Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/01823760-47ff-3258-bc6f-1b3748395ffd.roa
File:                     01823760-47ff-3258-bc6f-1b3748395ffd.roa (raw, json)
Hash identifier:          JjQ3txFnsrskOs+xlZxWp3zoIWLrW8oAG5PtRWi2O3g=
Subject key identifier:   87:A3:EA:1A:34:47:B7:1B:C8:AE:67:24:DD:4F:69:82:9E:97:89:F3
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F43285848222FDAF9A5273EFD4F21C580
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/01823760-47ff-3258-bc6f-1b3748395ffd.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     14297
IP address blocks:        138.229.12.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:da:f9:a5:27:3e:fd:4f:21:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=35e3a986-7d0c-44dc-8309-45f460687046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0b:61:57:cd:5a:fb:ea:92:18:0d:50:fb:45:
                    4e:c5:b6:1a:db:dc:35:5a:42:fa:a7:c9:f7:05:63:
                    8e:a4:af:d7:69:d3:1a:f1:09:e0:96:04:9d:5c:2a:
                    cb:68:61:fb:31:69:4e:46:b9:e4:b3:77:37:84:a3:
                    d0:f8:ca:dc:4b:22:52:49:a0:b0:d9:9c:93:03:b6:
                    49:a5:32:67:6b:36:8b:c0:02:ca:82:09:4c:26:61:
                    b4:e0:d1:12:fa:d5:b5:12:79:38:e1:c6:b5:3b:0f:
                    de:c7:99:7d:33:db:e7:38:6b:b5:19:44:92:f1:f3:
                    9d:87:57:dd:e1:43:6a:df:0d:98:b4:b7:76:24:91:
                    70:3e:ff:69:eb:24:4e:bf:37:14:11:0a:06:36:45:
                    b1:3e:be:a2:4e:0e:6a:26:7a:8f:47:b9:b5:d1:15:
                    e4:c3:a5:a1:bf:08:c5:a7:d0:dd:28:b8:3a:09:e6:
                    e2:48:c3:83:ad:bb:6a:f4:e6:4f:83:9c:90:cb:55:
                    9a:19:2b:96:2b:75:09:bd:82:49:5b:3b:f1:49:18:
                    05:f6:6e:3a:eb:25:b0:37:d4:c4:88:ca:14:ea:15:
                    fd:d1:f0:80:d2:8a:b9:d7:10:bb:c3:3f:b2:d0:5a:
                    e4:8f:2c:cd:72:19:f6:6d:08:85:7f:f5:16:78:35:
                    d9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A3:EA:1A:34:47:B7:1B:C8:AE:67:24:DD:4F:69:82:9E:97:89:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/01823760-47ff-3258-bc6f-1b3748395ffd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:72:4a:4b:bc:be:91:52:9d:12:33:ca:fe:25:02:5c:bd:ca:
         57:c0:fc:b5:74:c5:98:af:06:1b:12:51:cb:a9:b1:4e:87:63:
         20:4a:bd:4a:58:0a:81:f1:09:d6:2b:a4:8d:55:0b:59:67:6e:
         d9:58:13:62:5b:da:ac:cc:2a:ba:4a:dd:f5:f6:21:c8:5a:08:
         5b:98:fc:f9:df:74:3d:96:aa:a3:d4:e5:f0:e6:a4:ce:ad:dc:
         4b:46:95:d2:1f:98:ca:a8:fa:cb:1f:a0:aa:c8:6d:81:a1:34:
         61:bd:78:3a:9d:3b:47:4c:b7:33:2a:49:0b:df:a0:c0:ea:ac:
         9e:4c:03:cd:24:27:9a:e8:f2:b6:6d:60:06:8a:aa:b8:25:0b:
         f6:ce:fe:e7:74:52:da:8f:b2:82:ea:37:a3:6c:90:37:d3:93:
         ac:ad:72:55:e0:a8:f1:d9:ca:87:a7:78:9c:42:ef:d8:3e:29:
         e5:d4:ce:70:45:af:3e:fb:db:44:37:23:90:b3:78:3c:51:ea:
         04:63:1a:ea:0a:3c:fb:50:9d:49:49:7c:c0:ce:97:7e:75:12:
         76:0e:59:82:32:99:a6:2d:be:9a:64:b7:78:a7:98:83:46:bf:
         87:c1:a8:74:20:c4:e7:e9:a0:28:8f:5f:66:c1:55:cd:8f:bc:
         e6:4d:ac:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:12:44 2025 by rpki-client