Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e3008fec-7e65-3321-88ae-a42a6debd721.roa
File:                     e3008fec-7e65-3321-88ae-a42a6debd721.roa (raw, json)
Hash identifier:          dWFBI1GBQunQpbWDAVfel7INiqHkHgz4fI237BlEO04=
Subject key identifier:   CF:82:CE:56:E1:7D:AA:2F:00:DD:CC:04:A0:8B:80:1A:82:81:96:27
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F432858483E1AA896BD43FD5E61A12800
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e3008fec-7e65-3321-88ae-a42a6debd721.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     8987
IP address blocks:        130.137.219.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:a8:96:bd:43:fd:5e:61:a1:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=4de734f9-21fc-457f-a624-c13ac1d6395a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:27:e8:f7:8b:37:2d:e7:5f:eb:5c:cd:60:1d:
                    18:31:3e:29:da:df:4e:b0:73:81:19:8f:6f:a6:3b:
                    99:7b:14:cb:a9:e5:02:05:e6:fd:93:48:1d:76:b0:
                    a3:0a:cf:34:c3:33:bf:16:81:a7:4b:fe:68:c3:48:
                    39:49:45:30:47:36:17:68:05:ed:6c:01:20:37:26:
                    f3:5b:dc:59:dc:60:7d:2a:fb:ae:56:da:a6:57:9b:
                    1b:f4:12:2d:ad:c6:18:31:dc:74:fd:b7:a3:ee:2b:
                    64:68:5e:f2:33:ea:8b:12:23:a1:e4:c1:61:85:b9:
                    12:27:a5:1f:ee:89:c2:a2:db:82:15:9a:46:13:5e:
                    65:8d:8c:4d:67:cf:ba:a6:33:c2:ad:df:49:e4:c5:
                    11:72:cd:fe:82:a0:f7:7b:b0:4a:58:fc:9d:23:35:
                    86:51:cd:e1:e4:61:50:52:f0:c6:8a:48:f4:3c:b1:
                    8b:8c:03:e9:7e:eb:20:2c:10:67:2e:02:62:eb:ef:
                    fb:ad:f9:c6:cd:42:ac:66:b3:22:d5:61:a9:17:e6:
                    a8:09:4d:17:fc:82:5e:1e:80:ac:46:2b:2b:20:2e:
                    6f:e0:f7:57:c4:f5:f9:f6:3e:9f:29:58:c6:87:c9:
                    00:50:f1:7c:cc:16:a4:e4:38:eb:78:05:9c:e5:0c:
                    27:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:82:CE:56:E1:7D:AA:2F:00:DD:CC:04:A0:8B:80:1A:82:81:96:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/e3008fec-7e65-3321-88ae-a42a6debd721.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:6d:1d:85:6d:02:f8:66:52:28:83:c3:51:ad:c4:b2:2a:c4:
         34:73:02:3b:be:ce:2a:f7:e7:96:c5:2b:38:90:d1:6d:84:6e:
         02:8e:87:a5:7a:6f:73:37:48:62:cf:6e:db:45:c6:a2:ec:40:
         6a:3b:93:5a:dd:d0:1c:1a:82:56:ea:16:31:bb:2d:4a:ab:15:
         01:f1:92:72:14:80:33:34:8b:d5:66:4f:13:30:d6:67:53:f0:
         72:5e:e6:07:d1:ba:80:89:8b:5e:e2:cc:e6:67:0f:90:72:6b:
         e2:64:11:93:56:9c:b0:c3:66:b7:20:aa:f1:d8:63:84:36:e5:
         d8:7b:eb:99:d0:65:e6:29:8d:37:fc:ef:d2:ac:cc:f9:e9:75:
         ca:2c:04:1e:52:ec:5b:15:a6:f1:fa:be:48:32:fd:a7:31:2b:
         c3:5f:36:b3:7c:dc:2d:db:4d:b7:74:49:4c:4f:59:42:ca:bc:
         d5:72:0d:9f:fa:c3:46:1a:0c:75:77:8b:bb:94:40:2d:09:5d:
         2b:58:f6:4b:56:56:31:47:29:12:78:36:f3:40:f8:f2:7a:ef:
         78:15:6d:e4:fa:45:f9:07:67:10:74:bc:4e:a3:6d:31:c7:0b:
         f0:52:ae:6f:71:23:ee:12:87:b8:3d:28:cb:b8:ee:36:e8:f0:
         96:68:2b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 10 15:36:49 2025 by rpki-client