Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663/8089f513-5959-3361-a810-ca34c685351b.roa
File:                     8089f513-5959-3361-a810-ca34c685351b.roa (raw, json)
Hash identifier:          E+6nxGGzAueDmg8nXWrv5OO7IzZcbMNYoseBdzJjGBg=
Subject key identifier:   40:3E:26:F1:93:E9:5A:5F:61:5C:99:82:B8:77:4D:87:46:BE:6B:5B
Certificate issuer:       /CN=578540a4-eada-4f9a-b817-b3e81b5c2663
Certificate serial:       010D0C9F4328584405B3BE4A00EF03D265405C80
Authority key identifier: 05:12:EB:24:36:F8:05:67:D9:A0:A8:BA:AF:E9:52:54:94:BD:23:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663/8089f513-5959-3361-a810-ca34c685351b.roa
Signing time:             Mon 27 Nov 2023 02:00:16 +0000
ROA not before:           Mon 27 Nov 2023 02:00:16 +0000
ROA not after:            Sun 25 Feb 2024 02:00:16 +0000
asID:                     396982
IP address blocks:        141.202.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:05:b3:be:4a:00:ef:03:d2:65:40:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578540a4-eada-4f9a-b817-b3e81b5c2663
        Validity
            Not Before: Nov 27 02:00:16 2023 GMT
            Not After : Feb 25 02:00:16 2024 GMT
        Subject: CN=47221c03-94c1-4f83-a905-a6ac238396af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c1:03:eb:a2:16:99:23:25:ae:2f:bc:78:c9:
                    cd:14:a8:e8:37:39:ea:dd:7c:fc:e5:5e:24:42:25:
                    02:cb:63:e6:ee:fa:47:eb:fe:cf:39:a5:4b:53:d2:
                    6b:ba:74:67:52:7a:88:49:8b:ec:7d:78:2c:70:b1:
                    74:07:d8:93:da:dd:45:62:a1:ae:c6:c5:c5:c8:4f:
                    94:a1:ee:b2:ce:ae:4c:db:b7:af:60:aa:04:23:30:
                    77:c6:3f:8e:58:47:1e:00:c5:f8:8f:99:11:7f:a4:
                    e0:77:b4:e0:81:bd:5d:38:4b:70:0b:d7:c7:9d:bf:
                    52:7a:f2:b0:3b:c9:5c:f7:79:49:fa:c8:19:a1:66:
                    56:a6:ab:de:29:c0:d6:b0:99:f4:7b:05:92:63:e7:
                    21:93:a7:16:c8:d0:c5:92:ef:d7:ed:40:6f:2f:48:
                    fc:a9:7d:45:d0:2d:22:f0:7b:1c:77:31:30:df:df:
                    94:7e:ff:cd:1b:b0:de:89:90:6a:19:93:b9:5c:80:
                    32:4e:c3:e0:4f:66:82:2f:e3:f6:6e:dd:90:f2:a1:
                    44:cb:a7:7a:8c:e2:58:ca:e9:44:1c:19:0a:f5:b6:
                    d2:4e:6b:a1:6e:81:32:ef:7b:73:f1:40:30:66:24:
                    4f:24:11:df:e9:a7:c5:a2:c8:91:3c:45:9c:49:90:
                    a3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:3E:26:F1:93:E9:5A:5F:61:5C:99:82:B8:77:4D:87:46:BE:6B:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663/8089f513-5959-3361-a810-ca34c685351b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663/578540a4-eada-4f9a-b817-b3e81b5c2663.crl

            X509v3 Authority Key Identifier:
                keyid:05:12:EB:24:36:F8:05:67:D9:A0:A8:BA:AF:E9:52:54:94:BD:23:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.202.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:bb:2b:a9:e5:7c:e9:dc:4a:fe:ac:75:b8:b4:fb:76:1a:c6:
         35:59:64:59:fa:20:09:c3:10:3b:54:b5:f5:65:10:81:44:f6:
         55:74:0e:0b:12:ea:2b:22:b3:83:f2:a2:ff:b9:b9:cf:58:cf:
         2e:bc:cf:5e:36:ad:cb:ff:11:d6:b5:62:fd:6c:43:f8:40:0c:
         f2:e3:8e:2c:78:44:21:be:f8:a2:2c:23:62:7b:98:ee:67:e2:
         97:14:97:44:00:98:97:41:36:59:80:2f:d4:5e:19:5e:a0:bb:
         d5:87:b5:ef:6c:ed:ed:b0:fe:a4:64:76:7a:a7:0b:fd:5b:03:
         98:07:9f:55:3c:95:30:10:ae:a0:80:d7:fd:54:ee:4c:f6:17:
         02:f8:4b:4e:01:db:37:9c:29:fd:15:28:55:35:dd:5f:78:ed:
         62:cc:d2:75:32:b3:79:e6:d7:7f:50:27:ac:6f:59:db:4f:70:
         4c:4c:99:ec:5f:04:79:76:6e:9a:f5:e3:9d:4c:55:b2:16:cd:
         d0:86:42:7e:81:1f:a4:30:c8:c5:3d:76:34:a4:d7:3b:5f:fa:
         37:c3:b8:34:68:83:f9:c6:75:b2:9f:8c:fa:61:a8:41:b1:b0:
         4c:87:13:5a:b2:2b:ab:77:85:2c:b6:74:fc:78:df:18:c9:b8:
         1e:77:c9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 20:13:09 2024 by rpki-client on console-ams.rpki-client.org