Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/19272605-5266-42dc-9ee0-65367c80a6be/4f4b9124-64d4-3043-94d9-56191d0e6402.roa
File:                     4f4b9124-64d4-3043-94d9-56191d0e6402.roa (raw, json)
Hash identifier:          ubHzyfI5ei34gtH9Ik6x9rS9pvLWfPeF/ZuaVeXvAt0=
Subject key identifier:   E5:88:BB:6A:7D:92:7C:D5:7A:19:A0:F5:33:87:AE:9A:49:AC:35:9F
Certificate issuer:       /CN=19272605-5266-42dc-9ee0-65367c80a6be
Certificate serial:       010D0C9F4328583D76AD79F04C079B4B95E7BEC0
Authority key identifier: 5B:C2:88:E2:4D:DF:E8:28:6E:56:05:5D:0A:FE:99:4F:C8:70:2B:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/19272605-5266-42dc-9ee0-65367c80a6be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/19272605-5266-42dc-9ee0-65367c80a6be/4f4b9124-64d4-3043-94d9-56191d0e6402.roa
Signing time:             Mon 04 Apr 2022 04:00:00 +0000
ROA not before:           Mon 04 Apr 2022 04:00:00 +0000
ROA not after:            Sat 07 Jul 2029 04:00:00 +0000
asID:                     400523
IP address blocks:        23.133.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:76:ad:79:f0:4c:07:9b:4b:95:e7:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19272605-5266-42dc-9ee0-65367c80a6be
        Validity
            Not Before: Apr  4 04:00:00 2022 GMT
            Not After : Jul  7 04:00:00 2029 GMT
        Subject: CN=3f940f45-12d6-4051-b8af-abbb62f31bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:30:ad:a8:59:45:cc:16:14:1d:2f:bf:89:43:
                    be:11:7a:c0:a1:e4:fe:53:a2:53:cc:1e:99:e2:7f:
                    49:38:af:b4:55:73:19:22:e4:e7:1d:e3:2a:d8:d5:
                    d1:9b:cc:87:0e:ae:69:75:0b:3e:f6:a8:26:69:90:
                    91:4a:7f:bc:b4:83:10:66:00:cc:c3:42:a9:bb:8f:
                    4e:2b:33:01:d7:05:1d:67:9c:bd:ab:48:fd:19:ae:
                    74:18:cc:fb:2d:f8:ba:88:7f:22:7e:47:f9:f6:cf:
                    e5:86:de:c8:4a:6a:0e:b7:57:2a:cb:2f:9b:ad:5a:
                    39:1e:72:2b:d7:a7:ae:71:29:e0:73:fb:dc:e7:17:
                    b9:25:f4:4c:1a:92:a6:26:66:c9:07:54:28:8f:0f:
                    f0:df:fd:b7:a1:2b:89:2c:0c:d6:c4:6d:b6:55:8d:
                    b4:f5:05:7b:52:35:40:ed:0c:ee:c8:3b:e3:07:8c:
                    7c:05:84:7f:b0:24:fb:06:5c:d5:cd:4d:47:dc:a6:
                    19:07:62:e0:c2:06:5c:6d:ef:e1:e2:8b:1e:bd:ea:
                    67:3c:93:ac:6e:89:64:9f:84:c1:0d:ff:1a:03:21:
                    ab:5a:47:a2:bb:6d:12:4e:02:7e:44:9d:0d:64:fc:
                    db:5c:2a:93:7b:a3:65:38:e7:b5:b0:e1:58:2f:46:
                    5f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:88:BB:6A:7D:92:7C:D5:7A:19:A0:F5:33:87:AE:9A:49:AC:35:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/19272605-5266-42dc-9ee0-65367c80a6be/4f4b9124-64d4-3043-94d9-56191d0e6402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/19272605-5266-42dc-9ee0-65367c80a6be/19272605-5266-42dc-9ee0-65367c80a6be.crl

            X509v3 Authority Key Identifier:
                keyid:5B:C2:88:E2:4D:DF:E8:28:6E:56:05:5D:0A:FE:99:4F:C8:70:2B:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/19272605-5266-42dc-9ee0-65367c80a6be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:1d:be:59:bb:8a:1b:42:96:4c:b8:80:33:26:fc:b0:55:17:
         43:06:6b:d9:b9:51:9d:a5:73:7f:af:d4:52:8c:03:93:0e:6f:
         e5:9a:54:f5:7a:b7:b6:61:53:b7:a4:47:01:e4:1e:20:eb:e7:
         0f:06:61:06:34:53:fd:1f:f3:30:3b:76:39:be:b3:6b:61:c5:
         9b:68:9d:b3:d2:ce:90:77:36:9d:05:5f:44:a7:ce:6e:07:fb:
         6b:51:69:84:ac:e7:1c:23:ce:9d:72:98:bc:7c:68:c8:d5:a2:
         3d:73:fa:a4:5b:02:95:1f:53:4a:ce:4b:38:15:c4:fd:5d:93:
         5c:37:51:d3:1d:69:35:cd:eb:26:2c:06:d3:68:6d:73:96:be:
         b4:12:88:4e:9c:eb:46:57:6b:58:cb:62:59:86:96:2e:7a:80:
         00:10:16:aa:2d:bd:2c:f5:f5:b4:39:d4:dd:e4:62:15:d3:c8:
         7a:cc:97:66:02:a2:56:b1:21:88:76:5c:f1:ee:e4:f8:55:69:
         b6:1c:9c:0b:66:0c:9a:14:5d:74:15:53:ac:5d:9d:88:49:4c:
         3a:c2:f8:11:e4:5e:a1:a4:f1:83:22:8f:68:22:23:f0:eb:9d:
         ba:6d:a5:f9:8a:2a:f2:01:bb:28:5c:ea:9b:95:d7:01:f3:00:
         69:67:bd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:09 2024 by rpki-client on console-ams.rpki-client.org