Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/b71aa4fb-2e22-3565-af44-00e004cbdfd8.roa
File:                     b71aa4fb-2e22-3565-af44-00e004cbdfd8.roa (raw, json)
Hash identifier:          4O2RN2xo9dBYF3zIs6hK5qafXPLM7iZgNkyH33JygOw=
Subject key identifier:   90:F2:AA:DF:6C:68:4B:58:AF:CE:08:AC:17:00:37:9A:26:AF:CC:63
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F432858401BFDDC602F61655A6BFA2F80
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/b71aa4fb-2e22-3565-af44-00e004cbdfd8.roa
Signing time:             Fri 02 Dec 2022 12:00:00 +0000
ROA not before:           Fri 02 Dec 2022 12:00:00 +0000
ROA not after:            Sat 07 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        199.127.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1b:fd:dc:60:2f:61:65:5a:6b:fa:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Dec  2 12:00:00 2022 GMT
            Not After : Jan  7 05:00:00 2023 GMT
        Subject: CN=0b0a7b7f-b3a0-4db9-b006-de3a3dddad9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c6:98:e4:0a:d1:9a:c5:18:0e:b0:73:c2:38:
                    89:60:1e:af:98:97:e0:a0:6f:f0:91:3a:a5:c0:4f:
                    36:cd:83:16:05:b2:c3:73:de:bc:c1:26:31:f6:2a:
                    99:9a:7d:79:83:3d:eb:39:b9:25:86:13:6a:e6:0d:
                    37:05:2f:7b:d3:02:a5:2e:27:bf:ad:a2:1a:b3:cf:
                    d2:aa:82:ab:45:1a:c6:22:cb:17:e9:5f:68:02:14:
                    6f:d1:ea:f9:9a:e8:30:00:69:cc:60:75:23:67:3c:
                    09:58:22:8b:79:18:d3:24:0f:c7:72:4f:9a:14:76:
                    26:2b:2c:7a:c0:88:f2:43:14:ac:0d:76:59:f6:cb:
                    e8:c8:09:42:7b:ea:c7:ee:ce:40:74:f2:70:85:81:
                    0f:1a:61:06:7c:e3:39:f3:47:2d:79:de:8b:61:ae:
                    45:e9:b8:42:96:03:f5:79:8b:9e:dd:73:ed:b2:9c:
                    52:8f:75:a8:98:6d:61:a5:99:eb:17:08:30:90:0c:
                    b7:7d:55:ab:bc:c7:35:d1:39:96:01:31:75:f7:f3:
                    0c:b2:ae:7a:cc:42:b6:5b:a8:b7:ed:24:65:79:e0:
                    ef:75:a7:f0:85:8d:a8:5e:6b:55:4f:1c:60:77:cf:
                    c1:5e:2c:5a:65:b7:7a:6a:27:59:ff:57:df:26:c0:
                    21:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F2:AA:DF:6C:68:4B:58:AF:CE:08:AC:17:00:37:9A:26:AF:CC:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/b71aa4fb-2e22-3565-af44-00e004cbdfd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.127.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:70:95:06:ea:f2:10:f3:54:42:75:c6:11:03:ee:07:1b:b2:
         3e:0f:2e:b7:c9:cc:51:c0:f3:ba:5c:7d:60:1b:ef:1c:69:9f:
         b7:43:7f:33:08:bc:e2:58:02:50:da:54:06:da:10:7e:23:56:
         11:68:fd:f8:09:26:b3:68:ed:88:11:a3:97:ef:aa:3d:7d:e3:
         4f:78:89:e1:ad:7f:72:15:77:ed:46:ef:0c:dc:90:28:03:0c:
         a3:4d:ba:de:18:3b:7f:15:b3:c7:6e:69:a8:5a:71:9d:de:b9:
         15:00:1e:07:9d:00:7e:c4:c9:b8:96:9e:63:2e:4d:e8:ca:e0:
         57:b9:f8:c2:31:12:6b:d3:b4:c6:eb:8b:7c:5c:58:87:68:94:
         dc:be:7e:c7:22:bd:53:e4:d9:b1:ba:12:12:2d:24:84:d3:0e:
         ed:a4:52:a4:93:f9:95:f4:a9:81:1c:60:aa:28:54:a8:9b:0d:
         ae:9e:c0:2f:59:db:7e:5f:fc:1d:3b:d9:48:75:82:6a:1e:6e:
         c4:4b:c6:c7:fc:94:ce:bf:90:ad:f8:1c:e9:cf:fb:aa:4d:75:
         70:2d:5c:9c:6a:b3:a0:81:df:7d:c1:10:57:e4:7c:15:eb:da:
         11:df:5f:01:27:67:30:db:1e:86:58:fd:ba:50:5f:85:ef:fa:
         4e:1c:22:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:03 2024 by rpki-client on console-ams.rpki-client.org