Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/fe185983-ff6b-3cc5-8184-9a5c1959020b.roa
File:                     fe185983-ff6b-3cc5-8184-9a5c1959020b.roa (raw, json)
Hash identifier:          +44mUrMZHSXZ9sXB2zEGb2vMeafz6aj5SaqCQYyocuU=
Subject key identifier:   71:DF:9F:47:D4:31:06:8C:43:04:90:E1:A0:64:A2:3D:FC:B8:7F:12
Certificate issuer:       /CN=472a2488-5465-4b11-8a3d-5dc990d29dd5
Certificate serial:       010D0C9F43285844755F1ECBF311B00348B949C0
Authority key identifier: 4B:95:72:F2:D4:4F:1A:3F:46:68:06:7E:41:82:73:59:2C:86:C0:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/fe185983-ff6b-3cc5-8184-9a5c1959020b.roa
Signing time:             Sat 06 Jan 2024 02:00:16 +0000
ROA not before:           Sat 06 Jan 2024 02:00:16 +0000
ROA not after:            Fri 05 Apr 2024 01:00:16 +0000
asID:                     213122
IP address blocks:        128.254.193.0/24 maxlen: 24
                          128.254.194.0/24 maxlen: 24
                          128.254.192.0/24 maxlen: 24
                          128.254.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:75:5f:1e:cb:f3:11:b0:03:48:b9:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472a2488-5465-4b11-8a3d-5dc990d29dd5
        Validity
            Not Before: Jan  6 02:00:16 2024 GMT
            Not After : Apr  5 01:00:16 2024 GMT
        Subject: CN=16380f7b-4987-4c24-aafb-d22afbd3a8bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:36:44:3b:53:0c:a8:e9:65:74:67:17:05:38:
                    80:eb:ba:51:36:72:ac:a1:88:1f:b4:35:2c:91:78:
                    11:bc:1b:94:13:c7:93:dd:64:1f:2b:cb:7c:dd:7d:
                    b9:9f:4d:a1:94:34:b0:3a:54:cb:a6:a0:b2:c9:bf:
                    d7:11:cc:f7:5e:45:4e:0e:05:d5:1b:08:36:3b:4b:
                    78:11:bc:ca:ae:f4:6a:35:c4:4b:f0:82:94:73:fc:
                    36:55:21:7d:9b:c3:ea:18:29:60:76:d0:2d:f1:89:
                    f9:33:df:38:c9:49:77:7f:44:fb:bb:66:2b:da:9f:
                    99:0c:ea:7c:0b:c9:19:9b:5e:96:23:35:58:fd:9f:
                    52:9a:f7:32:7c:8d:b6:92:1a:d2:1e:79:da:2e:e0:
                    38:d6:2d:46:08:42:ba:6b:32:8f:2f:20:b7:15:7c:
                    dd:fb:f7:c6:6e:90:d7:b1:bc:55:b0:d7:1d:09:5b:
                    c8:ab:76:70:97:12:73:95:27:63:9d:ec:30:d8:73:
                    19:69:05:48:e1:bd:55:f8:99:c1:73:0c:3f:9d:b7:
                    69:dc:d6:bd:ee:20:e9:0a:c0:34:a0:43:a5:5f:a1:
                    94:ea:a2:15:a5:64:e7:3a:58:1f:aa:b7:e1:47:b9:
                    18:7a:4b:e6:6b:c3:13:09:28:ad:ad:51:a6:68:da:
                    37:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DF:9F:47:D4:31:06:8C:43:04:90:E1:A0:64:A2:3D:FC:B8:7F:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/fe185983-ff6b-3cc5-8184-9a5c1959020b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5/472a2488-5465-4b11-8a3d-5dc990d29dd5.crl

            X509v3 Authority Key Identifier:
                keyid:4B:95:72:F2:D4:4F:1A:3F:46:68:06:7E:41:82:73:59:2C:86:C0:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/472a2488-5465-4b11-8a3d-5dc990d29dd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:52:4f:7b:4c:7a:f9:82:e2:7b:60:97:b6:37:3e:34:e6:92:
         8f:45:23:2e:2f:9f:99:9f:7e:9b:32:36:8d:48:12:ae:25:d0:
         fd:93:5a:c0:f3:74:37:5c:82:5d:1d:a6:96:11:57:c1:52:65:
         91:29:ba:14:2b:c8:b4:ed:3f:fc:c8:f4:6d:ff:89:34:6d:1a:
         cf:cf:e8:1e:1a:7f:19:37:34:b7:17:b5:cb:6a:30:f2:0c:31:
         83:09:01:83:38:34:5d:9c:52:7b:8a:d2:2a:0a:28:84:e5:48:
         70:16:8e:96:52:4e:f7:60:69:f6:df:58:45:ad:24:68:55:71:
         b7:08:70:bb:24:1c:71:7b:97:c4:cf:ed:19:d0:f3:75:65:96:
         f6:cb:1e:bb:18:1d:16:d7:19:9f:f2:48:b2:ec:f6:21:5a:10:
         a2:67:8a:05:db:71:e3:4b:5f:30:3b:bb:65:86:0f:bb:7c:a3:
         6e:2e:70:6f:05:0a:32:d5:b8:e4:be:88:3a:1e:6d:f2:c0:f0:
         a8:bd:89:3d:50:64:d5:9c:c1:69:6c:b1:a3:67:54:52:eb:06:
         db:6e:04:d5:d2:7e:9b:c4:b0:a4:92:5a:f1:e7:bf:12:67:70:
         cb:f6:fe:a7:3f:8a:ea:2b:41:f8:48:55:c8:a7:02:bd:df:0e:
         88:5b:1d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 00:16:39 2024 by rpki-client on console-fra.rpki-client.org