Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71288f26-c69e-403f-9142-403ab625e8f5/0ab299b6-e107-340a-a833-3d66ff792396.roa
File:                     0ab299b6-e107-340a-a833-3d66ff792396.roa (raw, json)
Hash identifier:          mMZutM9QbZBLSHmsTV7imPi30heJ+Z71wiKt/OIwLPY=
Subject key identifier:   B7:5B:1D:E5:DA:7A:08:87:69:02:42:21:9D:B0:BA:0B:6C:01:D9:8C
Certificate issuer:       /CN=71288f26-c69e-403f-9142-403ab625e8f5
Certificate serial:       010D0C9F43285846DE3A98C90CA2943B3E3AAD80
Authority key identifier: 4C:D5:8C:E9:6D:03:8E:06:21:06:39:2B:E9:D9:F0:CA:65:54:D2:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71288f26-c69e-403f-9142-403ab625e8f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71288f26-c69e-403f-9142-403ab625e8f5/0ab299b6-e107-340a-a833-3d66ff792396.roa
Signing time:             Wed 14 Aug 2024 01:00:30 +0000
ROA not before:           Wed 14 Aug 2024 01:00:30 +0000
ROA not after:            Tue 12 Nov 2024 02:00:30 +0000
asID:                     0
IP address blocks:        23.151.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:de:3a:98:c9:0c:a2:94:3b:3e:3a:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71288f26-c69e-403f-9142-403ab625e8f5
        Validity
            Not Before: Aug 14 01:00:30 2024 GMT
            Not After : Nov 12 02:00:30 2024 GMT
        Subject: CN=bc5d7f10-1a40-47f9-8730-512fc2a3b5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f8:20:c2:7c:44:0b:58:8e:bd:c2:5e:ab:bf:
                    64:61:f7:56:64:24:09:a2:40:d1:f7:9e:1b:6b:70:
                    73:76:c6:6c:b1:55:50:13:3b:90:47:63:8e:bb:54:
                    e0:ae:ac:72:65:74:69:f7:1d:73:c4:09:6e:e9:f0:
                    f3:80:98:cf:7b:de:ad:ff:2d:b2:3e:02:16:98:23:
                    19:25:91:d8:dc:b3:71:4a:f2:ea:a5:87:12:44:5f:
                    2a:08:2a:a4:af:3b:c0:94:98:3d:44:b8:71:26:a2:
                    f3:63:40:a7:7b:89:f9:58:dd:78:44:40:07:28:71:
                    38:74:02:d5:cf:bf:60:e2:87:76:53:10:b1:8b:70:
                    2f:9a:fa:83:1d:33:2a:2f:7c:70:fe:d0:36:2d:c5:
                    e7:8b:34:d6:fe:da:f0:1d:b5:6a:96:6a:96:05:aa:
                    d0:53:8f:a5:ef:ba:b1:64:c1:66:95:2d:1a:12:36:
                    52:2b:59:3a:60:b5:be:6d:ca:5d:0b:cc:bb:a8:00:
                    6b:f2:d3:6a:91:c5:d3:e9:68:a3:c9:c4:75:1f:84:
                    b0:51:72:6f:7a:ee:c9:a8:7a:2b:ea:e4:d0:0e:12:
                    08:60:cd:46:3d:88:32:d2:aa:f1:0e:ea:18:82:e8:
                    23:6f:9d:39:74:85:03:e9:23:2d:ed:8e:22:42:88:
                    64:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5B:1D:E5:DA:7A:08:87:69:02:42:21:9D:B0:BA:0B:6C:01:D9:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71288f26-c69e-403f-9142-403ab625e8f5/0ab299b6-e107-340a-a833-3d66ff792396.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71288f26-c69e-403f-9142-403ab625e8f5/71288f26-c69e-403f-9142-403ab625e8f5.crl

            X509v3 Authority Key Identifier:
                keyid:4C:D5:8C:E9:6D:03:8E:06:21:06:39:2B:E9:D9:F0:CA:65:54:D2:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71288f26-c69e-403f-9142-403ab625e8f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:bd:9e:9b:eb:19:68:0e:ae:88:7a:e3:c9:ef:47:ff:df:d6:
         36:66:c0:65:1d:10:65:27:c6:03:6e:ae:e8:4e:3f:84:eb:06:
         75:98:da:e5:d9:b4:00:c8:82:42:17:36:82:66:3d:42:28:59:
         7b:3e:ee:11:54:ea:26:34:23:42:8f:d2:c4:f2:ef:ad:b7:fc:
         a6:25:63:9d:19:42:ce:41:ed:1f:04:c7:a2:7e:9d:d0:37:51:
         84:71:a7:10:e4:59:8a:98:5f:8a:2a:3e:48:a2:f8:23:b9:18:
         b4:76:cd:de:42:e6:63:64:e1:49:51:09:da:f0:ed:4f:95:f3:
         cd:71:77:21:de:51:3b:e4:93:0a:c0:aa:3a:a7:a9:aa:a2:08:
         3d:ac:c2:cb:e2:e6:40:da:e4:19:54:2c:94:37:5a:c5:8f:13:
         5f:4a:7f:73:7a:b1:15:98:c2:7a:12:da:ea:d4:49:31:b0:d3:
         40:cf:87:04:28:04:d0:26:cc:b1:64:d2:a8:86:02:7f:f7:4c:
         ae:45:e1:4b:6d:84:df:48:c0:b6:52:a1:65:83:48:ef:5a:10:
         94:4f:e6:e4:75:0a:6d:74:3b:b3:8b:5c:42:89:be:be:ba:26:
         40:6f:06:a8:c1:3a:bd:4c:b2:3c:01:1b:02:27:54:94:21:67:
         96:ee:85:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 14:13:42 2024 by rpki-client on console-fra.rpki-client.org