Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02/407eb689-b5d3-3550-bce9-04f298590521.roa
File:                     407eb689-b5d3-3550-bce9-04f298590521.roa (raw, json)
Hash identifier:          RAxLV3FFEL5IiOfSNrNBiT/RiyDseaxGJP5Y/q6x6RA=
Subject key identifier:   AB:CE:51:70:F0:A3:59:B2:6A:D6:9A:C1:3D:96:E2:27:FF:CE:8B:75
Certificate issuer:       /CN=b93a83dc-e910-416f-88d0-d8d64914eb02
Certificate serial:       010D0C9F432858442E2EAE9A2FBFEA10BD7A5180
Authority key identifier: 82:1F:CC:49:43:33:69:AD:E8:33:EC:DB:1F:C8:39:D6:BE:98:14:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02/407eb689-b5d3-3550-bce9-04f298590521.roa
Signing time:             Mon 11 Dec 2023 14:00:20 +0000
ROA not before:           Mon 11 Dec 2023 14:00:20 +0000
ROA not after:            Sun 10 Mar 2024 13:00:20 +0000
asID:                     3257
IP address blocks:        162.251.171.0/24 maxlen: 24
                          172.82.36.0/22 maxlen: 22
                          162.251.168.0/24 maxlen: 24
                          162.251.169.0/24 maxlen: 24
                          162.251.170.0/24 maxlen: 24
                          2602:fec5:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:2e:2e:ae:9a:2f:bf:ea:10:bd:7a:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b93a83dc-e910-416f-88d0-d8d64914eb02
        Validity
            Not Before: Dec 11 14:00:20 2023 GMT
            Not After : Mar 10 13:00:20 2024 GMT
        Subject: CN=ef807255-f0fa-4766-855d-ea776fc3a777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0f:9d:94:af:72:b0:ec:33:0f:ae:aa:97:db:
                    51:bd:14:c9:15:73:98:de:30:6d:f3:97:42:3e:48:
                    87:57:48:48:46:a9:74:cf:03:ec:89:fb:15:4f:f0:
                    76:e9:81:44:f2:1d:d0:ac:7f:70:52:5f:70:48:5c:
                    ca:7b:96:be:3a:5e:b2:be:6d:5f:3d:47:49:00:db:
                    db:4a:10:79:4a:56:3a:77:5f:ab:99:5f:14:8a:1c:
                    af:42:47:64:c4:31:26:75:58:81:be:7f:23:bc:a5:
                    d1:49:54:e6:83:b9:0e:4b:75:f2:da:a3:44:03:a3:
                    b3:0e:b1:93:5f:ea:e7:a0:78:69:c9:1d:30:47:92:
                    bc:66:7a:c2:a2:ce:91:d7:85:e3:3d:28:50:11:43:
                    eb:bb:20:12:aa:a5:21:8e:54:1c:d4:86:82:de:d7:
                    f3:c5:e1:d7:18:68:a6:fb:5c:cb:5f:25:a7:1e:98:
                    28:69:51:0d:f5:f0:40:87:b3:21:3f:a2:1d:44:88:
                    a9:23:cc:e0:92:57:5a:a3:94:06:11:91:f9:b5:95:
                    b3:be:9d:9c:31:34:06:ae:15:d7:cc:82:98:37:57:
                    d7:f7:84:bc:21:a7:f8:04:62:ac:8f:88:10:00:83:
                    28:3f:59:5e:82:4e:49:be:39:a8:56:2e:d6:1a:04:
                    78:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CE:51:70:F0:A3:59:B2:6A:D6:9A:C1:3D:96:E2:27:FF:CE:8B:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02/407eb689-b5d3-3550-bce9-04f298590521.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02/b93a83dc-e910-416f-88d0-d8d64914eb02.crl

            X509v3 Authority Key Identifier:
                keyid:82:1F:CC:49:43:33:69:AD:E8:33:EC:DB:1F:C8:39:D6:BE:98:14:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.251.168.0/22
                  172.82.36.0/22
                IPv6:
                  2602:fec5:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:46:2f:40:f8:8e:ea:6a:3b:e0:25:53:1d:d3:86:28:ab:b9:
         b7:f0:f4:8f:2f:f8:47:93:b2:4e:44:20:f7:9d:18:2e:27:2a:
         c6:b0:4f:7b:b2:ff:88:d9:ea:0a:97:d3:3d:da:33:e2:2a:77:
         0d:88:e0:08:fc:22:e4:6f:42:5d:bd:4c:46:01:1b:b4:e5:fd:
         f9:3e:4f:63:29:c0:7f:c9:54:60:05:de:cf:22:ab:46:dd:bd:
         32:f5:df:3e:1b:d1:42:3c:0d:f5:be:cc:fb:33:fc:9a:23:7d:
         9d:0f:b6:28:a8:4b:4d:43:00:f9:f8:17:f4:25:2f:19:7a:7e:
         50:b0:68:d4:14:53:4c:c4:da:4a:67:07:11:0d:a5:47:a4:5f:
         93:2f:ff:b8:c8:98:53:de:cb:74:ff:03:63:84:2b:4a:2d:75:
         f7:75:4b:96:ac:4d:ea:aa:58:ff:87:f1:f4:25:d3:c1:61:0b:
         aa:85:35:51:14:8c:6c:f0:17:f3:8b:42:3a:62:4a:9f:f0:d3:
         8b:1a:de:6a:a6:4f:92:ad:f1:31:c0:10:96:fc:e9:6a:80:fc:
         cf:54:30:44:06:62:37:29:01:74:70:a6:c2:e4:6d:df:e9:64:
         91:e2:e7:d7:79:c9:43:c4:f5:4c:5e:88:46:1d:a4:b2:f1:8c:
         e9:a6:77:73
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:40:23 2024 by rpki-client on console-ams.rpki-client.org