Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f92a87eb-0dbd-3bd8-9fe6-be67e3f3bf96.roa
File:                     f92a87eb-0dbd-3bd8-9fe6-be67e3f3bf96.roa (raw, json)
Hash identifier:          t1MFN83EpP17mSeR6G8ocdt9nsLDnASMzYy4E8ncEa8=
Subject key identifier:   6B:8A:25:23:D8:AE:C1:52:BC:15:94:5F:AB:DF:6F:20:0B:53:AC:05
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858483E1AB0A81B81AD23E5967B60
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f92a87eb-0dbd-3bd8-9fe6-be67e3f3bf96.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     2914
IP address blocks:        129.250.64.0/24 maxlen: 29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:b0:a8:1b:81:ad:23:e5:96:7b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=138ee11b-08fd-4ad1-ae93-0d62017a4fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f7:31:e6:16:1e:72:9d:eb:13:9c:2b:62:79:
                    39:42:f6:f1:36:7b:26:ce:23:32:79:09:96:94:c8:
                    37:7f:b7:42:5e:a8:33:d6:3a:a7:ef:5e:dd:66:a9:
                    b4:a0:6b:5e:5a:20:df:c5:6f:91:08:2f:65:62:2e:
                    a2:26:a4:59:d1:a3:9a:b3:b1:9a:a5:e4:d0:7d:ff:
                    c2:ee:85:ea:cd:60:12:0a:54:3b:c3:c0:28:19:14:
                    1c:dc:b6:a3:57:0d:63:54:e2:9b:15:8b:c8:2a:45:
                    d8:cc:ab:71:65:e8:3a:41:28:fa:7a:2e:0a:c6:ef:
                    f1:36:b4:e0:f4:61:2f:1c:2f:ab:23:57:f3:f2:8a:
                    a9:cf:7e:cc:8a:35:ee:30:33:55:bd:1e:98:e0:fa:
                    77:4c:14:b4:22:6b:f5:46:35:7b:81:3e:6b:31:be:
                    eb:5b:17:a3:c0:27:49:43:a7:d5:66:db:9a:df:0a:
                    cd:12:d2:10:09:ea:30:2c:da:7c:30:7c:4b:0a:1d:
                    8c:75:8b:16:12:17:d4:99:de:15:1a:89:f4:db:bb:
                    5d:31:b7:75:a9:75:4f:13:d0:d7:9b:d3:f9:da:b6:
                    78:10:ec:24:28:00:15:8a:c6:94:0b:9a:d9:d8:6e:
                    01:23:c4:b9:1d:a9:d8:99:08:97:b4:a7:35:18:95:
                    27:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8A:25:23:D8:AE:C1:52:BC:15:94:5F:AB:DF:6F:20:0B:53:AC:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f92a87eb-0dbd-3bd8-9fe6-be67e3f3bf96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:f5:d7:15:83:e7:05:59:f7:65:a4:c2:24:fc:5e:ec:1a:c5:
         94:6e:87:37:b3:be:88:7e:dd:6d:3a:76:2f:42:6e:ac:9a:c5:
         f6:0c:f9:00:a3:c3:4b:4a:5a:78:59:7b:4d:70:2a:72:50:35:
         cc:b9:15:9a:8f:3d:6e:cd:9c:a6:75:f3:b4:21:2a:b9:4d:25:
         c9:10:6f:3f:e0:8d:cc:58:93:c7:15:b5:1b:a9:61:c8:d2:17:
         4a:27:28:d4:b2:88:b9:46:f2:71:d3:16:ab:f4:bb:85:b9:9d:
         7b:1a:6a:12:a8:d6:3d:51:f9:19:ab:b2:51:17:aa:b0:fd:29:
         0d:1b:ea:e0:ce:53:d3:de:74:ca:1c:89:6f:d1:91:a0:95:17:
         8c:67:f7:f3:b9:20:a2:43:6c:cd:d4:68:86:ab:d8:1f:f8:76:
         94:08:e3:99:b2:77:3d:e4:72:cb:6f:89:af:c6:ec:70:8b:a1:
         df:3b:eb:7a:95:d9:9c:bf:43:e2:b9:04:5d:46:cf:37:e9:c7:
         2a:fc:01:11:bd:fa:0d:d2:7f:b9:90:d6:d5:8e:5a:2a:73:ab:
         a5:f4:13:56:54:de:20:46:5c:52:68:37:01:ee:eb:56:c4:f7:
         08:dd:7c:62:46:d1:56:b2:65:91:1a:73:05:47:52:3f:d0:cb:
         25:81:9f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:51:21 2025 by rpki-client