Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/a942301d-5541-36c8-9342-911968d44a92.roa
File:                     a942301d-5541-36c8-9342-911968d44a92.roa (raw, json)
Hash identifier:          nBLRgjdVXEwNXQtWbkO9mZtfPq1A9ejx5HeYobuqOgg=
Subject key identifier:   21:A0:9C:94:A4:B8:A4:EC:2D:44:15:3C:9C:1B:21:F4:7C:97:22:6D
Certificate issuer:       /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial:       010D0C9F4328584886B0816FCD83560456FBA580
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/a942301d-5541-36c8-9342-911968d44a92.roa
Signing time:             Mon 13 Jan 2025 02:00:40 +0000
ROA not before:           Mon 13 Jan 2025 02:00:40 +0000
ROA not after:            Sun 13 Apr 2025 01:00:40 +0000
asID:                     22742
IP address blocks:        129.133.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:86:b0:81:6f:cd:83:56:04:56:fb:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
        Validity
            Not Before: Jan 13 02:00:40 2025 GMT
            Not After : Apr 13 01:00:40 2025 GMT
        Subject: CN=8e9ce681-08bc-4452-a06a-254c57ab9ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9d:be:a9:97:7c:0e:9f:ba:bc:95:a6:4d:0b:
                    29:d4:a8:ad:0d:39:76:5a:f4:8e:c9:97:e8:f0:06:
                    93:6f:8b:6d:fd:92:e6:fd:2b:33:11:28:d4:9a:eb:
                    b0:13:2f:5c:8f:0e:07:f6:c8:bf:67:38:9c:3c:d0:
                    ea:a4:80:34:c7:3a:ef:1f:c8:47:4e:49:45:f2:15:
                    15:4d:5d:57:48:14:0f:9c:d5:09:d6:86:20:4f:15:
                    d2:8f:bb:12:0b:9c:64:c5:41:4c:b7:ac:e4:57:63:
                    fe:85:6f:76:fb:96:10:13:a8:40:a4:c9:cf:7f:12:
                    55:1e:b3:02:f2:6e:aa:e3:dd:dc:d7:55:36:fb:3c:
                    c6:cc:42:1e:eb:a5:5c:62:01:c9:f9:d7:9d:4b:6f:
                    aa:aa:b9:01:8c:2e:f8:be:86:e0:70:b2:7d:8a:8a:
                    a9:6d:55:e1:48:2e:a4:19:fd:68:1a:9c:27:cd:85:
                    51:6c:b7:cd:78:d5:9e:05:01:29:1e:be:d3:e0:71:
                    2b:25:1f:c6:7d:23:3c:35:b0:2b:40:24:fa:39:85:
                    60:d0:91:12:4a:fb:25:9d:1f:75:36:9c:56:ab:22:
                    f9:2b:f9:98:52:b9:58:41:dd:c7:5e:3a:57:8d:cb:
                    d7:ac:a1:b5:be:4e:6a:a0:f8:85:22:1c:e3:be:61:
                    c9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A0:9C:94:A4:B8:A4:EC:2D:44:15:3C:9C:1B:21:F4:7C:97:22:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/a942301d-5541-36c8-9342-911968d44a92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.133.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:f6:54:33:37:e4:55:2e:fc:13:5a:57:00:3b:6d:7d:fe:fd:
         aa:c9:7d:03:4b:59:87:95:c7:6e:64:17:84:b4:3f:40:7b:45:
         83:f5:ed:46:57:a1:da:f9:4c:21:52:1a:66:85:66:9a:de:16:
         d2:12:9a:7e:d5:98:62:74:c7:ff:af:d1:e7:c6:3b:af:16:c4:
         b4:d1:c2:f9:1c:8f:b3:ee:51:9b:ac:c4:06:d0:b2:db:f6:04:
         cd:45:50:c8:e9:2b:3c:b1:7d:c9:8d:96:f9:33:a2:3a:d9:6f:
         48:77:a1:09:05:ce:93:3f:bb:b0:65:32:bd:e8:15:4a:b5:18:
         2f:d9:aa:92:2c:ac:48:a0:b5:99:53:76:94:19:59:0d:f1:36:
         79:db:5f:15:28:a8:01:d3:dc:ff:af:04:31:3f:9f:06:e4:ea:
         b9:45:19:a7:de:ff:54:0a:15:e7:89:5c:99:8a:d2:88:96:60:
         ad:fd:45:57:31:8d:f1:85:c2:bd:98:52:7b:db:26:c4:b5:38:
         8d:d5:ef:d9:7b:cf:bd:7a:71:11:e8:42:be:8d:ed:d6:da:4d:
         b9:97:d4:8a:13:ef:25:d6:9b:38:cb:48:5a:d3:9e:19:33:bb:
         4d:b9:53:8d:73:79:ec:a9:08:48:cf:b1:45:ec:2d:0f:1d:b0:
         4e:01:af:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:02:16 2025 by rpki-client