Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/38d30668-e959-3e25-b5e6-fad98f7cb5d0.roa
File:                     38d30668-e959-3e25-b5e6-fad98f7cb5d0.roa (raw, json)
Hash identifier:          L+P9icSBqkzzK8xP2V0R4HUeGh7elg20mjoYzMw/f0Q=
Subject key identifier:   03:79:E5:2C:A4:76:0E:F7:5F:B8:16:B6:8A:3A:2A:62:0A:8E:7C:4A
Certificate issuer:       /CN=e02382c7-abd5-4293-a7a2-334013e1284b
Certificate serial:       010D0C9F432858442469414A9B29D38D28D01B08
Authority key identifier: 95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/38d30668-e959-3e25-b5e6-fad98f7cb5d0.roa
Signing time:             Fri 08 Dec 2023 02:00:16 +0000
ROA not before:           Fri 08 Dec 2023 02:00:16 +0000
ROA not after:            Thu 07 Mar 2024 02:00:16 +0000
asID:                     20278
IP address blocks:        107.173.68.0/24 maxlen: 24
                          107.173.78.0/24 maxlen: 24
                          107.173.72.0/24 maxlen: 24
                          107.173.138.0/24 maxlen: 24
                          107.173.75.0/24 maxlen: 24
                          107.173.76.0/24 maxlen: 24
                          107.173.74.0/24 maxlen: 24
                          107.173.73.0/24 maxlen: 24
                          107.173.69.0/24 maxlen: 24
                          107.173.64.0/24 maxlen: 24
                          107.174.17.0/24 maxlen: 24
                          107.174.16.0/24 maxlen: 24
                          107.173.66.0/24 maxlen: 24
                          107.173.62.0/24 maxlen: 24
                          107.173.56.0/24 maxlen: 24
                          107.173.58.0/24 maxlen: 24
                          107.173.59.0/24 maxlen: 24
                          107.173.63.0/24 maxlen: 24
                          107.173.139.0/24 maxlen: 24
                          107.173.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:24:69:41:4a:9b:29:d3:8d:28:d0:1b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02382c7-abd5-4293-a7a2-334013e1284b
        Validity
            Not Before: Dec  8 02:00:16 2023 GMT
            Not After : Mar  7 02:00:16 2024 GMT
        Subject: CN=8d541cf0-c1f7-4f6f-b705-1751e2bddcdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:16:d7:89:96:ab:d6:c2:8c:e9:9f:c6:42:d3:
                    36:55:1a:b4:22:9b:33:0c:dc:b1:54:46:62:09:9b:
                    d8:74:6d:8f:e0:e0:f6:78:ec:4f:ba:35:c5:f2:87:
                    06:d1:17:b5:07:5d:d3:06:0d:4f:19:11:a1:59:a5:
                    10:8d:28:ae:3e:e8:cd:b6:ed:fa:5f:50:a9:e2:b1:
                    b3:91:68:3b:39:49:9e:96:55:44:27:19:32:2a:3f:
                    30:ff:cc:3f:01:6c:a6:46:0d:80:c5:7c:7a:5c:cb:
                    53:6d:28:45:bb:4f:ab:7b:b7:af:98:68:38:3d:9c:
                    70:81:4b:7e:52:45:e0:39:28:7a:a4:86:43:10:ce:
                    8f:47:4a:dc:ae:16:4b:f4:40:1d:6b:81:35:eb:ff:
                    7b:90:d6:c1:8c:66:9e:a4:98:7c:9f:b2:fe:13:e8:
                    65:90:f8:d5:70:8d:21:6b:0f:eb:20:6e:4e:68:3e:
                    11:fb:88:f2:0e:ca:8e:a8:1c:d4:53:9d:78:4e:78:
                    01:21:5e:7b:40:b6:d8:60:0f:35:93:08:1a:12:68:
                    be:1d:70:93:b9:e4:4a:a7:2a:e9:a6:72:31:33:b9:
                    c6:37:b2:ef:24:d7:30:59:27:b4:06:16:76:6d:84:
                    ca:7c:93:d3:ee:5f:f3:7e:ac:5f:0d:7a:98:5f:b7:
                    a4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:79:E5:2C:A4:76:0E:F7:5F:B8:16:B6:8A:3A:2A:62:0A:8E:7C:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/38d30668-e959-3e25-b5e6-fad98f7cb5d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/e02382c7-abd5-4293-a7a2-334013e1284b.crl

            X509v3 Authority Key Identifier:
                keyid:95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.173.56.0/24
                  107.173.58.0/23
                  107.173.62.0-107.173.66.255
                  107.173.68.0/23
                  107.173.72.0-107.173.76.255
                  107.173.78.0/24
                  107.173.138.0/23
                  107.174.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:6f:f3:2f:75:75:a0:11:c3:8e:2a:53:55:10:99:9f:89:e4:
         cd:a7:ab:80:bb:fc:82:ab:35:b1:fa:83:0c:bb:68:38:63:fd:
         ce:18:da:96:19:5a:3e:25:a0:08:a3:c7:c8:1e:10:5f:fe:7d:
         34:36:40:71:38:17:47:5e:07:c6:a3:ea:e6:03:6f:a3:e1:c5:
         4b:17:af:d2:a7:eb:80:44:34:ff:6e:e2:4e:6b:33:37:e5:cb:
         d9:3d:88:e2:e8:6c:f2:2e:2e:db:69:73:df:74:97:9b:0d:5b:
         d1:e9:11:05:d4:2e:80:2f:87:af:67:33:f9:cd:c0:03:d4:c7:
         d9:da:e0:48:45:a7:20:47:ce:a8:74:1d:13:66:a5:eb:7a:74:
         db:a2:88:92:a4:23:34:40:21:a9:e6:14:fe:b5:a9:f2:92:04:
         ed:4a:14:69:34:e9:b1:23:e8:b8:87:4f:e4:80:3f:55:85:0e:
         90:3f:3e:68:36:5e:cf:fe:f1:2c:52:67:26:d4:04:71:bf:32:
         77:32:6b:8e:d8:93:ed:d7:c8:78:26:49:b1:1a:a9:c9:c5:49:
         21:bf:78:1b:f1:78:6e:a8:79:83:e5:a7:b4:c8:a3:04:46:ee:
         3d:40:8f:17:a3:e5:17:51:03:5e:f6:22:53:e6:77:b6:54:c5:
         ba:a8:ca:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 4 18:44:05 2024 by rpki-client on console-fra.rpki-client.org