Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/826859f5-3f75-3526-ba3b-9c9a17d48869.roa
File:                     826859f5-3f75-3526-ba3b-9c9a17d48869.roa (raw, json)
Hash identifier:          ubzOpAaHxujmZ98L1eBpEa0Do7YVYgPfPycqRAxVbRI=
Subject key identifier:   59:D2:87:2B:76:B4:72:5F:95:80:8D:AA:99:54:19:E1:2D:F6:52:21
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858409F2CA500C9D9E189E1697880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/826859f5-3f75-3526-ba3b-9c9a17d48869.roa
Signing time:             Wed 18 Jan 2023 12:00:00 +0000
ROA not before:           Wed 18 Jan 2023 12:00:00 +0000
ROA not after:            Thu 23 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        15.244.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:9f:2c:a5:00:c9:d9:e1:89:e1:69:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 18 12:00:00 2023 GMT
            Not After : Feb 23 05:00:00 2023 GMT
        Subject: CN=c34676c7-497c-480b-9f41-95d0af547150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c1:98:64:c8:29:74:b7:5b:ce:db:2b:78:85:
                    9e:86:0a:2d:22:8c:8b:96:c5:aa:cb:49:93:05:b4:
                    71:94:78:f7:7c:51:85:57:10:f0:76:61:dd:07:83:
                    b8:f8:e0:f1:4a:f3:25:f0:ad:b6:e8:b5:9c:eb:a6:
                    ae:26:07:ad:47:65:93:be:46:d9:7d:1c:eb:7e:f7:
                    9a:21:7c:11:16:60:46:8b:b9:6f:b4:fe:35:6e:a9:
                    f6:d8:df:ff:ac:c8:c6:99:6e:85:58:b1:11:2b:f0:
                    e7:04:b6:52:55:b8:f9:b1:b6:20:73:a2:89:7a:df:
                    6c:31:cb:8b:27:ed:bf:eb:d9:a6:e0:68:8a:c0:f9:
                    cc:f4:f0:0a:8d:ea:5b:7c:ab:cb:f0:26:bb:c4:5c:
                    63:76:93:fe:c6:69:3d:e8:fb:63:f8:cf:b7:0e:6f:
                    23:b9:5a:0b:08:7f:25:68:c2:5d:06:53:46:68:9e:
                    b3:44:5b:d3:5c:16:2e:e1:e6:27:82:d2:91:07:c6:
                    d0:2a:cc:52:be:d6:42:52:f1:b6:e2:8d:df:d6:48:
                    5b:dd:47:6d:db:b5:35:ca:50:1b:f3:78:cb:5c:f8:
                    28:06:31:c7:9e:48:88:6c:30:6e:93:16:db:68:b4:
                    02:a6:56:5f:48:14:80:e5:79:38:36:e5:b3:28:76:
                    af:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D2:87:2B:76:B4:72:5F:95:80:8D:AA:99:54:19:E1:2D:F6:52:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/826859f5-3f75-3526-ba3b-9c9a17d48869.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.244.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:e1:40:4c:9c:cc:4a:38:cc:0e:ba:19:1f:f9:ac:69:dc:26:
         c8:f1:5b:f9:21:3c:52:af:18:51:fb:69:4d:b3:88:34:6f:28:
         eb:8e:24:3d:8c:85:c2:55:9f:e0:bb:cd:78:9f:f1:4d:25:74:
         d1:b8:d2:c9:04:ed:cd:d2:dc:08:7b:1c:86:02:53:9c:a3:f4:
         d1:07:2e:f5:77:9d:13:91:c4:de:a5:d0:ab:1d:85:5e:ee:6b:
         77:e7:b3:7c:02:dd:d7:15:77:d3:ff:91:c0:0a:80:e1:9a:db:
         c6:1f:2a:52:43:71:17:16:dd:ce:5e:35:8f:0d:87:cb:a6:f2:
         0a:5c:e7:e6:d7:a0:67:c1:e9:c7:90:de:a6:d1:1a:34:28:29:
         79:b4:10:2d:a0:35:cc:ae:b7:6f:8d:51:22:6e:36:7f:b6:ee:
         73:74:23:f2:0b:76:6a:ad:ab:5e:e7:32:09:41:b2:3b:4c:49:
         c2:a1:20:07:68:70:45:27:1a:e0:06:ad:ab:ac:62:43:36:30:
         1f:0b:e9:2a:92:65:37:f2:76:24:7e:9a:d6:2b:13:bf:b1:9d:
         1d:02:a0:77:a2:93:fa:f8:4a:2f:62:e4:c6:f4:b9:34:07:b7:
         f4:df:c0:bd:de:6f:7d:66:b6:4f:87:9a:e4:1d:03:de:12:e1:
         f9:d6:5a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:33:11 2023 by rpki-client on console-fra.rpki-client.org