Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/654db28b-a3f9-3007-ba02-58ba323c3937.roa
File:                     654db28b-a3f9-3007-ba02-58ba323c3937.roa (raw, json)
Hash identifier:          K02FzJ6CX8KtRBINnFEHAkTV+qhWoHSNNHdG5GeowGc=
Subject key identifier:   DE:84:FC:D7:8D:35:54:D2:20:39:9D:9A:24:A0:F1:F5:C9:59:30:7B
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858483E1AB12A34A34E707567B040
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/654db28b-a3f9-3007-ba02-58ba323c3937.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     2914
IP address blocks:        129.250.60.0/24 maxlen: 29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:b1:2a:34:a3:4e:70:75:67:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=e6b1bdbe-373a-4984-847b-0f8ef4862617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:77:f8:ef:12:62:f3:2e:3a:8b:e7:94:75:6f:
                    a3:1b:ac:65:7e:2f:82:4f:a5:74:72:a2:0f:3a:9f:
                    95:dd:31:cc:9a:40:6e:27:14:f1:23:d5:80:3d:22:
                    54:b9:6a:b1:dc:5e:e8:3d:3e:99:8c:65:f9:f2:a5:
                    fb:a0:d3:c4:fd:0f:64:07:6c:70:5a:ca:08:d7:b4:
                    b6:9b:38:4f:da:37:6e:33:96:f1:1f:a5:50:3a:ca:
                    cb:01:ba:94:b2:72:de:df:97:1a:10:d1:4f:b6:39:
                    3d:f7:f2:dc:e3:95:26:73:4c:28:9b:18:7b:46:4b:
                    91:b5:cc:4a:32:20:1a:f1:b1:b0:71:74:b8:3d:13:
                    2c:6f:45:84:c0:a2:f6:43:2a:3c:66:6f:71:66:04:
                    44:91:c7:3b:e5:ae:5e:95:fb:05:92:79:d0:b9:86:
                    e3:e5:14:9b:a0:3e:fb:0a:5b:95:d8:a7:2e:f4:33:
                    f0:e8:77:79:b4:d2:e2:b5:5e:4e:ca:6e:f0:f5:16:
                    c5:c3:20:4e:5f:80:47:44:9d:3e:4c:a6:f3:a3:25:
                    f3:e7:0f:1d:2a:46:a9:45:2d:78:e9:07:6c:39:64:
                    19:79:79:db:7e:75:d0:ed:43:e4:a4:bf:3e:35:5f:
                    71:10:62:ce:c7:16:7d:c5:e4:b4:ae:bd:36:7e:de:
                    a9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:84:FC:D7:8D:35:54:D2:20:39:9D:9A:24:A0:F1:F5:C9:59:30:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/654db28b-a3f9-3007-ba02-58ba323c3937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:82:c9:2e:e2:e7:a0:2e:94:88:a3:09:18:c0:d0:2d:ad:b8:
         84:8c:ff:53:e9:eb:aa:66:c5:c3:bf:e6:49:78:b2:1e:8c:8c:
         19:95:25:14:59:29:3b:90:48:72:11:bc:66:8d:fe:32:2c:a7:
         ed:10:b2:f1:8b:72:e7:70:ef:22:62:12:d2:2b:7f:03:42:bf:
         55:2b:31:ec:06:41:8a:71:d7:23:24:36:65:6f:d7:6b:fe:ba:
         9d:8f:03:a3:d8:ba:1a:fb:c1:bf:15:9f:ca:e1:42:26:fa:11:
         2b:a1:68:c2:19:3c:ed:92:00:78:8d:03:14:48:d3:02:97:4e:
         dc:de:b8:e8:9e:42:dc:ac:5c:9e:00:86:84:e6:55:18:e4:1f:
         84:3f:5a:18:16:4d:9c:b3:ca:0d:c3:42:79:e1:1a:37:17:e8:
         0f:47:a1:28:b3:4b:f4:75:97:d6:47:f9:2f:2a:32:a7:43:2c:
         10:98:ec:ed:bf:86:ac:14:ea:65:17:33:a4:63:c2:58:dd:04:
         cc:9f:0a:1f:a2:e6:32:1b:0b:52:f6:a4:a4:cc:70:16:c3:5d:
         56:25:05:bd:fc:b5:5f:1a:04:05:93:bc:19:2d:8b:c5:c4:f8:
         bb:0b:f7:14:6a:01:20:c8:e1:be:52:81:4f:f5:30:2b:86:f0:
         9f:f2:1f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:02:31 2025 by rpki-client