Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/39009587-c96c-32a1-845b-d1d7202f20ba.roa
File:                     39009587-c96c-32a1-845b-d1d7202f20ba.roa (raw, json)
Hash identifier:          UweHbVuQNGVEHDtjI9q4XpbbKTN+dCcXJ3tqHHBA/EM=
Subject key identifier:   61:BA:98:43:EC:7A:77:92:33:05:02:59:59:A5:FD:DE:C5:AE:9F:2F
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F43285848797070DE6C5504CB1399B600
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/39009587-c96c-32a1-845b-d1d7202f20ba.roa
Signing time:             Wed 08 Jan 2025 08:06:15 +0000
ROA not before:           Wed 08 Jan 2025 08:06:15 +0000
ROA not after:            Tue 08 Apr 2025 07:06:15 +0000
asID:                     21928
IP address blocks:        205.251.130.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:79:70:70:de:6c:55:04:cb:13:99:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Jan  8 08:06:15 2025 GMT
            Not After : Apr  8 07:06:15 2025 GMT
        Subject: CN=d1ba7bf3-f5dd-4fe2-8945-94a97690ee7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:73:af:48:60:a2:2b:d8:52:3f:b0:46:bb:4c:
                    f9:b9:99:23:3b:db:10:ed:a8:3a:5b:70:77:18:70:
                    86:90:cf:f8:ae:4d:72:7e:67:ed:0f:61:6d:00:a4:
                    63:cb:8c:89:bd:29:f6:3f:f7:8b:47:47:d0:55:e2:
                    1e:7b:19:3f:b4:b3:a6:ff:55:ed:25:a7:f0:32:a3:
                    d9:9c:fe:22:5f:07:71:28:6b:2a:44:ef:c6:11:b2:
                    ea:36:07:36:06:02:e8:f6:64:7d:9c:15:cf:ce:56:
                    30:80:a8:52:56:34:3c:f7:4b:8e:4a:b7:52:f8:6f:
                    9c:78:33:5c:c5:56:6b:b4:18:20:3c:ff:fb:49:fe:
                    f1:fd:03:e5:0d:8a:ba:a4:6f:33:3d:42:b1:b1:93:
                    d5:c0:0d:aa:83:4e:d5:93:d9:c5:c7:d3:32:ea:c1:
                    29:92:1a:af:bc:06:17:cd:23:6d:a9:8b:6f:73:6f:
                    f8:c3:14:f3:8f:b8:14:37:6d:0f:ff:a0:17:64:eb:
                    a8:6c:be:a7:da:e9:b6:de:2f:40:59:a6:98:84:23:
                    b9:70:e1:87:67:29:f9:d4:24:2b:96:3f:df:a9:63:
                    a9:67:93:02:c2:a8:4a:4b:50:cb:68:58:ba:46:f0:
                    87:c7:55:fd:76:c1:38:b1:68:54:20:93:fc:3d:7a:
                    21:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BA:98:43:EC:7A:77:92:33:05:02:59:59:A5:FD:DE:C5:AE:9F:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/39009587-c96c-32a1-845b-d1d7202f20ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:4a:c9:a3:23:01:1b:c4:a8:dc:fa:fd:6d:a6:75:c8:36:f8:
         f6:49:15:f8:2e:45:a7:c7:51:a9:a4:4f:0c:50:df:e9:f4:4a:
         a0:71:c4:23:74:b3:27:3d:62:20:09:cb:35:c8:4e:e4:8e:b4:
         a2:75:35:0a:51:2b:b9:ea:8d:80:cc:3e:64:74:fb:24:94:28:
         32:98:d4:7d:dc:8d:3f:0d:0b:b8:5b:26:8a:24:ee:79:b6:cc:
         1e:dd:07:a7:ea:a6:f5:3a:11:58:ba:03:9e:78:c6:0b:00:bc:
         15:85:72:c0:80:67:b9:ec:ab:ad:34:6c:67:aa:3c:84:83:f9:
         08:c9:e2:c1:ee:b0:b3:a7:81:2a:81:14:18:e7:93:65:b3:53:
         de:5b:b5:1d:f6:4b:c1:1e:63:42:38:ef:c1:f7:2e:18:56:fc:
         2d:42:19:9a:0d:d2:56:c7:7a:10:62:84:d0:d7:da:0d:17:89:
         e1:f9:0f:9b:9d:12:e7:13:02:4f:4f:3e:ff:38:d7:31:5e:0a:
         1b:7b:ec:9b:1e:2e:e5:88:51:2c:a1:0b:43:d3:51:1e:86:63:
         24:4b:0f:5b:87:ee:81:ff:3a:bf:68:15:04:3d:2e:7a:7e:0f:
         16:67:a6:d5:82:4b:3b:6c:d0:bf:81:42:83:0d:22:c6:9f:5e:
         42:97:76:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:51 2025 by rpki-client