Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/14ebeda6-4988-36cd-8b04-217ddd8e45d7.roa
File:                     14ebeda6-4988-36cd-8b04-217ddd8e45d7.roa (raw, json)
Hash identifier:          5ESyEw+nxOhdAEyTHvaIJhuLaJ2pGKGLrejjKZ7a1lc=
Subject key identifier:   26:CE:97:0B:6A:FB:93:E1:21:B7:F3:68:8A:CB:E6:64:B4:2F:C2:33
Certificate issuer:       /CN=4304a9ea-ddad-4442-bdab-8d8916ff78f9
Certificate serial:       010D0C9F43285845CE090A645B214FF14384A0E0
Authority key identifier: 7E:62:15:02:42:21:A7:BB:9B:3A:C8:99:DA:C2:CB:8E:23:28:B4:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/14ebeda6-4988-36cd-8b04-217ddd8e45d7.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     3477
IP address blocks:        192.67.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:09:0a:64:5b:21:4f:f1:43:84:a0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4304a9ea-ddad-4442-bdab-8d8916ff78f9
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=b145e5f6-796a-4e50-be8a-20dec53554d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e8:c5:91:13:52:1c:d1:ba:10:44:de:e5:16:
                    90:7d:7e:78:d2:5b:05:3f:e3:cb:92:36:6f:8d:0b:
                    68:00:7b:73:8e:9d:64:80:8f:37:d0:d4:8b:09:de:
                    86:05:7f:46:a0:99:1c:40:ae:f9:23:87:5a:6f:6d:
                    d8:23:52:b2:4a:20:c0:af:9f:e0:b9:e5:29:41:86:
                    fb:77:9d:09:b9:5f:0d:d1:3a:03:00:cb:55:27:d8:
                    51:a8:98:d9:63:91:59:9e:af:61:10:a9:ee:15:be:
                    45:1c:ec:99:fd:59:df:3b:bf:32:a9:13:b0:5e:7a:
                    68:89:7e:09:7d:70:05:ca:a7:4a:c9:db:d0:e5:de:
                    ff:d5:3b:cb:29:6e:13:ee:f6:5d:19:b6:fd:95:01:
                    33:09:81:c5:18:fe:8e:96:e1:38:f4:62:97:80:f3:
                    8c:63:bb:3e:8b:87:aa:fb:12:94:1c:2c:ff:10:d7:
                    46:6b:01:c1:28:15:bf:cc:9c:14:36:c1:57:58:fe:
                    58:07:79:50:ad:8b:b6:11:a7:9b:74:6a:57:46:2f:
                    53:d7:00:bd:c5:bd:ad:65:8e:08:1a:9b:d9:70:50:
                    41:48:32:bf:d1:b8:cc:96:0b:1a:dc:29:e2:95:28:
                    5d:73:dd:f1:ee:94:86:fd:90:3a:2f:6a:ef:60:6f:
                    26:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CE:97:0B:6A:FB:93:E1:21:B7:F3:68:8A:CB:E6:64:B4:2F:C2:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/14ebeda6-4988-36cd-8b04-217ddd8e45d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/4304a9ea-ddad-4442-bdab-8d8916ff78f9.crl

            X509v3 Authority Key Identifier:
                keyid:7E:62:15:02:42:21:A7:BB:9B:3A:C8:99:DA:C2:CB:8E:23:28:B4:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:e3:0a:62:7c:e0:cc:ab:bb:af:25:73:ad:b5:22:ce:09:82:
         d2:6e:5a:61:5d:ef:30:fe:2a:a5:ce:71:85:f1:ad:01:0f:23:
         6e:2a:9e:b2:71:7b:2e:3e:2e:c7:2e:14:f0:76:1b:b1:1d:1d:
         fa:57:45:b5:e1:d2:61:42:05:7e:a4:57:ea:50:51:59:ae:10:
         78:0d:e7:5a:45:b5:39:c4:be:c4:e3:10:33:d1:57:48:96:d4:
         18:1e:21:f5:d9:20:8a:75:fc:a4:4c:0e:f0:5e:68:0b:ed:5f:
         d4:37:9d:00:a4:08:e7:3c:91:06:ab:f3:6b:ab:a0:54:bf:5d:
         0a:cf:fb:2a:06:31:65:c8:d6:90:cc:09:f9:b6:d7:6d:84:70:
         07:d9:38:79:65:66:dc:fb:e0:e9:75:9c:27:14:90:82:e7:91:
         6a:49:f3:96:32:7d:9d:f0:52:16:16:d0:bd:6c:ce:3c:a5:20:
         04:29:ce:d1:0c:a4:3c:da:d3:46:06:b2:fc:07:7c:66:19:27:
         b3:73:fc:46:4e:d4:0a:b7:6b:c3:e8:de:e8:cb:e3:29:dc:8c:
         44:74:54:e3:bc:bc:8f:ea:b4:c3:09:f3:50:95:82:9a:b7:83:
         40:5d:a8:0d:7d:ae:b7:02:6a:f8:54:46:11:e7:e1:2d:4c:50:
         7d:01:c0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 18:30:26 2024 by rpki-client on console-fra.rpki-client.org