Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8396ba92-1404-3320-8752-069f2d2b4253.roa
File:                     8396ba92-1404-3320-8752-069f2d2b4253.roa (raw, json)
Hash identifier:          oOdhxSR8soJ8umcwOScSJzpALKq5t3lut5WeHTy8oh0=
Subject key identifier:   FA:BA:40:2E:CB:61:35:B1:D2:E1:0E:C2:3D:4E:35:EE:83:33:E7:6F
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858491AA6B8053C868E4286F19020
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8396ba92-1404-3320-8752-069f2d2b4253.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        130.137.159.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:b8:05:3c:86:8e:42:86:f1:90:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=e88d292d-96fc-4b09-8737-b1c89dccef17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a0:76:ab:ef:7b:99:8c:ea:a5:f1:d2:62:a0:
                    64:cb:d0:9d:11:5d:f2:4f:e4:8f:4c:b0:fb:5d:bc:
                    cd:6b:58:24:3c:79:2d:85:c2:df:cf:bc:8e:de:7c:
                    8a:71:4a:10:e7:bf:47:7e:50:d1:eb:f9:ac:07:13:
                    39:be:6e:ce:c7:1b:b7:e1:15:3e:04:93:60:65:a2:
                    3b:63:d3:fc:df:2d:62:45:8b:07:39:56:25:20:85:
                    c0:4d:dd:38:5a:51:ab:cc:7b:13:93:8b:0c:e4:f7:
                    5a:b3:55:28:4d:46:b6:0f:04:5d:43:49:cb:ab:a4:
                    5e:cb:68:28:00:d1:77:82:28:4f:77:a5:43:a3:70:
                    59:5c:38:22:e3:86:da:0a:ef:12:35:5a:c3:dd:1f:
                    fd:87:ac:5b:b5:95:3e:f3:d8:3c:be:89:94:0b:5f:
                    f6:20:85:cd:15:59:ff:28:69:2b:fd:fe:9d:92:40:
                    03:09:37:66:6b:d4:63:54:e0:5f:ca:d7:1f:3b:fb:
                    28:c3:f2:9f:25:9f:42:1a:81:f1:2d:51:1a:38:a2:
                    cf:68:05:d3:f9:c6:0e:db:cc:31:67:dc:80:fa:d4:
                    68:46:37:e3:e7:12:5d:d6:d8:8a:aa:f5:94:a8:49:
                    0b:4e:aa:e8:07:f6:8b:32:75:22:9c:78:b2:6f:39:
                    b8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BA:40:2E:CB:61:35:B1:D2:E1:0E:C2:3D:4E:35:EE:83:33:E7:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8396ba92-1404-3320-8752-069f2d2b4253.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:ef:40:d5:82:d8:e3:c7:04:3f:f2:d6:9d:5e:16:77:66:0f:
         96:f3:46:3e:65:56:c4:95:22:1d:31:9b:93:ad:9a:33:b8:31:
         a1:7c:75:02:fe:cb:e8:a4:14:f3:96:a9:d0:46:21:1e:36:2a:
         9b:a3:c7:6c:14:8b:f6:85:34:e1:d0:4b:79:ba:f6:96:f7:61:
         39:b6:f1:a6:fe:11:ab:23:08:25:f8:dc:a0:87:bd:89:ba:88:
         07:1f:94:2f:d8:c0:81:65:0e:ab:30:a9:76:51:96:85:8d:01:
         37:75:9e:28:0f:89:0d:e1:0c:9e:4e:13:53:3a:d8:ad:44:58:
         65:0a:c9:52:ab:7c:e5:e1:c3:1b:63:b8:99:c2:3e:0a:73:96:
         f6:1e:9c:56:6d:e6:f7:37:83:89:ba:65:e5:b4:98:b8:8b:0f:
         c0:56:b7:2d:ec:75:56:34:e5:4b:69:e3:61:65:1f:45:e4:d5:
         09:65:30:9d:77:40:fc:66:46:05:c6:06:19:ac:7f:ad:4f:b9:
         41:05:7d:b5:88:ed:12:12:4b:e6:36:35:84:ca:4c:5b:19:12:
         32:5e:81:9f:9d:4f:da:9d:a4:df:3a:4b:b6:3b:07:cb:23:74:
         db:b1:4e:c6:0c:62:bb:00:61:6a:94:aa:7f:f9:70:a4:61:66:
         ee:b1:b9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:45:29 2025 by rpki-client