Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/77af8214-1055-37c7-a99b-733e5ca78a8d.roa
File:                     77af8214-1055-37c7-a99b-733e5ca78a8d.roa (raw, json)
Hash identifier:          ikxbqsdzThL6vuXhGLEz7+u76zdQeZCtJk6TkS/5+GY=
Subject key identifier:   AD:A3:32:5D:0A:1C:C5:29:3E:56:93:D9:A5:F4:66:51:1E:2B:5B:F4
Certificate issuer:       /CN=e02382c7-abd5-4293-a7a2-334013e1284b
Certificate serial:       010D0C9F4328584424694596883A5BF3F50201F0
Authority key identifier: 95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/77af8214-1055-37c7-a99b-733e5ca78a8d.roa
Signing time:             Fri 08 Dec 2023 02:00:16 +0000
ROA not before:           Fri 08 Dec 2023 02:00:16 +0000
ROA not after:            Thu 07 Mar 2024 02:00:16 +0000
asID:                     36352
IP address blocks:        198.46.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:24:69:45:96:88:3a:5b:f3:f5:02:01:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02382c7-abd5-4293-a7a2-334013e1284b
        Validity
            Not Before: Dec  8 02:00:16 2023 GMT
            Not After : Mar  7 02:00:16 2024 GMT
        Subject: CN=43966912-3fde-4e09-a0fa-c57a1a1e8256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:be:e9:57:91:a5:3d:69:a8:c3:52:2c:2d:d2:
                    db:37:af:a9:89:5a:a3:e1:6b:15:cb:9c:f1:64:22:
                    ef:dd:64:a3:2e:5c:7a:23:24:e5:d9:cc:33:e3:53:
                    f0:82:a6:8c:83:61:78:f4:26:04:b3:61:6d:41:c6:
                    ec:45:55:44:fb:34:a4:14:3a:de:dd:0f:0f:5d:55:
                    85:5b:9e:61:80:53:28:c5:b4:66:72:8f:b7:70:ae:
                    57:9b:96:d7:bf:98:04:c7:95:19:6b:2d:5b:33:22:
                    38:08:99:5a:49:ea:22:8c:ab:3b:7d:1b:02:ee:27:
                    3c:39:e0:bb:3b:e1:76:ac:ec:91:03:c6:5e:9b:e1:
                    6b:c6:59:da:69:0d:e2:ef:7b:a0:10:ee:d7:82:9c:
                    c9:92:5e:ec:e0:c0:40:59:8d:86:bb:16:22:2e:92:
                    b8:5d:88:71:f3:39:e1:7f:25:69:ba:42:71:64:73:
                    aa:d2:56:c0:36:28:7d:4b:8b:1d:ea:85:06:8d:24:
                    30:f6:d4:43:ce:83:4a:30:66:48:fb:31:dc:b9:99:
                    df:46:7c:76:5d:fe:04:d8:1d:0c:2e:e4:60:05:61:
                    a9:17:38:8e:c7:d3:be:48:d5:0d:12:5e:fd:75:91:
                    f8:71:86:8f:82:09:55:ba:a7:f1:77:61:f9:d7:0b:
                    ce:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A3:32:5D:0A:1C:C5:29:3E:56:93:D9:A5:F4:66:51:1E:2B:5B:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/77af8214-1055-37c7-a99b-733e5ca78a8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/e02382c7-abd5-4293-a7a2-334013e1284b.crl

            X509v3 Authority Key Identifier:
                keyid:95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.46.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:04:45:b9:c3:8c:7b:da:01:86:b9:1e:03:f4:36:49:dc:73:
         87:ba:fc:96:27:cf:a5:10:00:9f:cc:7f:5f:a8:1a:36:5b:a8:
         99:3a:7e:c4:ec:fc:d3:56:f7:16:8a:d3:64:3d:c6:52:88:8b:
         e9:49:89:4d:26:9f:cc:f0:97:10:9d:50:77:8c:e1:cd:b0:12:
         f9:18:76:22:77:84:f3:e6:b5:38:f5:bf:9c:77:76:70:25:87:
         6d:9c:f1:63:39:8f:63:05:72:c5:10:45:50:d2:81:11:85:a7:
         cc:1a:0f:10:5f:0c:93:e4:2c:72:37:cf:65:ab:59:13:46:02:
         8a:52:f6:df:e2:3a:a4:1c:b3:2e:41:af:bf:4e:d2:f2:ec:86:
         7e:33:bc:7a:f3:26:8d:e7:43:e9:0d:91:93:c8:cb:60:ee:3a:
         1f:7a:ca:17:82:4b:4e:ad:73:f4:43:6a:6a:2d:75:ba:0a:55:
         49:7a:dd:9f:65:cf:cc:da:c3:ac:c9:ef:c3:32:55:cb:81:2e:
         5b:3d:54:1f:19:49:2d:67:66:4c:08:60:46:86:59:78:21:b6:
         47:72:9b:1a:c9:0c:b6:f9:84:b5:b3:b1:10:99:4e:87:4c:ef:
         59:ea:23:14:5e:04:44:16:b1:c7:b4:68:c8:54:38:f9:a5:34:
         d9:b5:b6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 4 18:44:05 2024 by rpki-client on console-fra.rpki-client.org