Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/b92bf437-c2b4-3c67-a7a7-7e1b34ca17a5.roa
File:                     b92bf437-c2b4-3c67-a7a7-7e1b34ca17a5.roa (raw, json)
Hash identifier:          SpQ1TC8zo7QkGzgPD5u3LXrFO+hP6oqJfrk775CjEng=
Subject key identifier:   75:81:7A:94:14:5E:49:D5:DA:CF:D7:E3:95:67:6D:2B:7C:87:5C:BE
Certificate issuer:       /CN=e0cdac38-6681-4b09-b992-31d2030b8796
Certificate serial:       010D0C9F4328584886B07C70774046CD8D7BDF00
Authority key identifier: AE:50:A4:F3:A0:5E:B8:67:2C:03:39:B8:C9:AB:BC:2B:6B:17:34:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/b92bf437-c2b4-3c67-a7a7-7e1b34ca17a5.roa
Signing time:             Mon 13 Jan 2025 02:00:40 +0000
ROA not before:           Mon 13 Jan 2025 02:00:40 +0000
ROA not after:            Sun 13 Apr 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        138.133.119.0/24 maxlen: 24
                          138.133.132.0/24 maxlen: 24
                          138.133.133.0/24 maxlen: 24
                          138.133.195.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:86:b0:7c:70:77:40:46:cd:8d:7b:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0cdac38-6681-4b09-b992-31d2030b8796
        Validity
            Not Before: Jan 13 02:00:40 2025 GMT
            Not After : Apr 13 01:00:40 2025 GMT
        Subject: CN=8d7b50fa-8599-4078-928a-a2c2036e5a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:73:8f:89:83:26:c2:39:40:3d:39:47:02:92:
                    c6:9e:d1:44:33:c0:a7:63:6f:97:01:0d:79:54:9f:
                    ff:09:04:59:b0:d3:5b:13:51:10:ec:44:23:cf:5f:
                    5c:10:b8:79:87:7f:a3:ef:f2:6b:6c:93:9e:9b:22:
                    11:c9:0f:2f:11:b0:58:2a:e3:a2:5c:05:9c:e5:80:
                    fd:ee:4f:59:c8:ed:27:7c:e8:c4:73:e5:a1:9e:ef:
                    73:ee:de:3e:0f:bd:9b:c7:09:93:4e:32:fe:9b:47:
                    59:66:6a:67:3b:76:8f:42:d3:51:f2:8f:90:85:f9:
                    a6:4b:53:66:18:f0:7f:95:7e:75:ba:26:24:52:31:
                    86:02:03:63:fa:03:2d:ae:bb:b5:59:3f:5f:5e:86:
                    c0:55:e1:ca:18:e9:7a:41:88:24:eb:0c:9c:96:47:
                    c0:25:dd:c4:a8:11:b3:d4:20:d1:de:41:a4:b4:d3:
                    06:80:7a:b4:26:1a:72:38:b6:71:10:60:76:3f:a7:
                    7c:19:cb:1b:d2:fd:db:d4:bd:15:56:ae:57:51:6a:
                    14:c5:2a:bd:a0:de:44:3f:3e:a5:68:c7:26:d6:a4:
                    84:b3:06:d8:97:11:01:48:c4:2c:7e:77:bf:c8:dd:
                    7e:51:b3:6c:bc:53:95:40:71:4c:19:a3:f3:71:ef:
                    1b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:81:7A:94:14:5E:49:D5:DA:CF:D7:E3:95:67:6D:2B:7C:87:5C:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/b92bf437-c2b4-3c67-a7a7-7e1b34ca17a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e0cdac38-6681-4b09-b992-31d2030b8796.crl

            X509v3 Authority Key Identifier:
                keyid:AE:50:A4:F3:A0:5E:B8:67:2C:03:39:B8:C9:AB:BC:2B:6B:17:34:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.133.119.0/24
                  138.133.132.0/23
                  138.133.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:ae:d6:e9:d5:01:3a:80:47:63:0e:5a:3f:49:e2:74:57:07:
         c2:18:3b:d9:7b:aa:68:fd:6c:78:e5:87:37:cb:d0:53:04:d1:
         fd:e6:4d:cc:6c:7f:41:24:84:33:bc:8c:67:f1:ba:70:70:db:
         20:9e:ac:6b:0a:d1:20:1c:b4:52:9a:bc:5d:14:7b:bb:fd:16:
         0d:fc:ee:12:18:7f:69:f7:a9:f6:7c:77:53:a0:32:ff:c6:1b:
         06:6e:ea:8a:e8:8c:c8:1a:13:56:78:a8:5c:ee:63:6d:a8:fd:
         c3:48:56:fd:5a:59:9c:3c:97:06:be:b1:55:18:53:40:1a:49:
         be:85:b2:80:30:e7:29:bc:af:71:46:e4:0d:4f:92:11:43:5a:
         21:12:08:6f:53:71:7d:7e:b6:d6:93:02:7a:3c:64:87:93:82:
         c5:cd:f6:3c:0a:75:5b:fc:d6:e7:0a:30:da:8d:8b:1e:50:64:
         8c:0e:e0:4f:bd:27:8a:18:45:21:fa:7b:b4:3b:51:3c:09:2c:
         b3:c5:c1:6f:1f:0a:42:30:f5:12:5f:96:f4:3e:45:ec:e3:2a:
         c3:1f:6b:48:41:7f:2b:ef:57:0e:72:25:7b:39:79:db:8c:0d:
         3d:1b:dc:78:d6:96:8c:bd:1e:25:64:b0:ff:30:16:51:b3:62:
         1d:60:25:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:21 2025 by rpki-client