Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/c2bd25a9-feba-3f98-96c3-8491861aded3.roa
File:                     c2bd25a9-feba-3f98-96c3-8491861aded3.roa (raw, json)
Hash identifier:          mKSG+ZarWZhtyn2B5pbfqi7N22gaMyHnMIE6p1SwrcY=
Subject key identifier:   FC:21:DD:BC:1B:37:15:2F:55:EF:25:CE:65:89:99:47:2A:C9:04:DE
Certificate issuer:       /CN=505332f5-c843-4e04-add6-4ef51984b8f2
Certificate serial:       010D0C9F4328583F7D1129DB25F04491C3F43960
Authority key identifier: 4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/c2bd25a9-feba-3f98-96c3-8491861aded3.roa
Signing time:             Thu 06 Oct 2022 12:00:00 +0000
ROA not before:           Thu 06 Oct 2022 12:00:00 +0000
ROA not after:            Fri 11 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        96.127.0.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7d:11:29:db:25:f0:44:91:c3:f4:39:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505332f5-c843-4e04-add6-4ef51984b8f2
        Validity
            Not Before: Oct  6 12:00:00 2022 GMT
            Not After : Nov 11 05:00:00 2022 GMT
        Subject: CN=56519ec8-72a7-4924-a5bc-e6e33610ca76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:10:ba:7f:d5:a8:b1:71:ff:63:99:d7:c9:5f:
                    57:ea:29:55:3d:18:ba:7e:07:e2:e1:45:25:c9:d6:
                    3d:ab:03:4a:59:b2:ad:c5:0c:ee:94:ce:5f:d1:aa:
                    bc:38:63:2d:87:35:42:94:01:99:9c:9a:29:78:43:
                    e4:36:7e:87:49:00:ed:8d:66:23:99:1c:35:f5:ed:
                    28:9f:1c:e2:11:45:b2:eb:d0:21:e9:d5:03:e3:54:
                    0d:af:5f:96:44:0c:86:45:e0:c4:c1:0f:01:1d:fc:
                    7f:59:2c:c0:73:61:79:6e:8b:4f:c4:2c:47:31:89:
                    e9:99:b1:89:ea:0a:b9:f2:36:38:1f:87:61:86:02:
                    64:64:19:14:8a:d4:52:75:de:f7:28:93:67:e5:a8:
                    ee:0f:0f:85:44:0a:eb:37:d0:69:7a:1e:a9:84:a5:
                    23:6b:b5:1b:22:88:44:9a:8c:71:d3:a5:ba:62:62:
                    21:06:4a:2d:69:55:7d:a8:20:30:c5:52:e8:28:bd:
                    92:a8:26:70:cd:d7:de:47:4e:2d:0a:67:52:6f:4b:
                    c9:7d:db:37:05:71:2b:54:80:dc:1b:a8:b7:40:a7:
                    8b:3c:de:a4:19:4d:1e:1d:82:bb:1d:00:2f:6d:fa:
                    9a:6f:96:6d:bf:ea:ea:fa:12:50:d9:1e:44:29:e8:
                    ad:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:21:DD:BC:1B:37:15:2F:55:EF:25:CE:65:89:99:47:2A:C9:04:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/c2bd25a9-feba-3f98-96c3-8491861aded3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/505332f5-c843-4e04-add6-4ef51984b8f2.crl

            X509v3 Authority Key Identifier:
                keyid:4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:cf:27:c2:85:89:be:fb:be:13:c1:77:c9:29:9f:b7:15:c1:
         db:a1:77:ba:12:2a:02:f5:ee:1b:13:d4:ef:d4:55:8a:1d:cc:
         e7:30:4b:d1:96:75:c4:a8:fa:15:e8:ba:02:7b:ff:2e:8e:e0:
         83:89:1d:99:74:c5:57:24:7f:20:f8:ff:4f:bc:12:c9:75:1f:
         67:91:fb:e8:a8:53:78:60:7e:9e:8c:53:ba:76:12:33:6b:d1:
         09:cf:fd:be:d3:f1:91:8f:79:88:21:a4:ac:1c:90:53:d7:4c:
         e2:57:15:f3:99:33:1a:63:a9:8c:d6:ab:2f:57:c9:b7:c6:6e:
         80:7b:04:89:13:ac:7c:a2:eb:e8:f5:cd:aa:0c:29:1a:b2:dd:
         8b:01:02:00:3e:05:58:ef:fa:71:0e:37:28:99:98:b3:46:0c:
         aa:93:ee:4d:94:ca:ac:82:ca:1e:33:49:30:7d:4c:2f:2d:c5:
         d9:c0:33:95:af:30:88:f1:27:75:ea:99:65:50:f6:08:f8:d4:
         7a:99:af:ea:14:74:9f:bb:df:b9:ad:90:47:e0:2e:93:0e:47:
         bb:19:c9:a0:6c:e9:f1:43:e2:37:33:4f:54:f5:09:8d:d3:df:
         0f:cb:12:b2:c9:73:5d:32:3f:aa:fa:e0:45:d1:e1:95:7d:17:
         d3:bd:c1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:14 2023 by rpki-client on console-ams.rpki-client.org