Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a359d9aa-5083-325a-87e4-6b285a87ef43.roa
File:                     a359d9aa-5083-325a-87e4-6b285a87ef43.roa (raw, json)
Hash identifier:          Ye8ol3bHWBeL3QQ4RGL4IErKfMTQbB7K+EQVjhda8QQ=
Subject key identifier:   9A:24:09:7B:31:FB:C2:98:61:DE:C2:4D:85:9A:9D:C1:64:DB:E1:55
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F432858494E2EB36D4B389C5DFA2362A0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a359d9aa-5083-325a-87e4-6b285a87ef43.roa
Signing time:             Tue 25 Mar 2025 13:00:51 +0000
ROA not before:           Tue 25 Mar 2025 13:00:51 +0000
ROA not after:            Mon 23 Jun 2025 13:00:51 +0000
asID:                     30215
IP address blocks:        139.138.29.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4e:2e:b3:6d:4b:38:9c:5d:fa:23:62:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Mar 25 13:00:51 2025 GMT
            Not After : Jun 23 13:00:51 2025 GMT
        Subject: CN=9fcdaa4c-2938-4fe2-930c-1000fc4237c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d1:5f:b0:95:dc:40:22:bb:0a:03:3d:09:c0:
                    0a:14:62:84:d9:56:a5:0d:7b:ca:07:96:15:b0:1a:
                    0b:e0:e4:f1:4b:33:0c:3b:9c:8d:25:a6:00:c4:65:
                    11:05:b7:65:72:c6:26:17:5d:3b:8e:1b:7b:a5:1e:
                    c9:32:4a:bc:68:78:f8:13:6a:5a:94:a8:03:3b:b1:
                    ee:0e:65:ee:fb:34:05:3c:d1:ec:98:b9:e3:0f:ec:
                    ad:fa:63:dd:c8:b4:d3:91:2f:11:95:dd:03:da:6f:
                    3e:ba:36:b9:62:f6:f0:4a:f5:84:7d:1b:01:6a:72:
                    6f:c7:18:89:a4:69:03:13:fe:79:23:c6:ac:82:28:
                    05:b1:69:67:86:f2:a8:81:c6:6b:6a:a2:be:b8:b2:
                    5f:eb:b7:81:22:41:2b:08:6e:c0:6c:48:5d:67:67:
                    6a:cf:d1:3f:8f:0d:2e:a4:e0:7c:76:60:ac:58:7b:
                    79:95:3d:48:4d:be:ba:0e:cd:74:67:61:f4:50:4f:
                    d4:91:f9:dc:80:82:6d:48:9e:46:6e:d4:e2:49:c9:
                    be:a2:79:19:81:fb:d4:30:33:15:3c:eb:9c:44:5d:
                    41:f0:c3:d0:0a:d7:27:70:18:a0:e3:8d:24:30:5e:
                    6f:f0:db:0e:43:8d:1f:90:da:f0:b0:29:f1:aa:c4:
                    27:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:24:09:7B:31:FB:C2:98:61:DE:C2:4D:85:9A:9D:C1:64:DB:E1:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a359d9aa-5083-325a-87e4-6b285a87ef43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.138.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:ee:c4:e8:93:bb:87:99:6a:61:c1:c1:93:00:d5:42:be:4d:
         ed:ba:28:2f:6e:b3:ae:3e:8c:1d:7a:0a:3e:9e:f4:1e:c5:77:
         0c:94:69:96:e3:a3:ee:34:5c:41:94:59:fd:4f:33:33:3f:a2:
         50:db:de:8c:4a:3f:b5:0f:82:94:b0:2c:f9:60:5d:a1:92:09:
         1b:4e:46:17:03:41:2d:55:0c:bd:b6:79:ea:0c:cc:9d:88:19:
         37:de:d9:8d:b9:31:ca:b2:8a:77:04:d3:1b:41:55:49:5a:f4:
         52:a8:df:f1:02:78:4b:ca:40:77:a4:d3:d3:fc:3e:e8:e2:e7:
         45:20:79:2f:40:2e:42:8f:aa:84:31:26:e8:20:01:e5:1b:d2:
         7c:d8:79:59:66:d1:76:90:da:a3:c7:4e:18:2c:61:01:f5:80:
         7e:e2:9b:f4:58:d5:f8:fe:da:58:d1:24:57:15:25:e4:39:61:
         bb:4d:51:4e:7b:69:a5:5c:7c:50:f0:42:8f:f7:cc:62:92:81:
         fd:9c:6d:de:cd:fc:d1:23:9a:88:f5:90:28:37:22:9a:54:b0:
         47:6d:4b:4a:e8:00:5e:ce:83:d3:c6:b9:38:d7:e0:57:34:38:
         81:70:be:35:1d:31:bc:69:81:5e:3d:1e:09:75:36:6c:2d:ca:
         0a:3c:e4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:43:42 2025 by rpki-client