Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d055811-0879-4499-9bd1-4097f0c90fef/a49a2904-2a45-3cdf-a0d4-3294d1ab3a12.roa
File:                     a49a2904-2a45-3cdf-a0d4-3294d1ab3a12.roa (raw, json)
Hash identifier:          BwrTxvdQrFfvRrI2ySh6OZT9EbRZZoX7oHVstfxfSSM=
Subject key identifier:   BC:78:9C:DF:80:50:73:18:9D:B5:7B:6A:BC:2A:2F:E0:B6:78:08:BC
Certificate issuer:       /CN=0d055811-0879-4499-9bd1-4097f0c90fef
Certificate serial:       010D0C9F432858457D131EA571ADC42071AB1680
Authority key identifier: 0E:74:1D:B2:F9:10:BE:59:CA:74:14:77:20:F8:F0:A8:B7:CC:17:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d055811-0879-4499-9bd1-4097f0c90fef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d055811-0879-4499-9bd1-4097f0c90fef/a49a2904-2a45-3cdf-a0d4-3294d1ab3a12.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        199.188.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:1e:a5:71:ad:c4:20:71:ab:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d055811-0879-4499-9bd1-4097f0c90fef
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=33af3da2-ec4b-4138-9aae-62c994158010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f2:a0:09:45:6d:03:15:9e:06:51:8a:83:40:
                    71:fa:2b:0c:a8:b0:40:90:34:49:79:71:48:15:a0:
                    4f:bf:20:8c:06:88:41:e1:30:e5:13:c1:87:37:b2:
                    1d:df:ec:fa:77:76:30:64:76:24:3b:b3:d3:b2:0b:
                    d1:f3:0d:09:04:70:88:e9:96:df:87:24:db:8b:92:
                    c9:7d:d8:62:41:00:a6:be:81:16:37:f2:62:8e:40:
                    17:51:39:0b:62:bf:72:98:d9:49:03:80:84:03:63:
                    bc:7b:31:e4:57:83:63:93:c0:a2:91:f1:c9:17:09:
                    29:01:de:97:eb:f8:82:94:8d:0e:dd:47:0e:26:49:
                    22:94:30:18:a2:72:08:74:fc:bf:19:bd:c6:70:e5:
                    2f:de:71:f2:64:7b:7a:58:64:8d:db:d6:4a:35:3b:
                    3f:ff:c7:fb:d1:3c:20:63:60:de:1b:ba:26:b2:b3:
                    0f:bb:e2:8d:c3:28:c5:08:dd:cf:7f:e5:1c:92:49:
                    42:3b:89:41:bb:e8:e3:97:35:f1:bb:02:5c:84:91:
                    92:c6:1b:41:13:a0:0c:32:36:85:48:e1:90:54:e6:
                    45:30:68:6e:b4:25:73:2b:bb:01:65:a2:02:2c:0c:
                    67:3b:cc:27:48:84:81:a8:38:55:91:b7:2d:ef:ea:
                    e9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:78:9C:DF:80:50:73:18:9D:B5:7B:6A:BC:2A:2F:E0:B6:78:08:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d055811-0879-4499-9bd1-4097f0c90fef/a49a2904-2a45-3cdf-a0d4-3294d1ab3a12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d055811-0879-4499-9bd1-4097f0c90fef/0d055811-0879-4499-9bd1-4097f0c90fef.crl

            X509v3 Authority Key Identifier:
                keyid:0E:74:1D:B2:F9:10:BE:59:CA:74:14:77:20:F8:F0:A8:B7:CC:17:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d055811-0879-4499-9bd1-4097f0c90fef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:05:29:83:5d:93:4b:07:ae:6f:1c:f1:6e:20:bf:f2:75:c7:
         73:04:13:ce:df:54:dc:0d:d2:e2:3b:ca:51:56:aa:85:86:7e:
         3b:fd:83:ce:98:54:23:c6:c4:90:ce:76:71:09:ed:c3:96:69:
         ef:c1:d8:de:a7:69:f6:a9:b4:8a:d3:12:f8:0b:17:3f:50:82:
         f9:8f:e0:3e:c2:bd:e5:11:63:16:db:22:bd:0a:31:65:8f:58:
         93:60:98:f8:e8:cd:33:41:48:0b:e9:4f:ad:57:74:45:86:21:
         47:83:af:e1:a5:00:0b:f5:bc:26:62:19:e6:5f:a0:3e:c3:74:
         ce:45:64:29:9d:ae:d2:1d:91:17:1a:0b:00:62:c5:81:03:b8:
         35:c5:6f:23:f1:bd:e0:5d:86:14:7d:66:87:01:a0:c0:23:d7:
         6f:d4:45:57:a5:cc:eb:75:3a:ec:28:76:aa:4a:a4:c6:7e:74:
         d7:6b:c3:7c:61:83:e7:3d:01:ea:e8:c9:b3:ed:83:ce:2b:60:
         d9:09:04:8e:9e:b0:4e:2f:4e:9c:00:19:b3:9b:ca:25:8e:64:
         eb:3a:da:90:28:2f:ec:a9:02:9e:0e:c9:d7:f1:42:d5:81:38:
         77:1e:f6:5e:7e:7a:1b:03:d6:f2:00:e4:94:16:e7:11:c6:04:
         3d:ba:3f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:57:49 2024 by rpki-client on console-fra.rpki-client.org