Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4cab7cca-920d-4084-bcb8-4dacf3766e0a/ef91c0f2-4afd-32b0-ad59-4d2a8bea88e0.roa
File:                     ef91c0f2-4afd-32b0-ad59-4d2a8bea88e0.roa (raw, json)
Hash identifier:          56lm96qvJ+15Qa4uY+QBJy6YGkdeVhaNJO8NcuKs9bU=
Subject key identifier:   42:77:8F:B7:68:41:D0:71:E8:0C:71:CC:34:7E:9A:08:93:B2:67:1A
Certificate issuer:       /CN=4cab7cca-920d-4084-bcb8-4dacf3766e0a
Certificate serial:       010D0C9F43285841E42A996F43792F83E13F6080
Authority key identifier: 29:13:D1:D0:55:E9:DE:31:26:BA:F7:15:DB:9C:19:E6:09:2F:16:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4cab7cca-920d-4084-bcb8-4dacf3766e0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4cab7cca-920d-4084-bcb8-4dacf3766e0a/ef91c0f2-4afd-32b0-ad59-4d2a8bea88e0.roa
Signing time:             Mon 15 May 2023 16:08:10 +0000
ROA not before:           Mon 15 May 2023 16:08:10 +0000
ROA not after:            Fri 26 May 2023 03:57:41 +0000
asID:                     31857
IP address blocks:        69.28.32.0/20 maxlen: 20
                          141.193.60.0/22 maxlen: 22
                          162.213.180.0/22 maxlen: 22
                          199.127.112.0/22 maxlen: 22
                          2604:3b80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:2a:99:6f:43:79:2f:83:e1:3f:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cab7cca-920d-4084-bcb8-4dacf3766e0a
        Validity
            Not Before: May 15 16:08:10 2023 GMT
            Not After : May 26 03:57:41 2023 GMT
        Subject: CN=6494e12f-abfc-415b-9739-45f9a3cc5d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:80:f6:07:6e:04:c8:35:6e:ed:1a:23:bf:6d:
                    0d:9e:c2:75:b4:b6:3b:d2:5b:a3:6d:a6:91:7e:45:
                    7f:b8:e1:e2:80:45:df:31:4d:45:c7:9a:2a:7c:fd:
                    a0:02:42:00:e9:1b:23:5f:d6:ec:aa:af:24:61:d1:
                    c5:1c:96:f6:65:e4:50:d9:3e:bb:36:fe:12:fb:89:
                    82:97:24:e5:04:3e:4a:aa:c1:ae:db:90:97:e3:6f:
                    16:2c:0d:2b:cf:d6:40:4e:2b:98:ec:56:1a:c1:c2:
                    78:e4:a1:04:5b:33:d4:87:6d:d6:04:cb:03:8d:e3:
                    40:f1:eb:b5:55:82:7e:5d:5b:de:e5:1b:22:3e:82:
                    6d:fa:06:72:02:1b:d4:b8:77:38:df:f2:42:de:17:
                    27:0c:dd:92:cb:e6:a1:aa:41:00:34:20:8e:54:30:
                    c1:91:71:7e:91:02:49:7f:4b:64:37:f2:6e:b0:74:
                    c2:76:4d:ae:49:31:3f:19:5f:52:f5:48:d2:e9:64:
                    08:0d:e9:19:0c:79:ea:45:d2:67:4a:e4:16:5f:41:
                    13:14:31:a1:4b:af:fe:e3:01:3e:fa:e1:85:b5:bf:
                    83:13:b4:e5:9d:3b:47:3f:32:cb:10:41:28:24:2e:
                    79:82:ae:27:a8:22:e0:31:a7:03:70:ff:0b:83:ce:
                    cd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:77:8F:B7:68:41:D0:71:E8:0C:71:CC:34:7E:9A:08:93:B2:67:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4cab7cca-920d-4084-bcb8-4dacf3766e0a/ef91c0f2-4afd-32b0-ad59-4d2a8bea88e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4cab7cca-920d-4084-bcb8-4dacf3766e0a/4cab7cca-920d-4084-bcb8-4dacf3766e0a.crl

            X509v3 Authority Key Identifier:
                keyid:29:13:D1:D0:55:E9:DE:31:26:BA:F7:15:DB:9C:19:E6:09:2F:16:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4cab7cca-920d-4084-bcb8-4dacf3766e0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.28.32.0/20
                  141.193.60.0/22
                  162.213.180.0/22
                  199.127.112.0/22
                IPv6:
                  2604:3b80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:80:de:25:3d:1b:31:07:19:af:c3:25:1b:c7:59:d7:1e:8f:
         2c:59:be:14:b4:d1:5b:59:75:50:c5:27:e4:c5:f4:f6:7f:6b:
         b4:dc:e8:01:6c:74:ff:a6:86:fd:31:1b:c4:32:85:a7:68:86:
         9f:18:df:c9:ff:83:93:55:17:5d:89:0f:7a:96:bf:6e:fa:a7:
         ec:5e:9d:23:1e:ae:f2:15:a0:d1:58:37:b9:43:ce:15:6f:d0:
         4a:80:c1:9b:18:d1:74:18:ac:f8:ba:4b:95:48:f7:0e:f7:c4:
         91:1e:2e:3e:b5:ba:f6:7b:a7:14:aa:12:ed:f4:f6:7e:70:8a:
         f4:19:93:6a:4b:7e:4b:0d:8b:b8:a8:c9:86:69:24:90:bc:1a:
         28:85:7b:51:ad:de:92:f3:d8:7f:fc:62:a8:76:9a:da:66:13:
         8c:a3:78:f1:cd:4d:17:0d:e5:d3:a4:95:25:12:26:bf:d6:3a:
         53:9d:e9:d0:9d:b4:6f:8e:f7:f4:13:ca:06:66:74:09:72:c9:
         1e:67:cf:eb:70:e1:a6:31:0a:9b:da:68:c9:cb:e7:e3:9f:54:
         a6:f1:a5:ef:c3:34:90:e9:cc:ea:af:a9:a8:bf:27:db:39:e4:
         f4:3d:2d:c0:cb:92:83:00:0b:ca:d9:09:f7:b8:14:ad:cf:3b:
         fb:ff:17:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:12 2023 by rpki-client on console-ams.rpki-client.org