Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/72be9948-9cba-369c-abf7-d341e95269bd.roa
File:                     72be9948-9cba-369c-abf7-d341e95269bd.roa (raw, json)
Hash identifier:          QFse61zlatkbouyesR999hae3BlS7aB/hibQ1NnUFAU=
Subject key identifier:   16:70:CA:8F:C9:D9:CE:95:73:89:31:09:B9:FC:C4:4F:DB:96:3C:23
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328584851A56BB61D5A35D445538580
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/72be9948-9cba-369c-abf7-d341e95269bd.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     8987
IP address blocks:        130.137.221.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:6b:b6:1d:5a:35:d4:45:53:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=de7c8cfe-64ed-4237-8dd4-83889e26df6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:69:b6:38:f2:1e:40:db:32:d9:10:70:4c:62:
                    ce:fc:64:36:b0:44:89:b7:39:9d:3a:85:d4:10:e9:
                    16:f9:66:f6:b0:f9:45:ff:34:4b:52:f7:4e:1f:7c:
                    59:45:b1:15:52:25:49:11:8e:3b:b8:b8:2e:37:06:
                    52:96:38:ae:0b:8f:06:49:08:44:3c:2b:3e:93:5b:
                    47:e6:83:2b:32:96:3e:6e:43:15:66:72:1e:98:56:
                    ae:95:6e:80:1c:7b:b7:19:a6:96:72:71:6b:9e:65:
                    d2:87:e0:a2:32:24:9d:f8:32:74:a0:a6:26:58:cb:
                    b9:71:e0:46:a4:57:cf:5c:18:12:4c:6a:a8:8c:22:
                    47:a0:0c:19:7d:1c:7d:cf:20:47:f0:d9:63:3b:96:
                    97:29:f9:3c:62:fd:1e:dd:9f:d0:e7:28:03:4e:74:
                    05:78:ba:b0:f0:8e:d8:e3:ba:34:ec:8e:df:17:01:
                    3e:cc:84:49:1d:3d:2c:88:f3:db:7f:66:19:45:32:
                    49:a1:a3:02:ed:27:a2:8e:84:89:13:5d:14:2e:55:
                    e8:11:ce:80:d2:b7:5f:29:9e:a8:4a:6c:f2:54:e2:
                    18:25:e2:71:90:8c:7f:58:db:87:67:0c:b8:79:38:
                    62:c8:9c:8e:dd:28:76:ee:71:03:2c:b4:40:bf:8c:
                    06:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:70:CA:8F:C9:D9:CE:95:73:89:31:09:B9:FC:C4:4F:DB:96:3C:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/72be9948-9cba-369c-abf7-d341e95269bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:bb:24:7d:16:e7:41:83:d4:97:99:a6:a2:92:1e:62:c1:7b:
         d3:8f:76:e5:07:40:94:2d:3d:e5:4b:a6:14:89:61:dd:22:a0:
         7b:8c:ff:50:5c:ef:f6:b7:3b:6a:96:23:02:4d:cc:df:6d:0e:
         b0:3b:ed:f3:47:37:62:a5:42:3e:e6:42:d7:c1:2b:9d:ae:cc:
         ed:7d:f3:85:65:c3:53:e5:37:8c:5d:45:b3:09:af:d7:18:73:
         de:00:c7:f9:90:88:f8:f8:4a:99:25:d5:cd:de:e9:0f:87:bd:
         32:a9:27:05:87:27:8d:d5:f5:f5:90:6f:3e:02:a5:34:e8:68:
         45:2a:90:46:ea:50:dd:b9:fd:de:bd:dd:77:3f:39:7d:1d:ea:
         f8:b5:56:cb:44:97:16:d9:8f:45:85:43:dd:a5:de:1e:af:2a:
         55:88:63:0a:d5:b0:bc:25:51:76:4f:94:2d:f0:8c:f9:56:f7:
         cb:79:1c:e6:16:05:81:36:c5:27:0d:7d:e1:b9:99:1d:50:47:
         7d:7f:ee:0b:8d:2d:e7:ce:f9:3b:78:c1:a7:dc:eb:be:76:41:
         ab:4a:10:d7:13:47:08:9a:76:37:03:a8:55:c1:e8:7a:18:48:
         a2:f9:fb:13:60:99:3e:d2:85:ee:9c:58:c4:7d:7a:02:eb:ff:
         dd:53:7b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 10 15:30:00 2025 by rpki-client