Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/d58d66f0-fc98-3e89-8ede-3721f3801ce6.roa
File:                     d58d66f0-fc98-3e89-8ede-3721f3801ce6.roa (raw, json)
Hash identifier:          JvsYb51WYddAakF1LfA4JePW9AErcTvHrRk5O5JNRlc=
Subject key identifier:   E0:08:BB:61:26:35:7B:EA:F0:5A:02:F7:B3:36:51:0C:8F:DC:06:C2
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F43285840195FD542A9822A75F7D61D80
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/d58d66f0-fc98-3e89-8ede-3721f3801ce6.roa
Signing time:             Thu 01 Dec 2022 12:00:00 +0000
ROA not before:           Thu 01 Dec 2022 12:00:00 +0000
ROA not after:            Fri 06 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        199.255.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:19:5f:d5:42:a9:82:2a:75:f7:d6:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Dec  1 12:00:00 2022 GMT
            Not After : Jan  6 05:00:00 2023 GMT
        Subject: CN=749932fa-7d73-4d1e-b2b9-4e7b40d2bf29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6e:8e:ab:64:a2:45:82:0c:b1:99:e9:79:01:
                    ac:a7:b5:52:14:c6:e9:4e:31:72:75:33:ec:7f:31:
                    e3:12:8c:f7:76:f4:62:d2:0c:af:9d:ad:d7:7b:d9:
                    d6:5c:ef:74:5c:1a:e2:e0:7e:06:e4:0f:10:67:94:
                    e4:b9:c9:cd:4e:17:3b:61:fe:f1:e7:b8:a8:d7:fe:
                    98:12:58:d8:81:b9:67:24:3e:d4:ce:a5:f2:88:0f:
                    8c:80:91:c2:68:e3:bd:20:35:3c:22:96:43:df:26:
                    51:76:18:3d:0c:cd:1a:0b:c1:b9:ad:93:d3:af:e1:
                    bd:ff:f5:89:d9:b3:40:70:c1:8f:40:73:1e:ea:7e:
                    f3:fa:e8:98:c6:db:8f:48:8c:e9:f9:d9:95:24:77:
                    37:08:e2:07:88:be:9e:cf:6e:54:b1:56:f9:3c:03:
                    34:e8:2e:3a:fa:94:9a:f5:6e:bd:51:2c:f9:1f:c0:
                    e2:38:52:6b:18:4a:a9:39:9f:1a:dd:c7:f8:5c:82:
                    6d:95:32:41:75:d9:75:0b:1b:6a:15:3a:0e:3a:67:
                    77:fe:36:ae:92:8d:e9:bb:0f:4f:4c:21:29:41:49:
                    5d:da:d0:49:74:a5:2a:50:bf:16:1c:a5:73:30:a9:
                    1c:38:9c:da:74:fe:00:f2:25:cc:fc:e4:c4:93:75:
                    16:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:08:BB:61:26:35:7B:EA:F0:5A:02:F7:B3:36:51:0C:8F:DC:06:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/d58d66f0-fc98-3e89-8ede-3721f3801ce6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ae:79:b1:03:ee:d5:a8:29:b4:39:bd:be:a3:c6:1a:dc:da:
         93:c1:9a:a4:e8:27:59:24:b3:c4:e6:b4:79:48:3f:f4:d2:18:
         3f:39:c2:f8:7e:52:29:f3:f9:cd:c2:0c:8a:74:68:a1:9b:45:
         86:c5:a1:68:01:3e:78:90:9b:58:a6:99:1d:91:2b:51:ca:76:
         45:41:17:0c:ea:66:28:c3:70:0e:ff:12:bb:29:5e:3c:76:41:
         d6:2e:72:c5:ba:d7:1e:6a:98:4e:ca:ef:24:71:c2:d1:3e:d3:
         25:dd:c0:54:62:78:16:0d:5c:e7:30:13:3f:a5:be:ce:fd:d8:
         7e:c9:d8:f6:6c:0b:9f:4f:d6:f8:b2:45:fd:af:25:72:a8:63:
         b0:63:2a:43:7f:d7:fa:5f:aa:8d:b0:77:93:2d:53:3b:b1:10:
         9a:54:2d:5a:fd:f2:9c:eb:1b:a9:56:fa:e7:3d:de:48:60:b9:
         e9:8a:e6:93:e4:b5:11:1d:8d:8a:f4:a4:3e:19:f2:ea:94:c7:
         fc:8a:d0:84:bd:5c:69:50:9d:e9:b4:2c:2f:d6:62:d3:4f:9b:
         f7:31:af:c1:aa:f6:03:c2:99:04:b1:9f:d6:5e:88:54:b2:03:
         30:96:60:42:7b:96:80:da:98:d1:7a:70:5f:d7:d6:be:52:ae:
         05:6c:ac:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:07 2024 by rpki-client on console-fra.rpki-client.org