Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/9998ac89-c4a2-332e-b8b4-eddaba485b0d.roa
File:                     9998ac89-c4a2-332e-b8b4-eddaba485b0d.roa (raw, json)
Hash identifier:          NZtSbhVYiXDWdauPo0J4L8yeUbUR6W5sdKg6ofm1Koc=
Subject key identifier:   1B:9A:5B:4A:39:01:44:CF:89:8B:C4:C0:2F:FB:5C:4A:23:FE:06:99
Certificate issuer:       /CN=7e2fdf07-a7cd-43db-86a0-386dddefb544
Certificate serial:       010D0C9F4328584216E23C82A5EE762D4D2DC720
Authority key identifier: 4E:36:07:5A:5E:C0:8D:A5:79:75:92:46:29:00:87:29:2A:46:86:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/9998ac89-c4a2-332e-b8b4-eddaba485b0d.roa
Signing time:             Fri 02 Jun 2023 20:08:53 +0000
ROA not before:           Fri 02 Jun 2023 20:08:53 +0000
ROA not after:            Thu 31 Aug 2023 20:08:53 +0000
asID:                     399970
IP address blocks:        149.112.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:16:e2:3c:82:a5:ee:76:2d:4d:2d:c7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2fdf07-a7cd-43db-86a0-386dddefb544
        Validity
            Not Before: Jun  2 20:08:53 2023 GMT
            Not After : Aug 31 20:08:53 2023 GMT
        Subject: CN=72808fe7-b632-4fec-a2a3-7baa2f58d086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:84:5a:13:a3:e2:d1:22:a9:29:4a:40:19:4d:
                    61:79:82:d6:ae:23:f7:fa:4d:cc:9f:37:4b:db:51:
                    6e:d8:00:63:13:45:79:46:b8:44:44:48:67:d0:d1:
                    44:86:d8:31:74:71:90:79:57:31:9f:d4:1c:d7:4f:
                    65:34:7b:ed:60:9e:cb:28:63:01:5c:48:ed:9c:4e:
                    af:11:73:61:49:13:0f:c0:3b:18:da:83:da:3b:d9:
                    bc:23:5d:81:a7:4c:37:4b:ee:3a:8f:38:c2:aa:42:
                    a0:3e:49:b1:aa:61:5d:c7:a6:fc:dc:94:23:04:1b:
                    ef:4a:2c:c3:4b:74:9d:09:27:57:39:7a:e9:c9:9b:
                    cc:04:69:49:a2:31:8a:0b:d1:02:de:a5:a0:e4:5f:
                    a9:53:75:5c:a8:56:4a:91:fb:6d:2d:6a:3b:85:95:
                    49:c6:38:82:dd:73:4c:e4:77:7f:d2:92:84:fd:42:
                    ae:ae:10:35:1b:f9:3b:68:31:3f:8f:18:19:a5:e4:
                    51:42:dc:59:39:e3:f8:cc:8c:31:a1:fe:4a:c8:f9:
                    f0:6f:39:16:87:51:66:11:49:a4:50:30:90:0e:26:
                    e7:25:37:2a:19:be:03:35:26:2d:f2:25:8f:e4:97:
                    9f:29:0d:0b:9e:b1:4c:25:b7:8a:5f:c8:0c:c1:ab:
                    92:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9A:5B:4A:39:01:44:CF:89:8B:C4:C0:2F:FB:5C:4A:23:FE:06:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/9998ac89-c4a2-332e-b8b4-eddaba485b0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/7e2fdf07-a7cd-43db-86a0-386dddefb544.crl

            X509v3 Authority Key Identifier:
                keyid:4E:36:07:5A:5E:C0:8D:A5:79:75:92:46:29:00:87:29:2A:46:86:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:5d:84:06:17:a2:f7:3a:d5:9b:ca:b8:c6:5f:9d:24:71:b8:
         5b:e0:2c:e7:80:3d:07:a7:50:9a:f5:7e:50:5c:5c:ad:b7:f5:
         81:49:54:6b:81:81:dc:58:5c:30:be:21:9e:11:1d:0e:d2:a9:
         10:50:44:ee:02:b2:68:e2:cf:a6:3c:7e:53:d0:42:4b:16:e4:
         c7:67:7a:72:c2:a3:fd:7f:b1:7e:28:09:39:85:a4:66:67:84:
         04:5c:13:dc:2a:f8:c7:00:8d:05:0d:68:6c:0f:8a:89:31:14:
         1a:44:3d:59:6f:46:f5:13:e8:d0:99:2b:78:dc:89:f0:47:4a:
         a3:02:9b:52:e2:bc:63:65:59:b7:57:d9:ed:19:31:9c:a0:2c:
         52:d7:7f:81:6e:a5:fe:fe:4b:34:bc:1a:51:f1:62:7b:0e:df:
         02:35:46:d8:9b:c3:0a:e7:13:0a:1a:19:e9:35:3e:e8:1e:25:
         65:7e:31:e4:fb:33:6b:b4:d7:fc:03:13:c4:b6:68:db:b9:0d:
         f8:a1:85:4d:80:ed:06:11:78:1a:d3:07:ed:52:89:33:e8:ba:
         ea:db:d9:55:b9:6f:06:e7:9b:3e:8c:21:9e:08:aa:60:2e:9f:
         b4:13:82:d1:ce:6b:aa:9c:71:e2:f3:b6:2d:c1:44:6a:f5:89:
         cf:d2:ec:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:50 2023 by rpki-client on console-fra.rpki-client.org