Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/08437c7d-f46a-351f-9d6e-06c112594e2f.roa
File:                     08437c7d-f46a-351f-9d6e-06c112594e2f.roa (raw, json)
Hash identifier:          VofgYoWdviYIDTIFWk3a46G8WOTKQlpamQVza/ZfVR8=
Subject key identifier:   90:CD:8A:C0:B6:EC:EE:4B:11:74:72:8E:90:B1:2D:35:53:D5:89:78
Certificate issuer:       /CN=f8791c17-503c-4afd-9a0b-412c175e957d
Certificate serial:       010D0C9F43285846B88A83697CCDACE5795928C8
Authority key identifier: 40:E0:29:06:4B:D3:A4:F6:07:8B:63:B4:BC:A6:C7:94:35:DA:A4:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/08437c7d-f46a-351f-9d6e-06c112594e2f.roa
Signing time:             Wed 31 Jul 2024 13:00:38 +0000
ROA not before:           Wed 31 Jul 2024 13:00:38 +0000
ROA not after:            Tue 29 Oct 2024 13:00:38 +0000
asID:                     62240
IP address blocks:        69.168.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b8:8a:83:69:7c:cd:ac:e5:79:59:28:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8791c17-503c-4afd-9a0b-412c175e957d
        Validity
            Not Before: Jul 31 13:00:38 2024 GMT
            Not After : Oct 29 13:00:38 2024 GMT
        Subject: CN=56ddc919-47cf-4508-98e2-c38a33f5fce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1d:3a:13:24:af:1d:2c:03:33:28:ef:66:f1:
                    76:2f:d9:2b:50:f9:41:fc:31:a5:90:b6:3d:fd:e7:
                    e3:11:45:ad:16:8e:f4:45:93:41:b5:cb:2b:bd:11:
                    5c:11:b6:c0:85:a4:7d:7a:9b:46:72:69:56:be:44:
                    97:08:75:4a:2e:8e:b0:65:60:64:36:1e:a8:e8:fc:
                    97:76:e0:91:6c:e2:56:6a:ea:25:1e:4f:07:c9:1f:
                    32:7a:6a:e5:8f:dc:6a:69:c6:45:9a:cf:a4:ca:84:
                    49:2f:eb:a8:95:c7:8b:d3:98:9d:fe:8f:88:cd:a9:
                    b7:2e:7e:f1:77:30:4e:9f:80:cc:fe:4e:5c:7a:1a:
                    94:0d:58:dd:11:f5:ad:d9:0f:34:32:01:70:1a:e1:
                    57:0a:70:e8:b8:50:bd:2d:84:2e:59:c8:d5:d5:d1:
                    30:3f:ac:98:37:53:07:1a:d6:76:fa:93:1f:0b:2e:
                    a1:86:57:75:59:4f:20:1c:aa:56:17:79:98:26:e3:
                    b2:50:48:ce:45:90:25:e0:0a:91:79:2f:f9:d9:1f:
                    e6:9c:07:9e:53:44:f8:98:00:a9:d4:fe:3e:70:73:
                    ce:dd:4c:ef:34:b1:79:8e:f9:4c:8b:d3:c7:43:93:
                    9e:d2:6c:30:81:2a:b2:94:4a:d5:9f:02:b0:3d:ed:
                    f4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CD:8A:C0:B6:EC:EE:4B:11:74:72:8E:90:B1:2D:35:53:D5:89:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/08437c7d-f46a-351f-9d6e-06c112594e2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/f8791c17-503c-4afd-9a0b-412c175e957d.crl

            X509v3 Authority Key Identifier:
                keyid:40:E0:29:06:4B:D3:A4:F6:07:8B:63:B4:BC:A6:C7:94:35:DA:A4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:4d:5b:dd:6c:bd:46:0b:ef:b8:b5:76:19:23:05:ad:ed:e3:
         5d:e4:04:70:dd:35:1f:d7:c4:2c:f2:a5:fc:ff:cc:09:60:ca:
         fc:2e:8b:49:63:f6:2c:43:b4:53:64:1e:37:95:a8:99:da:0e:
         5d:3f:89:c0:fd:28:b5:0a:fa:50:be:3f:2c:74:14:06:41:d8:
         02:fa:05:57:9a:54:17:ae:88:0b:6a:2c:65:35:d8:2e:61:a5:
         22:48:d4:b9:f6:bb:58:0f:b0:22:25:dc:c3:9e:63:35:8b:bf:
         89:d1:44:81:e4:af:ea:7c:51:e0:47:95:01:28:2c:0d:b3:e1:
         81:53:9a:47:01:ac:8e:46:ff:b0:52:c6:a3:8e:5a:ab:09:ee:
         06:bf:cb:27:8e:d1:d9:0d:65:03:37:71:41:d8:b2:5c:b1:bb:
         a4:da:c0:25:56:ea:16:21:bf:a4:91:84:04:97:5d:71:4c:54:
         17:de:39:05:f8:56:9d:82:e6:cc:b5:55:0a:7d:40:be:1f:58:
         99:9e:bb:51:b0:6f:1c:8b:61:23:cb:29:6b:1f:e3:b5:a6:2f:
         b0:73:f2:f8:73:7d:70:0d:e2:ba:9c:d0:0e:a7:af:9a:ce:0f:
         b9:dd:92:f5:ae:d6:b7:bc:d2:91:88:5c:08:f7:86:2f:07:4a:
         79:43:40:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 22:48:48 2024 by rpki-client on console-fra.rpki-client.org