Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/76f051ce-6cbb-3087-975b-08305bf4457f.roa
File:                     76f051ce-6cbb-3087-975b-08305bf4457f.roa (raw, json)
Hash identifier:          L1L5njFE3gWFjDMr2h0bMSHOgRHcd727iaZtX3tPvkE=
Subject key identifier:   03:E4:24:4F:DC:B9:09:68:F1:B1:91:23:BF:C8:5E:43:61:A5:5F:B9
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DC8F22397BC8A100D8572F462
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/76f051ce-6cbb-3087-975b-08305bf4457f.roa
Signing time:             Tue 03 May 2022 12:00:00 +0000
ROA not before:           Tue 03 May 2022 12:00:00 +0000
ROA not after:            Wed 08 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        3.128.0.0/10 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c8:f2:23:97:bc:8a:10:0d:85:72:f4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  3 12:00:00 2022 GMT
            Not After : Jun  8 04:00:00 2022 GMT
        Subject: CN=37ab19c8-1e90-4f28-83f8-8ecb6cf3cbd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d3:2f:59:f6:fb:f0:55:24:50:0b:64:58:3b:
                    d4:08:1c:b4:22:c1:ed:ce:ff:68:9c:fb:f3:9f:20:
                    2f:35:31:d0:36:1e:26:9a:e1:b6:bb:c2:ed:20:11:
                    0b:cb:26:89:b2:b7:ef:8a:91:92:79:92:2b:c2:a1:
                    ea:2f:6b:ab:ff:ee:82:3c:2e:8d:8a:f1:1f:94:9a:
                    d8:a9:8f:01:50:83:44:bb:6a:ba:d4:9b:bd:ea:64:
                    01:99:29:5a:47:e7:4a:88:2c:5e:8a:27:aa:88:4c:
                    4c:2f:a0:6a:d4:65:15:85:1d:7c:25:36:c6:6b:ba:
                    1a:5f:64:01:b3:1f:a2:e4:eb:50:34:f1:e6:7e:27:
                    b9:2e:39:f6:00:37:fb:ed:8a:46:ac:b2:ca:36:de:
                    4f:a8:7f:c9:dd:ad:b7:91:60:e4:89:94:00:e1:8f:
                    53:71:10:67:a1:27:3a:ec:4d:34:04:0d:6d:8b:eb:
                    2b:8d:ab:0a:7f:ae:0d:79:f3:b9:24:f8:2e:0f:41:
                    f3:16:39:87:da:81:ba:7e:0e:59:05:67:00:d0:ca:
                    a4:76:99:31:7d:75:0e:20:25:d7:2a:5c:d2:7a:92:
                    3a:fa:9d:ff:00:cc:bb:cc:5f:db:a7:42:b1:b6:8e:
                    b1:82:86:eb:aa:a4:bc:9a:b7:2b:8a:94:43:42:12:
                    58:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E4:24:4F:DC:B9:09:68:F1:B1:91:23:BF:C8:5E:43:61:A5:5F:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/76f051ce-6cbb-3087-975b-08305bf4457f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.128.0.0/10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:18:85:9d:aa:cd:4e:de:e8:0b:7a:e4:34:41:d2:dd:b1:6e:
         93:9b:61:e3:7d:21:dd:52:c6:ef:5f:b5:aa:f4:15:af:05:e2:
         b4:bf:b9:17:7f:06:6a:fb:59:46:fb:9f:c4:a8:42:23:a6:73:
         02:22:05:60:b0:e1:c7:ea:92:bb:f5:14:d4:ec:ef:03:3e:7f:
         36:88:4f:2f:f6:78:1a:1d:8d:86:81:9e:53:72:d5:cb:ad:41:
         fe:0a:58:aa:f6:92:f5:00:d9:d4:db:25:64:23:42:5a:0b:c8:
         70:5f:b1:b7:c6:14:a0:9b:e9:12:91:3f:b9:e0:a6:dd:8f:0f:
         95:e9:41:ea:f8:6f:24:42:78:09:6a:91:d5:7d:63:dc:46:1c:
         c7:83:c8:e7:29:94:2d:52:47:9d:92:35:07:14:0a:2c:b0:55:
         e0:9b:a2:cd:66:aa:d2:27:f2:44:e6:ce:6c:8b:2b:2c:0d:8c:
         77:09:29:61:4b:40:ac:26:27:20:3f:3d:a4:5a:70:67:c1:b9:
         89:e2:e9:0d:23:59:d0:ee:0c:a6:8e:f5:f4:6d:14:6c:b8:4d:
         7d:1c:4d:80:0e:60:f6:c6:74:3a:d5:c0:1b:0f:7e:32:4c:b5:
         f4:bd:b2:62:7f:9f:cb:f8:9e:1e:64:f0:1d:1b:cd:98:ba:be:
         67:9b:d4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:36:43 2023 by rpki-client on console-ams.rpki-client.org