Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/30530909-12cc-3cf5-b362-f42594a00472.roa
File:                     30530909-12cc-3cf5-b362-f42594a00472.roa (raw, json)
Hash identifier:          X/SwriEttB9yiZ3ia0due041y9P/+JXoii+j0uz5Ujc=
Subject key identifier:   BB:05:74:07:85:D5:29:91:DB:C8:7F:10:DB:BF:8F:64:0A:DB:F1:34
Certificate issuer:       /CN=c2b3ef98-2711-4f31-8824-1bf41e5c5c17
Certificate serial:       010D0C9F43285841BF9C4E067B6F74357B21ECC0
Authority key identifier: 0F:16:CB:94:5C:C3:DB:6C:BD:60:65:B5:5D:E7:2F:ED:2D:A0:97:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/30530909-12cc-3cf5-b362-f42594a00472.roa
Signing time:             Mon 01 May 2023 18:14:44 +0000
ROA not before:           Mon 01 May 2023 18:14:44 +0000
ROA not after:            Sun 03 Aug 2025 04:00:00 +0000
asID:                     399970
IP address blocks:        149.112.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:bf:9c:4e:06:7b:6f:74:35:7b:21:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2b3ef98-2711-4f31-8824-1bf41e5c5c17
        Validity
            Not Before: May  1 18:14:44 2023 GMT
            Not After : Aug  3 04:00:00 2025 GMT
        Subject: CN=bd586b52-e51a-47ea-9532-79e2b7967d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:de:bc:d3:40:e1:35:57:42:60:ec:d6:35:16:
                    e3:8a:c6:90:c5:f9:0e:8c:49:83:ec:1d:22:bc:c1:
                    2a:94:59:be:a9:8c:41:89:a5:1a:34:61:e2:94:8b:
                    bb:19:36:48:c6:b3:45:5c:e8:03:42:b1:4a:fe:1c:
                    a3:20:07:3c:40:e7:be:75:62:31:a3:cc:4c:bb:e6:
                    97:9d:7d:7f:56:e4:0b:9d:eb:82:5c:cb:d9:aa:14:
                    46:cc:6d:50:14:3c:02:b6:ee:54:e2:b3:a6:3b:b1:
                    82:78:77:5f:1d:4d:ae:48:0b:19:7e:ef:ff:35:05:
                    76:50:d1:bd:78:f8:33:b8:10:55:46:66:58:f4:3b:
                    cc:71:92:a1:f2:50:b6:e3:a0:37:85:83:d3:d2:af:
                    96:ad:24:7b:4b:1a:32:e7:3e:1a:41:b5:44:ef:0b:
                    7b:7e:54:6c:52:c9:0f:11:fc:2d:20:b3:fb:f8:c8:
                    f9:cf:f5:5d:9e:9c:a8:0e:f9:9d:b6:c9:1c:29:7d:
                    92:8a:50:81:ac:af:26:9b:d7:37:e0:92:a7:82:80:
                    5f:13:45:e6:b8:da:db:f9:89:56:47:23:85:40:a2:
                    18:2a:09:2e:f0:05:4c:bf:bb:fd:70:8d:9c:f3:45:
                    f4:da:0f:d6:9a:a3:ac:b1:7c:55:56:55:28:f9:62:
                    1c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:05:74:07:85:D5:29:91:DB:C8:7F:10:DB:BF:8F:64:0A:DB:F1:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/30530909-12cc-3cf5-b362-f42594a00472.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/c2b3ef98-2711-4f31-8824-1bf41e5c5c17.crl

            X509v3 Authority Key Identifier:
                keyid:0F:16:CB:94:5C:C3:DB:6C:BD:60:65:B5:5D:E7:2F:ED:2D:A0:97:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:56:b2:2d:5d:18:bc:6a:a0:5a:93:6a:03:ae:aa:ec:fa:ed:
         a7:7f:12:c9:fc:8e:04:c1:74:71:1e:ab:5b:2d:59:75:a3:85:
         ec:bf:5f:19:4a:fe:a4:30:90:2f:cc:dc:2c:7a:01:21:02:83:
         c7:84:71:5f:59:cc:55:66:db:1f:99:0c:cb:eb:05:34:6e:16:
         de:88:f0:4c:11:87:dc:7b:0c:73:57:ca:ea:23:21:59:6c:0e:
         ad:6c:be:5c:8d:67:c6:e7:03:8a:1c:d3:db:24:86:cc:c9:81:
         c6:4a:77:51:ad:58:a8:25:95:48:fd:9a:88:99:75:ea:3d:ce:
         20:ef:8f:a2:8d:42:fb:10:c1:7e:0e:cc:8b:54:d7:39:b5:9a:
         f2:7d:3e:d2:e0:3d:ba:68:80:b5:d6:4a:4b:78:5a:df:22:e2:
         01:85:1e:f3:a6:3f:d8:c8:b8:a5:a3:66:91:38:63:92:a2:82:
         f1:90:fe:8f:e8:69:73:86:39:74:6c:85:0e:9f:35:21:1f:66:
         64:84:be:78:8f:e9:bc:2b:8d:52:79:8d:2a:06:34:43:a4:8f:
         0d:cb:46:1d:02:63:a8:79:e2:9c:60:39:d3:95:5c:e7:66:e3:
         f3:78:f9:c9:47:ce:a8:cb:0b:63:66:bb:d3:14:61:1a:7e:84:
         98:40:aa:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:47 2023 by rpki-client on console-ams.rpki-client.org