Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d800f374-dc8f-39ef-ae30-fc8c2baeb03e.roa
File:                     d800f374-dc8f-39ef-ae30-fc8c2baeb03e.roa (raw, json)
Hash identifier:          GEb2NUvAjH8zOpCDXFVpGSqZJ9AUa0F5t9vY3P2RWJw=
Subject key identifier:   6E:CD:96:3D:27:33:B1:A1:05:90:AC:6D:3F:58:D5:A2:FC:D8:54:0F
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858483E1AB13D3287F26F521C2EC0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d800f374-dc8f-39ef-ae30-fc8c2baeb03e.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     2914
IP address blocks:        129.250.63.0/24 maxlen: 29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:b1:3d:32:87:f2:6f:52:1c:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=6367200c-004d-44ac-addd-3db37b32a041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:44:3b:16:47:4d:d4:93:48:20:95:3a:43:85:
                    81:51:62:e3:9b:7c:28:70:6e:a3:92:0b:39:b5:3a:
                    58:a8:ce:d5:96:08:01:dd:c4:24:19:2a:b4:2d:a3:
                    c9:c5:26:a2:c8:23:a4:ae:49:69:6e:a5:fe:56:e3:
                    26:ca:8e:ed:db:b4:46:1c:8c:42:d2:c9:19:4b:a4:
                    e2:86:17:22:98:d3:b7:fc:5d:96:65:cd:29:6f:18:
                    34:20:18:0f:c1:32:be:96:31:84:13:80:8c:f9:69:
                    fb:5a:f5:95:26:a8:99:da:cf:aa:b4:bc:f3:8c:0d:
                    84:33:d0:08:08:51:a7:f1:be:89:44:f4:e5:15:a5:
                    9b:e8:0f:07:ea:dc:a1:0b:da:7a:0f:6b:b4:47:ee:
                    8b:28:a2:b1:0c:56:44:1f:83:bc:a7:66:1b:60:a8:
                    db:d0:13:15:da:d1:e2:a1:bb:aa:37:82:99:96:2e:
                    0b:88:2c:4a:b0:55:9e:ce:59:b2:9d:4e:11:bf:08:
                    2f:08:96:1d:43:03:ff:2f:25:b9:86:e2:84:16:5e:
                    2f:3a:49:6d:a6:09:db:70:f4:ac:d9:7d:71:05:b8:
                    b4:15:6c:a0:7a:4d:b0:d7:59:3c:6a:34:29:5a:26:
                    ae:d5:0e:1b:82:a2:d1:07:df:31:27:b0:5b:71:ce:
                    c2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CD:96:3D:27:33:B1:A1:05:90:AC:6D:3F:58:D5:A2:FC:D8:54:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d800f374-dc8f-39ef-ae30-fc8c2baeb03e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ca:39:0c:33:61:e6:ce:e6:81:34:e6:81:b0:ce:3e:15:f2:
         28:3f:c6:d5:0d:f2:76:23:20:70:0f:91:bb:dd:20:25:4b:3c:
         ae:93:ec:ff:a3:1b:6d:c4:1e:19:99:77:1f:d1:1b:8a:c7:71:
         e8:2f:13:7e:90:9b:9a:92:cf:d5:40:68:f8:27:0f:26:0a:e1:
         7c:c9:d1:3b:50:d3:41:ba:60:fb:02:d8:27:fd:03:6b:15:60:
         bf:f5:8c:24:8d:39:22:4c:69:e3:17:ad:ab:20:c6:1a:3d:6b:
         b3:bb:cb:d6:c5:45:cc:a4:59:c4:48:7b:29:0e:39:c1:ae:a0:
         00:7e:60:0d:13:14:64:98:80:77:6f:ca:7c:22:89:0b:b8:cd:
         d3:18:85:8a:21:0f:94:f4:bb:94:37:0e:58:13:b3:45:27:aa:
         db:61:c9:63:a2:7c:84:20:33:8c:54:36:e6:27:9a:39:c5:43:
         96:eb:15:a1:8b:96:2e:33:40:26:3c:f8:31:88:25:b7:c2:61:
         8f:0e:9b:f5:f3:60:c8:ce:de:0a:4d:03:1f:44:7b:5d:34:a5:
         ce:a3:fe:3b:85:64:38:b0:12:f1:b4:ca:29:6f:2a:5d:2a:aa:
         95:4f:30:ba:45:5c:e5:b2:70:ba:bd:80:e6:79:11:19:f4:4f:
         6a:52:89:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----