:56:31:B6:52:68:88:6F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858491246C4AC2918FC7F5DEA2140
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ea69505a-3a5d-34e9-9501-48af502ea22e.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     203
IP address blocks:        130.174.56.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:c4:ac:29:18:fc:7f:5d:ea:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=c767114b-6edd-44cd-b99a-a5229a3e53ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:39:9f:51:87:ce:81:1b:53:a8:32:0f:96:67:
                    9e:0f:da:9d:d8:61:c1:2e:44:f8:9e:c5:6d:a6:08:
                    08:b2:3a:a5:ba:60:e7:e1:c0:25:84:af:14:1c:7c:
                    5a:82:d1:db:a2:8b:25:d6:eb:2d:62:f1:c0:b2:79:
                    90:62:bd:88:6d:d9:62:03:55:75:04:4b:30:30:56:
                    c1:02:32:9f:ce:0b:cd:3f:bc:6c:b1:df:91:9d:ac:
                    6f:f5:3a:3f:ed:f9:0f:e2:02:a4:d8:f4:a2:aa:ad:
                    50:8c:b2:d8:73:af:9c:c6:38:fe:c2:40:25:e2:36:
                    ff:57:01:df:e0:b8:d4:d4:8c:9c:de:d1:e2:54:6f:
                    2d:42:c8:3f:e0:79:b1:f0:1c:74:fd:77:a0:33:4b:
                    7c:af:d0:62:8e:f6:fe:e5:f7:6d:09:2f:9a:99:28:
                    e6:3c:f4:cf:92:74:a9:77:79:64:a9:a8:d1:0e:71:
                    bc:e0:c4:e9:bf:c4:56:88:0a:20:b1:0e:61:76:2d:
                    a5:34:2f:84:29:05:f7:19:86:8d:5c:9a:3d:ae:fb:
                    51:02:fa:84:18:d8:cd:ee:92:97:4d:29:d3:b2:2d:
                    cf:89:80:26:fc:a7:21:7a:e8:52:92:41:be:cd:cb:
                    54:6b:4a:2f:6c:b3:4c:96:6a:34:04:92:07:8a:97:
                    9f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1B:01:70:2B:A6:00:BF:5F:A1:99:46:8D:56:31:B6:52:68:88:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ea69505a-3a5d-34e9-9501-48af502ea22e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:2b:e4:f8:c8:8e:d8:5c:f4:4f:a5:75:4d:83:71:dd:85:01:
         be:fe:3f:4b:0c:6a:5a:ea:d3:1b:b8:47:4c:5f:78:e9:7a:5e:
         74:a0:b2:02:f0:22:ab:5d:9a:24:d1:ff:36:3b:3f:f8:7c:a6:
         cd:4b:05:43:34:75:79:0f:63:a6:be:e0:32:5e:ab:2f:70:b5:
         71:d1:3e:6a:36:db:47:f5:20:14:96:3c:55:37:94:90:22:36:
         74:6c:f3:6a:59:b0:26:b4:2d:17:04:25:2c:3d:f0:73:98:78:
         33:b3:cd:ec:e4:44:f6:19:cb:c9:84:9c:ed:88:39:1c:e9:c8:
         2d:95:3a:32:ca:1c:e7:d6:26:97:c5:f2:a0:13:6b:b2:4d:c6:
         80:f9:2d:57:69:f5:d8:62:f3:55:27:c0:6d:f0:cd:fd:ac:3a:
         19:83:6e:79:be:bf:91:3b:02:b3:5e:a5:85:b7:41:4a:5a:d9:
         82:fa:a3:dc:0d:a6:73:2d:81:cc:d3:06:6d:22:76:29:81:ca:
         24:6a:9c:18:27:76:ec:de:bd:d7:15:7d:85:9e:f8:5d:20:73:
         cd:f8:a6:b9:c3:f6:e5:7a:57:28:c3:e2:8a:c2:98:32:6c:89:
         c7:3e:a2:df:41:32:ed:4c:02:d5:98:57:3c:50:a0:bf:7d:f1:
         83:f2:dd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:33 2025 by rpki-client