Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da/fbd13461-b260-30ed-9927-71e60d04962e.roa
File:                     fbd13461-b260-30ed-9927-71e60d04962e.roa (raw, json)
Hash identifier:          SehkR0Wz0KZAjRyCOZ4q4cDb+zd/ReubU2a12nY2eek=
Subject key identifier:   66:86:2C:FE:69:CD:99:66:0B:98:4D:5C:41:CD:7E:1B:D2:23:F2:2B
Certificate issuer:       /CN=80f0e919-8ed6-4b5f-bc05-1b833ab626da
Certificate serial:       010D0C9F4328583EB23A1BD0371B11D84395B4C0
Authority key identifier: A7:02:98:3F:AE:FA:FE:7F:00:28:35:A9:4C:B2:34:5D:C9:C2:81:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da/fbd13461-b260-30ed-9927-71e60d04962e.roa
Signing time:             Mon 04 Apr 2022 13:44:52 +0000
ROA not before:           Mon 04 Apr 2022 13:44:52 +0000
ROA not after:            Mon 28 Oct 2024 04:00:00 +0000
asID:                     16509
IP address blocks:        23.130.112.0/24 maxlen: 24
                          23.130.240.0/24 maxlen: 24
                          23.142.96.0/24 maxlen: 24
                          23.156.240.0/24 maxlen: 24
                          23.161.160.0/24 maxlen: 24
                          2600:3300::/28 maxlen: 28
                          2600:3310::/28 maxlen: 28
                          2600:3320::/28 maxlen: 28
                          2600:3330::/28 maxlen: 28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b2:3a:1b:d0:37:1b:11:d8:43:95:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f0e919-8ed6-4b5f-bc05-1b833ab626da
        Validity
            Not Before: Apr  4 13:44:52 2022 GMT
            Not After : Oct 28 04:00:00 2024 GMT
        Subject: CN=ff5614a1-44f9-44e5-bad4-b801af1e0a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ce:93:65:7d:be:06:e6:8c:40:03:04:af:c7:
                    c2:ca:1b:39:e7:28:7f:f4:75:2e:9e:6a:14:ba:d0:
                    73:ff:b6:b3:df:2c:cf:6c:ed:82:e4:13:ee:5f:7f:
                    9e:9f:62:3e:3c:4e:69:91:ad:1f:35:57:15:f4:15:
                    ec:36:b3:75:2e:74:21:e8:c1:f2:7c:68:7c:57:83:
                    b3:48:2a:ce:3b:09:95:43:56:12:b2:68:d2:0e:df:
                    73:95:1f:b8:e4:5e:67:c7:70:b8:19:09:99:ed:26:
                    55:08:36:09:86:d8:b2:e5:1c:7d:a8:64:96:16:d2:
                    8e:1a:30:32:29:b4:dd:41:1f:48:78:11:41:4c:a6:
                    72:c0:e0:8f:62:52:87:ee:f2:f4:42:21:62:8b:e0:
                    60:2e:49:67:e4:d7:74:19:96:18:d3:41:ef:bf:5f:
                    b8:08:db:1b:64:dd:fb:9b:06:29:d3:ca:47:a6:f4:
                    ed:f1:8d:78:59:2b:e6:48:85:fe:c6:a5:c7:e6:6d:
                    20:dd:e3:5e:79:a4:ec:e8:c4:1a:26:ce:cc:2b:7c:
                    44:34:d3:3b:26:4d:43:a1:29:20:e6:9c:98:0b:ce:
                    e6:20:97:a9:2d:35:3c:f2:c2:66:03:3b:4d:94:0f:
                    ac:a4:77:ac:1a:16:a6:78:9f:2d:31:d7:00:08:e0:
                    6c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:86:2C:FE:69:CD:99:66:0B:98:4D:5C:41:CD:7E:1B:D2:23:F2:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da/fbd13461-b260-30ed-9927-71e60d04962e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da/80f0e919-8ed6-4b5f-bc05-1b833ab626da.crl

            X509v3 Authority Key Identifier:
                keyid:A7:02:98:3F:AE:FA:FE:7F:00:28:35:A9:4C:B2:34:5D:C9:C2:81:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.112.0/24
                  23.130.240.0/24
                  23.142.96.0/24
                  23.156.240.0/24
                  23.161.160.0/24
                IPv6:
                  2600:3300::/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:98:31:b6:5f:56:d2:02:24:0f:fd:25:cd:bb:64:bb:92:a9:
         14:1e:13:fb:dd:d6:53:05:e5:94:2d:0c:de:8f:4e:f6:52:60:
         a3:ce:6e:0b:38:e1:c0:5e:7e:f9:fe:c0:4d:be:c8:44:dc:14:
         59:db:da:ad:d1:4f:34:ee:5c:e4:a4:70:a2:27:ae:bc:ab:00:
         51:73:4d:79:e4:c0:7b:51:1e:bf:3f:9b:df:5a:df:2f:6f:e3:
         cf:80:b9:53:f3:de:6a:e1:b1:a1:c9:dc:46:67:ef:83:6d:d6:
         bb:fd:c5:ba:f2:1a:b7:52:8e:74:6e:6c:7c:83:39:24:8b:75:
         70:50:d1:3e:db:99:9d:c1:20:8f:0f:9e:e2:f8:85:a3:61:3b:
         66:80:03:ee:0a:d0:72:c5:c1:29:cd:69:f7:32:c2:47:17:1e:
         32:12:7b:ec:e1:d4:73:47:61:26:04:7e:32:61:b4:74:e1:1e:
         d1:f7:b6:22:f6:b1:ba:d8:23:e4:b4:d3:8c:03:2a:11:7f:fe:
         d5:bf:cd:68:20:ec:0d:9c:db:8f:09:9e:f5:3c:06:25:87:55:
         32:7f:03:8c:27:6b:b9:40:37:5b:fa:f0:8b:71:73:ee:d6:19:
         41:70:9f:b0:b2:e1:b9:56:9c:04:e4:b8:d1:a0:f9:cb:5d:0c:
         24:2a:da:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:45 2023 by rpki-client on console-fra.rpki-client.org