Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/7d81dc4e-84a4-31f6-a430-145409787d4c.roa
File:                     7d81dc4e-84a4-31f6-a430-145409787d4c.roa (raw, json)
Hash identifier:          fS97tR/ZeWEyARsxCmLAHM8hjATqgJPJWDuWqgOt2AA=
Subject key identifier:   BE:D7:B5:F8:30:CC:1F:8B:4E:8E:26:4F:43:E4:38:EC:E6:CA:87:D0
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F43285848222FDB09E085D0EF560CCC40
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/7d81dc4e-84a4-31f6-a430-145409787d4c.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     14297
IP address blocks:        138.229.15.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:db:09:e0:85:d0:ef:56:0c:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=7bd1644a-60a8-4762-8eb1-3642324dd534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:13:d2:a5:b4:14:79:b8:32:65:76:08:78:f2:
                    70:86:45:5a:b8:17:24:8a:4f:ad:28:73:f8:19:98:
                    00:a7:ca:77:c4:aa:38:9f:ea:50:14:8c:62:5a:b7:
                    6b:16:78:96:56:d4:12:1a:d0:00:be:32:88:b3:22:
                    ac:f1:ac:00:f7:2f:47:8f:94:14:54:00:04:ce:5e:
                    d0:a1:f9:65:b9:c1:b6:4e:ab:d3:07:05:4f:a0:12:
                    d6:95:44:bb:bc:37:2d:5a:d4:0b:2b:94:f3:d5:e7:
                    ed:9d:dc:50:6d:66:51:78:4a:a3:c2:ce:11:54:e9:
                    e9:6b:4e:80:ef:e4:d1:ad:ec:e3:08:6d:b5:0b:85:
                    de:95:43:a6:99:89:51:bb:fe:34:73:f2:82:73:78:
                    06:c4:9d:88:3d:99:a2:91:be:01:e5:b9:37:2b:e5:
                    3e:60:db:c3:23:8c:c7:8b:f9:d5:3d:52:42:ea:52:
                    01:2c:86:15:5e:16:a2:91:b4:ac:6d:06:71:a9:73:
                    83:b9:72:14:8a:76:73:c5:c9:70:f4:aa:9c:40:53:
                    19:60:1b:b0:66:75:d2:e4:d3:29:79:4f:ba:a0:d7:
                    a0:79:f6:ef:da:d1:82:9d:80:14:06:11:11:54:e3:
                    5c:11:25:b3:4e:4f:cc:9e:35:86:f5:d3:d7:3d:6a:
                    a4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D7:B5:F8:30:CC:1F:8B:4E:8E:26:4F:43:E4:38:EC:E6:CA:87:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/7d81dc4e-84a4-31f6-a430-145409787d4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:4c:db:83:50:19:27:5e:c1:f4:11:4c:e6:76:1d:c2:6c:bf:
         d2:b9:71:5a:30:ce:54:5e:48:7a:57:5e:7c:9e:19:ca:0b:04:
         74:a0:38:86:01:6d:55:35:b8:78:68:51:ea:66:1f:ea:3d:6b:
         31:9f:db:22:97:96:93:b4:e1:37:05:66:5f:88:cb:59:bd:26:
         bf:fd:b1:13:4c:cb:98:22:28:c0:75:0a:f7:fc:c7:a8:41:e8:
         71:4a:d9:0c:96:a0:54:04:60:a8:5b:3d:b0:13:6d:2e:a4:55:
         49:93:5c:49:24:7e:fd:45:f2:1e:40:ff:b2:16:79:b5:15:09:
         1d:a6:b9:44:f5:6c:79:d7:ad:19:02:26:fd:58:f6:62:5f:43:
         05:19:b7:ec:5c:38:a1:34:51:51:92:27:d7:86:0c:c9:83:d5:
         c7:a1:1b:8f:83:61:47:f2:e3:ed:65:6e:71:2a:d2:45:fa:9b:
         18:39:cb:69:61:1c:2e:56:4d:1f:f9:48:ce:2d:ef:8b:fd:35:
         82:5d:0c:25:62:82:60:5f:45:ac:1d:46:9e:8b:7e:b4:42:42:
         7e:c2:8b:61:91:e6:11:e6:87:72:17:6c:1b:b0:1b:04:fb:ba:
         d4:5c:00:ee:f4:ef:b3:34:91:3d:db:ef:74:dc:37:25:72:26:
         08:40:99:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:36:52 2025 by rpki-client