Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/95b85c93-4651-36a6-ade4-dd2a88b74125.roa
File:                     95b85c93-4651-36a6-ade4-dd2a88b74125.roa (raw, json)
Hash identifier:          p76xTnH4ZZacPF7JCugasBfu7EdCrlc5f86ZAV7QAcM=
Subject key identifier:   C2:72:96:B8:62:2E:42:72:4A:DA:DE:86:8C:63:9B:C8:43:AA:5A:27
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858491246B31577A60676AFBB83C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/95b85c93-4651-36a6-ade4-dd2a88b74125.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     3360
IP address blocks:        130.174.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:b3:15:77:a6:06:76:af:bb:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=3cb06fd6-88e9-43a7-8b4e-695e34a6c81e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:58:e8:60:bb:27:a9:9f:a7:c8:2e:95:1f:3c:
                    f4:32:69:85:49:dc:1c:e6:bd:13:f2:d3:65:af:69:
                    0e:f6:e3:b8:68:5f:02:be:74:2f:a1:df:33:db:3d:
                    b4:40:3d:f3:52:73:a3:75:d4:a8:25:80:4e:66:a5:
                    ae:cb:7f:4c:f9:46:1c:a2:98:78:0c:98:d2:5b:09:
                    2a:96:19:8f:4f:51:a9:0c:44:d6:57:0c:9e:2c:02:
                    6d:0d:f2:3e:f7:3c:26:21:33:d2:47:37:8c:53:20:
                    b4:0f:90:ed:ef:b8:9a:68:9e:e3:ef:1e:26:41:22:
                    ef:a8:fc:05:47:46:b3:db:24:f1:53:de:68:44:7e:
                    ab:94:25:a8:38:1c:22:f8:44:de:d5:46:83:49:b9:
                    7a:04:6d:c0:8f:1d:73:ca:72:80:1b:61:8d:68:b4:
                    b7:68:99:94:df:51:c7:21:b6:68:28:58:b0:30:82:
                    b6:c2:18:31:4e:57:93:56:e0:55:cb:29:a7:91:7c:
                    ae:92:0c:20:7a:6c:47:48:78:1b:23:bd:35:71:0c:
                    80:08:dc:c3:51:24:96:22:34:fa:f2:47:f8:84:01:
                    2e:73:c8:35:34:3a:7f:95:b8:28:85:97:5f:b3:fe:
                    9f:64:5a:3a:6e:d5:53:c4:ef:bc:61:2f:fb:27:86:
                    2b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:72:96:B8:62:2E:42:72:4A:DA:DE:86:8C:63:9B:C8:43:AA:5A:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/95b85c93-4651-36a6-ade4-dd2a88b74125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:54:ed:62:29:7d:66:0c:7d:ba:21:80:27:e6:16:cd:cd:97:
         7e:45:c8:2d:28:84:07:bd:15:6e:ee:c0:7a:f1:27:6a:a6:43:
         9b:70:64:08:a0:eb:3a:ff:b7:c6:23:03:a4:67:7a:d1:52:34:
         cf:27:4c:7b:45:8e:07:3e:5c:0d:e4:11:af:fe:30:05:e4:93:
         8c:9c:a5:90:ba:9f:db:85:8c:14:35:46:03:a7:90:8a:a6:59:
         26:c4:fc:0d:8d:42:06:7f:59:12:e5:69:cb:0c:b5:31:46:f4:
         3c:51:fa:fa:8c:ee:5c:63:63:5d:d9:98:33:06:54:a2:6f:16:
         2f:cc:7e:22:82:68:40:dc:1c:af:92:d7:9e:43:8d:3a:95:4f:
         5a:08:1f:7c:2d:50:c0:63:b5:3a:71:e2:a2:09:99:f2:12:7d:
         70:90:86:24:62:8b:5c:6a:ae:52:f2:19:ec:e6:74:cf:50:51:
         22:cb:a6:bb:7e:c3:59:2e:52:73:cc:c7:66:e1:fc:5a:4e:61:
         04:6a:2c:70:7a:ee:8e:ca:11:18:95:6a:09:11:86:5d:a2:ab:
         80:77:d4:91:d8:f0:0f:ef:4d:a0:0f:64:d9:7a:5b:3b:34:3e:
         e8:b4:58:02:c0:cf:7e:a3:a4:cb:4f:94:c9:51:25:1a:a4:cd:
         39:54:db:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:03 2025 by rpki-client on console.sobornost.net