Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/785d8a4b-88a6-38fb-97a2-f8dc44d6a5fd.roa
File:                     785d8a4b-88a6-38fb-97a2-f8dc44d6a5fd.roa (raw, json)
Hash identifier:          bZjV+gCRdNj5XtsTiJoow6Iv/YWNR7hcrdWw7nXqF+U=
Subject key identifier:   44:E0:A6:C2:EF:F2:C9:F7:1F:1E:E3:8F:B9:95:A7:1C:2C:62:1E:7D
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858487325B7D8DC52E113CDDE0D80
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/785d8a4b-88a6-38fb-97a2-f8dc44d6a5fd.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     8987
IP address blocks:        130.137.238.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:b7:d8:dc:52:e1:13:cd:de:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=ecb882d5-38a2-45cc-8461-30eb5a2beb92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:52:b0:c6:60:9d:de:a9:bc:71:28:2f:c5:bf:
                    16:60:44:5c:20:c4:c2:f4:de:c0:4d:1c:b8:06:f0:
                    7a:80:92:ad:47:c8:19:04:10:76:dd:ce:ed:4d:a5:
                    84:a5:ac:68:43:31:74:06:a3:69:00:8d:70:fb:c8:
                    c7:7c:a7:b4:de:af:94:64:e1:d1:c9:4f:4b:0b:57:
                    b3:43:c4:87:15:ab:ec:da:7f:20:36:9c:54:37:a8:
                    76:2d:28:54:94:57:96:82:3c:7c:f6:38:f9:cc:67:
                    1f:f3:eb:dc:8e:3f:58:7a:8e:87:b7:0b:4a:b4:d4:
                    70:81:41:92:0a:4f:af:98:49:1a:39:6e:86:c3:22:
                    bd:5e:1b:7e:8d:07:db:69:a3:a2:ed:53:e2:03:d2:
                    74:81:11:85:84:58:73:f4:25:48:c2:32:ac:e3:de:
                    39:04:d5:55:a5:b9:60:4a:a6:b9:f0:26:a5:a5:18:
                    0c:47:1e:6f:14:54:9e:9e:0f:4c:83:39:ad:54:64:
                    be:15:58:65:12:c1:89:5a:05:ad:22:f0:93:2f:ad:
                    0f:d9:59:8b:1d:15:61:3f:73:16:3a:a2:43:85:b1:
                    43:60:9a:b1:4f:ba:34:c2:e9:09:f1:01:36:ee:da:
                    0d:c1:06:89:a4:b5:f6:7f:8e:f5:f6:ba:bc:17:9f:
                    74:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E0:A6:C2:EF:F2:C9:F7:1F:1E:E3:8F:B9:95:A7:1C:2C:62:1E:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/785d8a4b-88a6-38fb-97a2-f8dc44d6a5fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:71:5c:69:17:01:75:2c:aa:66:ce:b7:5a:0e:9b:b8:95:a1:
         c8:49:dc:16:3d:3a:59:d5:28:25:3c:28:10:ad:76:78:a4:12:
         b2:da:5a:99:86:ef:9b:f2:18:ad:7b:ab:e9:8a:5e:12:82:cd:
         7b:cc:fb:d6:fc:e5:4a:c3:4d:5e:55:83:c6:41:15:be:8a:57:
         b7:bb:3b:e7:87:60:11:55:37:de:4c:5d:fa:b5:8a:51:fc:72:
         06:a6:fa:1c:18:58:58:93:1d:f5:6e:7c:d8:4d:4f:fe:e3:16:
         9d:9b:7e:5b:fd:39:ac:8f:22:b7:c9:55:11:32:e0:bd:08:7b:
         0c:65:47:2f:c0:4c:23:a8:58:09:34:f7:1f:97:71:ce:78:3f:
         ec:68:21:23:03:e9:0d:02:18:61:b2:2b:15:75:b9:86:e4:54:
         bf:8e:83:ff:f1:b6:7e:c5:de:8d:b6:c1:a4:fd:93:e1:35:c8:
         e2:0d:3d:26:b7:20:a5:8d:db:4b:88:a3:03:2f:ff:65:fe:4f:
         3f:b1:03:65:c0:35:57:82:08:f5:f2:58:45:51:83:3a:d7:49:
         b6:c3:e5:ef:ba:83:8a:47:2e:3f:4f:0c:db:72:69:75:fb:63:
         2e:75:1d:11:ea:ff:d1:72:54:91:cb:24:07:28:1b:ab:c1:a2:
         ab:eb:f7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 10 15:51:47 2025 by rpki-client