Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431/f5ea6a42-7d50-3050-8429-bcbd51fb0dfc.roa
File:                     f5ea6a42-7d50-3050-8429-bcbd51fb0dfc.roa (raw, json)
Hash identifier:          /mGvsBCd3+lNDkWoxCwjq2Bs6aKdgP70sAhOy10M7NM=
Subject key identifier:   2E:CD:BA:20:E6:00:81:91:CB:F1:86:F6:17:3E:0E:60:47:12:2C:DC
Certificate issuer:       /CN=ab352a2a-d782-4f1d-9d54-cbfc159f7431
Certificate serial:       010D0C9F43285845C093B61B90DB00F547BE421A
Authority key identifier: 4A:0B:67:CD:BA:95:6E:F5:8D:3A:1C:9E:BD:11:F4:33:01:36:4A:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431/f5ea6a42-7d50-3050-8429-bcbd51fb0dfc.roa
Signing time:             Fri 03 May 2024 17:18:54 +0000
ROA not before:           Fri 03 May 2024 17:18:54 +0000
ROA not after:            Thu 01 Aug 2024 17:18:54 +0000
asID:                     397075
IP address blocks:        199.7.100.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:93:b6:1b:90:db:00:f5:47:be:42:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab352a2a-d782-4f1d-9d54-cbfc159f7431
        Validity
            Not Before: May  3 17:18:54 2024 GMT
            Not After : Aug  1 17:18:54 2024 GMT
        Subject: CN=39bb9e61-99ae-4d1f-a779-5860d836b8f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e1:09:04:0f:c0:bb:b3:32:ac:b0:a6:ae:38:
                    d7:8b:c5:31:68:56:0c:bf:39:b8:de:41:c9:aa:8c:
                    55:e2:78:7c:c1:dd:fe:ac:70:58:a9:c6:1f:87:64:
                    de:a3:60:20:7f:2d:1e:78:6b:1f:7a:ad:dc:83:e9:
                    1b:ef:97:e4:43:d8:c8:d2:74:68:4c:de:55:63:92:
                    9d:a8:75:11:53:e4:42:59:c8:7c:55:09:a0:06:13:
                    75:10:9f:da:84:3b:e6:ca:bb:19:03:32:ff:90:36:
                    eb:c2:3f:d4:98:d4:86:9a:ae:c5:a0:71:37:4f:8b:
                    90:25:f1:5d:98:a9:77:55:58:35:c0:e7:2e:77:1c:
                    c0:8c:d0:6f:d7:5b:eb:39:93:7b:24:fd:5f:b1:dd:
                    31:00:90:49:bc:48:db:1d:a7:a1:c2:a1:4f:3c:24:
                    4b:e9:2c:cc:23:43:75:32:5c:20:33:85:74:e2:cb:
                    74:da:a4:01:ec:3c:47:96:36:a4:8a:db:97:05:ea:
                    4f:40:03:2f:a7:56:03:a6:33:51:bc:c3:d8:cb:33:
                    bf:32:44:ec:b1:70:c5:79:28:f0:9f:4c:54:a5:9a:
                    c7:09:ec:91:47:83:8b:ed:dc:a2:67:da:3f:06:f5:
                    12:c7:2f:fe:01:4c:bb:fc:7d:01:ec:bf:dc:75:9d:
                    1e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CD:BA:20:E6:00:81:91:CB:F1:86:F6:17:3E:0E:60:47:12:2C:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431/f5ea6a42-7d50-3050-8429-bcbd51fb0dfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431/ab352a2a-d782-4f1d-9d54-cbfc159f7431.crl

            X509v3 Authority Key Identifier:
                keyid:4A:0B:67:CD:BA:95:6E:F5:8D:3A:1C:9E:BD:11:F4:33:01:36:4A:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:4c:1b:f6:ba:7f:b7:cb:44:69:d6:08:73:38:62:b1:86:57:
         05:b3:65:b5:81:df:f2:65:a0:64:c7:5d:d0:f0:c5:6c:f9:a8:
         4b:73:34:ab:f0:4f:48:0a:27:41:73:d7:70:4d:69:5c:92:7b:
         89:af:68:e2:6e:9c:64:63:86:53:a1:87:f1:73:5d:ce:f3:bb:
         3b:f3:8a:e0:3c:11:b4:51:6a:df:ad:01:32:dd:07:e9:4b:18:
         07:9e:6b:da:79:16:5c:25:5f:9f:28:50:99:d6:aa:b4:f4:76:
         6b:37:7b:54:70:ef:e5:5d:2e:b3:00:61:4a:d5:d4:bd:3c:32:
         b3:00:8c:f2:d5:e5:cd:87:c9:cf:8e:89:43:ca:ec:a2:16:ab:
         e8:4c:e4:1c:2c:d9:bb:87:3a:e7:21:5c:e1:6d:9c:b5:dd:e8:
         5e:c5:48:17:86:f4:85:f5:85:3f:45:b9:21:bc:77:cd:2a:51:
         5f:fe:9c:0b:41:ec:88:35:f7:36:70:5c:f4:d3:00:3a:6c:77:
         0d:d3:15:58:07:3c:63:b6:34:9a:35:45:7b:f7:4c:38:56:0b:
         00:1e:c7:45:ef:b2:9e:28:0a:78:72:53:ac:23:d7:63:ad:38:
         9a:23:25:9c:e3:2d:ef:06:d4:e3:69:e8:f5:a1:31:71:e0:a8:
         1c:2f:05:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:52:05 2024 by rpki-client on console-fra.rpki-client.org