Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431/11f51873-abf4-3161-830d-e7aa3f0346a9.roa
File:                     11f51873-abf4-3161-830d-e7aa3f0346a9.roa (raw, json)
Hash identifier:          yLFVGG5XKdW5G8VODwHwOnfNJ8JZA2SnpVGGBxMeWsk=
Subject key identifier:   94:ED:96:1E:D1:B2:66:91:65:6A:ED:BE:C6:CF:C0:51:EF:AF:5F:5C
Certificate issuer:       /CN=ab352a2a-d782-4f1d-9d54-cbfc159f7431
Certificate serial:       010D0C9F43285845C0A83440BE6C2D5281A6E940
Authority key identifier: 4A:0B:67:CD:BA:95:6E:F5:8D:3A:1C:9E:BD:11:F4:33:01:36:4A:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431/11f51873-abf4-3161-830d-e7aa3f0346a9.roa
Signing time:             Fri 03 May 2024 18:00:11 +0000
ROA not before:           Fri 03 May 2024 18:00:11 +0000
ROA not after:            Thu 01 Aug 2024 18:00:11 +0000
asID:                     26631
IP address blocks:        199.7.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:a8:34:40:be:6c:2d:52:81:a6:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab352a2a-d782-4f1d-9d54-cbfc159f7431
        Validity
            Not Before: May  3 18:00:11 2024 GMT
            Not After : Aug  1 18:00:11 2024 GMT
        Subject: CN=c58c0af3-fccb-4e80-b11c-9bad780b0f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b0:4c:05:8f:b6:2b:78:85:e4:65:c7:b6:a6:
                    a4:fc:e7:5a:6d:ce:ef:65:5a:a2:56:97:51:4d:99:
                    b4:2f:75:38:25:72:2e:d8:9c:e0:be:0a:c1:65:28:
                    4a:15:76:a3:a2:ca:88:be:3c:d9:1e:88:f9:6d:fd:
                    35:ec:29:84:48:41:b8:41:5a:59:eb:19:4d:ee:80:
                    ba:5d:10:02:3e:15:96:39:b6:a5:3f:cd:01:95:a8:
                    2c:46:e2:2c:55:bb:12:ba:6c:a8:d3:66:69:64:51:
                    ee:b8:41:d5:74:c9:27:6c:d6:38:ce:e7:35:ec:e6:
                    ad:32:86:fe:99:0e:3d:7a:16:35:85:3f:c9:73:f6:
                    6b:01:b5:77:71:67:69:1e:72:8a:7d:31:79:b2:56:
                    80:ae:00:c9:f2:36:73:83:85:7e:4a:db:07:43:eb:
                    db:83:67:5a:04:e4:63:60:c6:2e:6c:6d:83:aa:07:
                    31:09:56:8d:e4:e0:1a:8e:a3:44:61:25:60:8f:17:
                    f9:dc:d3:aa:43:99:20:33:bc:0f:78:08:ea:5f:71:
                    23:6d:5e:c6:35:01:fc:f5:30:65:95:5d:bb:2e:dd:
                    ce:49:e9:6b:33:27:17:d1:1c:34:02:c0:24:ae:f7:
                    57:a8:e0:39:30:59:5f:2a:04:78:1f:ed:53:3d:d5:
                    e6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:ED:96:1E:D1:B2:66:91:65:6A:ED:BE:C6:CF:C0:51:EF:AF:5F:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431/11f51873-abf4-3161-830d-e7aa3f0346a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431/ab352a2a-d782-4f1d-9d54-cbfc159f7431.crl

            X509v3 Authority Key Identifier:
                keyid:4A:0B:67:CD:BA:95:6E:F5:8D:3A:1C:9E:BD:11:F4:33:01:36:4A:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:be:64:e5:6a:bd:b3:83:71:f8:01:30:9b:09:17:c0:9c:27:
         90:10:94:f2:4e:c1:46:1e:22:4b:0f:69:97:37:f3:34:9b:e7:
         60:76:3b:bd:6e:ba:4d:0b:94:0c:a0:aa:84:7b:a9:f4:72:c3:
         50:b7:a4:b5:a9:e1:40:66:f9:8c:33:77:24:1d:13:a0:4e:a8:
         ab:9e:45:bd:3a:96:35:00:c1:3b:fd:79:ec:a3:ff:0b:3b:7c:
         89:e0:ff:a4:49:6d:e0:98:bc:6d:35:66:00:6b:af:6b:cf:62:
         8a:e9:2a:6c:63:0e:49:28:fa:81:d5:cb:ea:f4:bc:ea:aa:07:
         fd:1b:01:3e:5c:5b:66:cc:cd:15:2c:15:48:0b:e1:ca:78:6d:
         44:70:c1:1b:dc:17:60:5c:1c:3d:2d:0a:16:55:29:19:35:d0:
         06:bd:0d:b6:6d:9f:53:26:f4:b0:b8:af:a2:6d:c8:e0:ce:02:
         16:05:6e:09:6b:07:09:b2:6f:f3:8d:12:b8:9c:84:53:79:b9:
         ef:39:f9:49:e6:eb:27:6a:49:6b:09:1d:2b:ae:e4:20:7e:d2:
         ad:9a:18:d0:f2:fb:5b:7f:68:95:fa:02:aa:c1:0c:6a:28:49:
         90:f1:c9:31:f8:6a:ef:34:52:31:d7:55:24:52:60:92:0a:fc:
         04:85:51:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:52:04 2024 by rpki-client on console-fra.rpki-client.org