Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/3b00158d-1fe3-3bc2-a212-d1401daf31bd.roa
File:                     3b00158d-1fe3-3bc2-a212-d1401daf31bd.roa (raw, json)
Hash identifier:          TWo2/YophFK1mg6e5ExJZ0D9LPDZJRbZ2iY1WaezrVo=
Subject key identifier:   CA:72:65:53:9F:36:AA:70:9E:F8:64:9F:8B:C3:0D:F5:7F:3C:31:7C
Certificate issuer:       /CN=f8791c17-503c-4afd-9a0b-412c175e957d
Certificate serial:       010D0C9F43285846B88A82F35BF557C878708B00
Authority key identifier: 40:E0:29:06:4B:D3:A4:F6:07:8B:63:B4:BC:A6:C7:94:35:DA:A4:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/3b00158d-1fe3-3bc2-a212-d1401daf31bd.roa
Signing time:             Wed 31 Jul 2024 13:00:38 +0000
ROA not before:           Wed 31 Jul 2024 13:00:38 +0000
ROA not after:            Tue 29 Oct 2024 13:00:38 +0000
asID:                     36344
IP address blocks:        69.168.229.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b8:8a:82:f3:5b:f5:57:c8:78:70:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8791c17-503c-4afd-9a0b-412c175e957d
        Validity
            Not Before: Jul 31 13:00:38 2024 GMT
            Not After : Oct 29 13:00:38 2024 GMT
        Subject: CN=7853c665-6bc3-4f01-84a9-8c576e15f05d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:72:a4:82:f4:99:4b:4a:f4:f5:88:5b:82:d2:
                    86:3d:88:cc:d5:93:91:6e:78:5e:9f:43:98:bc:63:
                    28:b7:a3:2c:eb:38:78:64:ca:c8:5d:05:4d:5f:37:
                    5c:b2:11:37:de:e1:bf:93:6a:ef:33:c4:20:92:d3:
                    01:7c:2e:c4:32:9c:22:b7:d5:88:b3:8f:fb:cf:b5:
                    f8:e4:d6:e2:e4:a6:23:d7:f1:9d:be:c7:5c:fb:34:
                    8c:b9:03:06:91:f0:ad:03:df:7c:1f:91:e5:04:19:
                    09:3f:6a:b3:72:6b:ad:42:b8:94:b5:96:10:0c:df:
                    ac:d4:6d:26:89:a8:da:17:49:95:ef:8d:26:49:f2:
                    ab:fa:8b:09:ed:1b:fe:8c:6f:58:22:2d:59:fe:94:
                    ed:79:d4:25:84:97:3a:f7:fc:d3:07:d7:5f:a2:5c:
                    23:30:bb:f4:aa:a3:1b:ed:f0:3a:3c:50:6e:67:94:
                    39:ef:4a:0e:ca:a3:d5:df:08:8f:f6:4f:62:42:9c:
                    3e:b3:c7:25:3e:9a:54:ab:13:b4:22:0e:c7:fe:f8:
                    40:76:28:b6:98:75:d5:47:da:0f:01:1d:9e:da:fd:
                    7c:79:34:e6:2e:e0:27:5a:88:c7:22:5d:b2:4a:ac:
                    ca:62:88:bb:99:35:0b:1e:08:b1:43:22:76:5f:c4:
                    6b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:72:65:53:9F:36:AA:70:9E:F8:64:9F:8B:C3:0D:F5:7F:3C:31:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/3b00158d-1fe3-3bc2-a212-d1401daf31bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/f8791c17-503c-4afd-9a0b-412c175e957d.crl

            X509v3 Authority Key Identifier:
                keyid:40:E0:29:06:4B:D3:A4:F6:07:8B:63:B4:BC:A6:C7:94:35:DA:A4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:05:7b:69:76:1b:3b:84:9d:4e:b7:57:b6:46:6e:45:fd:f6:
         14:ff:32:f1:16:52:70:3c:ba:c1:34:69:ff:ae:db:94:4e:62:
         3e:af:46:42:9a:9f:e2:50:9f:91:2d:05:9e:7b:dd:45:da:f7:
         99:eb:e8:29:d8:3b:ab:27:a0:5b:a9:78:94:0b:dd:45:f3:d9:
         3e:88:ac:3e:1c:df:80:33:bd:7f:63:77:22:39:01:66:65:68:
         8d:0b:0d:96:ac:2e:63:f1:b6:9d:df:52:ef:2f:32:96:7f:7f:
         2d:80:3b:75:73:e8:a5:39:8f:65:2c:1d:a6:57:50:9e:ab:33:
         b9:dd:35:bf:76:68:c4:d7:a8:9d:76:84:7b:80:ec:4a:a0:be:
         d5:eb:64:cc:03:13:26:2b:a6:9e:59:ec:20:e5:7f:b8:a6:68:
         f6:b0:6e:a8:a8:81:c8:a3:af:58:b6:20:26:10:fd:d3:68:20:
         b5:78:34:3f:e8:13:b2:62:89:00:4b:1c:2a:5f:24:43:fc:14:
         3f:8c:88:2f:bf:6d:83:59:cb:ef:0f:dd:59:7d:4b:56:69:24:
         90:2b:e5:63:58:36:ae:a5:85:66:f7:c5:d5:cf:60:f5:32:ad:
         3f:60:69:75:1e:95:64:04:62:b4:86:cb:8d:e0:ef:4c:91:5f:
         22:6d:e7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 22:48:48 2024 by rpki-client on console-fra.rpki-client.org