Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d5087f-7e88-419c-92e3-fac6b1d22132/841c71df-7adc-3008-ac0e-59878eb162a0.roa
File:                     841c71df-7adc-3008-ac0e-59878eb162a0.roa (raw, json)
Hash identifier:          NczUwnIqkICcfzeAbwmpxlOAofrvDCNDHzjtp0H7Dhw=
Subject key identifier:   FE:D9:18:3A:E2:08:66:11:75:2A:C1:F5:97:76:6F:84:0C:E1:CB:05
Certificate issuer:       /CN=a5d5087f-7e88-419c-92e3-fac6b1d22132
Certificate serial:       010D0C9F43285846B5BFC7ACC0CD557923541400
Authority key identifier: FB:2E:72:D8:D2:6B:CB:09:5E:56:90:A4:FF:06:42:9A:EC:15:68:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d5087f-7e88-419c-92e3-fac6b1d22132.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d5087f-7e88-419c-92e3-fac6b1d22132/841c71df-7adc-3008-ac0e-59878eb162a0.roa
Signing time:             Tue 30 Jul 2024 13:00:39 +0000
ROA not before:           Tue 30 Jul 2024 13:00:39 +0000
ROA not after:            Mon 28 Oct 2024 13:00:39 +0000
asID:                     62164
IP address blocks:        23.140.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b5:bf:c7:ac:c0:cd:55:79:23:54:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5d5087f-7e88-419c-92e3-fac6b1d22132
        Validity
            Not Before: Jul 30 13:00:39 2024 GMT
            Not After : Oct 28 13:00:39 2024 GMT
        Subject: CN=045ed4f5-257f-4206-abe8-56f8defa493d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:79:cd:c3:40:fe:f8:9f:63:41:29:10:87:20:
                    e0:89:0e:50:3c:99:0e:9a:71:5b:ca:7c:4b:30:c1:
                    34:a6:34:0a:91:86:bc:2a:64:91:48:6e:33:9b:cf:
                    83:bb:1f:be:a5:04:fc:c0:b8:0f:b3:ee:8c:1c:00:
                    30:a9:cf:c8:07:ec:df:68:5d:3d:dd:14:3d:3e:38:
                    9f:08:fc:32:a7:e2:3b:e9:90:9b:28:cd:d3:31:41:
                    b9:4a:9f:a6:87:4a:e4:4d:ff:0d:ba:93:46:e4:49:
                    be:a2:77:d9:2f:28:7d:78:46:65:49:31:59:d3:0c:
                    b2:1f:da:85:8d:08:3c:61:25:fa:17:e0:4c:2d:0c:
                    8c:83:ea:4c:9c:af:ab:92:ea:fe:06:c8:01:3d:6b:
                    09:8d:be:6d:49:f5:cf:17:71:81:de:26:f1:f2:09:
                    05:1f:69:46:bd:3d:c7:43:75:9d:4d:ab:8e:1f:86:
                    7c:84:55:e5:da:fc:ee:fa:69:99:00:ea:32:8f:be:
                    6c:db:74:43:7a:82:91:82:e4:3d:2b:ab:45:40:ac:
                    e8:03:47:8f:a7:d0:be:95:76:92:0a:0b:f9:fe:41:
                    d1:13:d0:8f:99:3a:bb:ad:f5:58:57:9f:86:12:7c:
                    b6:1d:00:04:f3:7d:04:e2:80:a5:91:d2:6e:0b:c6:
                    8f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D9:18:3A:E2:08:66:11:75:2A:C1:F5:97:76:6F:84:0C:E1:CB:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d5087f-7e88-419c-92e3-fac6b1d22132/841c71df-7adc-3008-ac0e-59878eb162a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d5087f-7e88-419c-92e3-fac6b1d22132/a5d5087f-7e88-419c-92e3-fac6b1d22132.crl

            X509v3 Authority Key Identifier:
                keyid:FB:2E:72:D8:D2:6B:CB:09:5E:56:90:A4:FF:06:42:9A:EC:15:68:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5d5087f-7e88-419c-92e3-fac6b1d22132.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:0a:f7:21:45:c7:b5:4b:93:3b:0e:d3:ae:3f:b1:eb:2b:4a:
         a0:0b:61:c6:42:0c:20:d3:31:43:c7:17:c6:5f:2c:2a:0d:b8:
         8d:f2:66:ea:7e:72:ea:a9:3c:9c:bf:57:42:24:39:26:d8:5a:
         9e:c9:23:a8:91:38:40:bf:22:8a:00:c0:5f:50:7b:5d:0d:6c:
         ed:3c:b2:84:36:32:34:6b:f7:de:dc:a1:0f:25:50:d9:04:7c:
         c1:86:f7:1b:9f:64:d3:ab:09:99:a6:15:9a:7f:53:bb:e3:51:
         ca:fb:73:ca:79:9e:72:66:4e:40:b0:ba:c1:6d:71:25:34:ea:
         39:80:92:a4:27:ca:dd:95:ca:78:01:d7:d0:31:fc:9c:9f:d1:
         2a:af:a0:76:2c:1e:73:50:36:f7:23:03:9b:91:25:63:df:35:
         b5:b0:d1:dc:80:68:8b:ca:49:37:6e:22:12:38:49:4e:d0:fb:
         e8:51:c6:cf:77:ac:39:b3:3b:85:06:da:5d:06:ef:4b:17:0e:
         b5:c3:ab:a1:b6:d4:ce:c0:d2:b3:f7:bd:66:5c:a0:7c:58:3f:
         1c:5f:20:fa:1b:27:a6:5d:7f:68:43:e7:2d:d6:87:f0:e2:d7:
         10:38:a9:36:17:e8:67:bc:10:6b:6d:15:94:62:d6:77:53:c2:
         af:db:ed:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 20:25:39 2024 by rpki-client on console-ams.rpki-client.org