Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/493c73b8-e93a-392d-a47e-c686238919bb.roa
File:                     493c73b8-e93a-392d-a47e-c686238919bb.roa (raw, json)
Hash identifier:          vZMmWQu6e6DeHiN60VLqkiRbeWZr0fkPtFTVqtIvfoo=
Subject key identifier:   10:73:69:03:46:2F:21:21:83:2D:15:6C:32:2D:75:35:8D:77:68:ED
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F43285849350E85C2717D42CE93BABF00
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/493c73b8-e93a-392d-a47e-c686238919bb.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        130.137.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:85:c2:71:7d:42:ce:93:ba:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=10e42bb1-b931-41f2-b120-77acd9926885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fe:0b:f7:48:5d:34:b0:b6:bd:6b:54:75:d0:
                    f9:d6:b9:b2:a4:e0:a5:07:a9:47:53:0d:a2:ba:91:
                    05:36:14:7d:63:45:24:01:aa:f2:82:04:d6:e9:9c:
                    5a:57:5e:a8:ff:b5:77:cf:c4:ee:68:df:33:4a:e2:
                    53:31:56:d1:6c:54:8a:9b:f9:be:a8:d4:c6:4c:82:
                    77:b4:3d:1a:db:01:95:24:50:e6:dc:8f:94:66:ea:
                    4b:3c:7c:2d:b2:46:4f:3f:4a:2c:f3:63:61:de:e8:
                    8b:c3:54:6d:8d:26:a4:1a:fe:63:d3:b9:94:c7:a1:
                    dc:3e:71:04:11:9d:24:94:c3:9f:6b:05:85:2c:9b:
                    52:01:e3:8a:97:cf:90:27:9d:60:81:cb:7f:7b:eb:
                    14:46:05:3f:26:fe:0b:2a:75:50:7e:0b:53:7c:57:
                    7c:43:ba:2b:92:44:b5:67:5d:69:69:0e:d3:62:e6:
                    df:32:a8:92:13:8f:ef:63:10:c5:5c:f9:b1:37:32:
                    c7:fb:2c:46:91:60:2a:ff:fa:3e:67:50:fe:1b:37:
                    1c:c2:10:e8:81:e7:aa:8a:b2:d3:5c:6d:84:57:06:
                    86:c8:49:73:45:61:02:72:4b:05:a6:a1:de:07:b7:
                    fa:af:2d:ee:d2:1d:15:2e:1b:5c:cb:48:6f:ba:0f:
                    6c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:73:69:03:46:2F:21:21:83:2D:15:6C:32:2D:75:35:8D:77:68:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/493c73b8-e93a-392d-a47e-c686238919bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:d6:a6:5e:c0:06:ac:7e:84:23:61:5c:27:dc:94:41:f4:09:
         36:64:cd:99:b3:10:27:e4:d2:93:cc:29:50:18:4f:59:3f:a9:
         fd:ce:22:82:7c:86:9a:d6:24:8d:6d:c6:71:61:4c:25:85:60:
         5f:37:d5:84:93:9b:54:76:96:95:d4:0a:46:e4:68:69:50:ba:
         46:3f:8d:3a:f9:bc:9a:ca:0c:dd:81:f3:9e:f9:24:73:66:d3:
         23:74:7d:78:59:56:54:1a:0b:87:21:8e:55:31:9f:62:a3:31:
         ea:f5:b7:ad:13:ee:1b:6c:a7:fe:55:b0:20:54:62:d7:73:20:
         a4:47:7f:d3:b9:90:da:69:d9:38:b6:b7:3e:9e:19:46:09:e7:
         b0:0b:c6:ab:21:bd:78:98:61:7f:d0:5a:1c:8e:e3:26:80:6c:
         0f:41:11:4b:cb:c2:63:dc:c6:67:6e:b1:2b:a6:de:26:e0:08:
         01:ab:c9:26:9d:5c:3c:bb:a3:27:82:fa:f5:5f:8c:17:8a:43:
         a4:85:fa:c4:d1:f2:80:fa:7d:a6:43:22:02:36:3f:da:46:17:
         a6:c2:0c:c9:10:06:8e:32:f5:1d:e0:4b:67:f6:af:ae:0b:af:
         0a:41:96:df:b3:ef:dd:59:2d:1f:67:f3:88:b1:bf:db:6c:47:
         df:9a:0e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:33 2025 by rpki-client on console.sobornost.net