Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/cb655765-f051-372c-ab20-cfa9129f0adc.roa
File:                     cb655765-f051-372c-ab20-cfa9129f0adc.roa (raw, json)
Hash identifier:          W7Sdf0GKnSYK1V/VpI4dBBwLOlhYYg8wRY5LGMxT7A0=
Subject key identifier:   C9:E3:FD:FE:D2:84:AB:F3:74:FD:91:3C:4C:57:72:74:78:F3:B3:B9
Certificate issuer:       /CN=4304a9ea-ddad-4442-bdab-8d8916ff78f9
Certificate serial:       010D0C9F432858464D0F20FD8E0CD864544D17C0
Authority key identifier: 7E:62:15:02:42:21:A7:BB:9B:3A:C8:99:DA:C2:CB:8E:23:28:B4:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/cb655765-f051-372c-ab20-cfa9129f0adc.roa
Signing time:             Sun 23 Jun 2024 01:00:24 +0000
ROA not before:           Sun 23 Jun 2024 01:00:24 +0000
ROA not after:            Sat 21 Sep 2024 01:00:24 +0000
asID:                     2648
IP address blocks:        161.55.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:4d:0f:20:fd:8e:0c:d8:64:54:4d:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4304a9ea-ddad-4442-bdab-8d8916ff78f9
        Validity
            Not Before: Jun 23 01:00:24 2024 GMT
            Not After : Sep 21 01:00:24 2024 GMT
        Subject: CN=985c3abe-e7b8-4610-ae04-eb7f78331633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:55:20:29:86:ca:87:68:61:60:bc:60:56:34:
                    cc:5e:18:9d:29:32:f4:3a:c3:70:7e:8d:16:8a:1c:
                    f6:ca:d2:e8:04:1b:d7:39:73:84:37:35:37:97:0a:
                    79:29:71:fe:9c:89:0d:6d:8b:5f:d0:6d:2a:35:ab:
                    b9:0c:1f:7a:13:14:f8:a5:18:4e:d4:ee:d2:40:ac:
                    79:db:c5:7b:8f:3e:8e:da:37:56:af:df:aa:e3:bb:
                    a4:be:51:ea:e3:82:73:da:a8:27:ed:5e:e5:fc:e9:
                    27:b0:0c:5d:c2:b6:ca:50:92:05:bd:10:25:ff:97:
                    7b:14:a6:93:04:2c:0f:ac:33:72:2f:55:6d:52:af:
                    90:1d:d1:9d:c6:b8:b6:eb:b0:59:25:34:a1:d2:f0:
                    d3:b4:ac:a6:52:bb:f9:28:58:d5:b8:c5:08:49:a6:
                    59:3b:c9:02:e6:d1:38:47:ac:66:ba:69:59:8c:a4:
                    9a:98:c9:53:a1:49:a1:bd:6b:fd:b0:e4:ae:80:c4:
                    e8:c9:8e:ce:94:8b:ab:81:99:91:59:16:2a:b6:c2:
                    09:c9:bc:a0:d7:ef:9b:0b:16:4c:36:19:66:a0:bc:
                    8b:1c:da:fa:b8:4e:6a:17:ae:23:e9:57:f5:db:aa:
                    1e:95:a5:79:3c:8c:3c:2c:bc:06:60:e1:64:3d:ec:
                    3f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E3:FD:FE:D2:84:AB:F3:74:FD:91:3C:4C:57:72:74:78:F3:B3:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/cb655765-f051-372c-ab20-cfa9129f0adc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/4304a9ea-ddad-4442-bdab-8d8916ff78f9.crl

            X509v3 Authority Key Identifier:
                keyid:7E:62:15:02:42:21:A7:BB:9B:3A:C8:99:DA:C2:CB:8E:23:28:B4:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.55.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:19:18:86:30:9f:ce:75:82:69:fa:b3:71:d7:c9:db:a3:8f:
         ea:d2:4c:ed:b3:da:60:c4:57:62:e9:2b:24:69:ff:ec:66:c5:
         df:7f:72:77:c8:43:75:4a:3b:d3:86:66:16:6f:6e:8f:ba:e6:
         35:6e:9e:54:99:73:05:04:c0:3c:e2:ec:52:17:c6:38:fa:53:
         99:71:8f:0e:71:f3:50:ab:fc:bc:1a:ca:92:d0:65:04:18:1a:
         0d:7f:f4:4c:0b:95:1f:43:54:6e:7c:95:5d:06:36:3a:d7:5b:
         d4:f8:9d:44:1f:9c:d7:53:d3:47:a1:7f:95:ec:d2:4f:92:24:
         66:d5:c1:75:09:56:3e:d9:9f:c6:5b:23:c8:41:fb:8a:54:a5:
         40:1c:02:ff:03:91:4b:55:56:99:83:3d:16:a4:f5:e4:f1:7d:
         15:83:68:fe:9c:6a:e3:65:60:8c:60:2f:00:70:df:38:ee:52:
         a8:e9:65:ef:71:b8:d9:73:d6:b2:f8:4e:fe:7c:67:87:e4:aa:
         f9:80:e2:89:7b:5f:de:d9:17:ae:b9:71:f6:26:cb:9f:86:7c:
         ab:ee:24:0d:fc:22:58:c5:96:b3:b1:4b:0e:af:a2:69:a8:2b:
         42:30:05:5c:54:74:43:7a:f9:fa:62:27:09:ad:05:ce:bc:71:
         29:00:d0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 20:25:51 2024 by rpki-client on console-ams.rpki-client.org