Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663/1e1de2f3-39c9-3234-a0ae-2bc343a0e02a.roa
File:                     1e1de2f3-39c9-3234-a0ae-2bc343a0e02a.roa (raw, json)
Hash identifier:          Z+2+iCWYElG5+Qed1cpXtsf0dEHHhQj6dsAKWmcl0x8=
Subject key identifier:   A2:86:E1:E8:70:21:7E:0F:24:09:76:2C:62:49:C2:87:7E:03:B6:D5
Certificate issuer:       /CN=578540a4-eada-4f9a-b817-b3e81b5c2663
Certificate serial:       010D0C9F43285844C91FB93AB57FCF0D7A063E00
Authority key identifier: 05:12:EB:24:36:F8:05:67:D9:A0:A8:BA:AF:E9:52:54:94:BD:23:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663/1e1de2f3-39c9-3234-a0ae-2bc343a0e02a.roa
Signing time:             Mon 05 Feb 2024 02:00:26 +0000
ROA not before:           Mon 05 Feb 2024 02:00:26 +0000
ROA not after:            Sun 05 May 2024 01:00:26 +0000
asID:                     26282
IP address blocks:        130.119.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c9:1f:b9:3a:b5:7f:cf:0d:7a:06:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578540a4-eada-4f9a-b817-b3e81b5c2663
        Validity
            Not Before: Feb  5 02:00:26 2024 GMT
            Not After : May  5 01:00:26 2024 GMT
        Subject: CN=9825078b-5345-47d1-b0e0-d75dc61c5451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:2f:31:3d:27:a2:2a:dc:ec:85:d8:97:c6:
                    bc:f6:85:60:2e:5f:8c:23:e3:25:7a:0a:11:1e:55:
                    ae:08:a3:d6:b1:4e:dd:1a:6d:a2:be:cb:6d:45:45:
                    03:5e:83:60:b8:cb:99:b7:36:8e:e8:46:bf:9e:c5:
                    07:41:08:8e:7e:3b:20:67:b5:6a:b8:01:9a:68:33:
                    45:47:da:f8:b0:92:32:78:40:0a:91:79:21:24:1b:
                    9d:f1:0a:14:5d:1c:dc:b8:a2:cf:c0:26:64:8c:8e:
                    13:44:53:ad:79:72:ca:d9:f6:9a:22:2c:2c:6d:dd:
                    b6:5e:aa:2b:62:31:1d:16:6e:60:1e:e3:72:01:e7:
                    48:4a:3a:05:9f:f9:82:6e:e3:50:b3:93:0c:42:f4:
                    a4:a3:3e:39:7b:b1:6e:ed:ed:05:65:f2:58:a6:78:
                    2d:fc:18:c3:03:48:0b:a5:45:6a:bb:f3:48:95:d1:
                    b8:6c:c3:26:c0:9b:ba:cd:8b:c1:74:fa:13:e4:74:
                    bc:23:ab:1f:c5:f0:80:89:06:f7:e4:3c:31:1c:3b:
                    4e:b4:3b:4b:8d:f8:33:96:35:45:62:da:59:55:d3:
                    3e:df:e3:7d:0f:b5:31:21:5b:2c:17:f0:8f:80:16:
                    a1:2c:a1:2f:76:14:98:e7:39:38:8d:9f:ec:09:28:
                    7d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:86:E1:E8:70:21:7E:0F:24:09:76:2C:62:49:C2:87:7E:03:B6:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663/1e1de2f3-39c9-3234-a0ae-2bc343a0e02a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663/578540a4-eada-4f9a-b817-b3e81b5c2663.crl

            X509v3 Authority Key Identifier:
                keyid:05:12:EB:24:36:F8:05:67:D9:A0:A8:BA:AF:E9:52:54:94:BD:23:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.119.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:69:f3:33:f7:5b:1d:e7:ac:5a:07:8d:85:1c:5b:63:87:6c:
         73:e8:b0:08:22:11:9c:f1:c4:2b:e2:0f:1b:b6:55:ca:a7:e2:
         9d:b5:61:99:79:fb:8a:d2:b3:6f:07:ec:61:03:cb:4c:cb:ee:
         27:b9:1d:3c:02:de:c0:58:6d:de:02:26:31:80:5e:54:e6:a8:
         5a:59:26:f5:f7:20:17:98:31:24:b3:a1:d4:c8:03:de:20:90:
         e2:e7:28:13:7e:67:06:31:fe:a4:f6:c0:ca:fc:76:a6:c2:77:
         69:a5:dc:78:95:48:bf:65:9c:de:24:5c:da:3e:b8:28:9b:8f:
         03:65:96:b9:cb:26:a1:e0:f8:14:c2:c5:ca:4a:74:30:ea:8a:
         61:3f:81:63:b4:ee:68:7f:6d:9b:eb:a9:6a:3d:e2:1d:e9:2b:
         32:68:d9:d7:fd:48:da:0e:33:e2:80:6a:a8:e9:0c:a9:67:bc:
         7e:62:16:b8:a0:7f:a6:7f:a2:4a:2b:67:b0:e3:11:a0:5e:30:
         47:7f:99:84:f9:6c:1a:ab:dc:c4:78:7c:62:c6:78:26:40:2b:
         c5:5e:9f:b4:04:0f:fc:17:b5:eb:d1:79:02:8c:a0:ad:49:58:
         ac:dd:35:75:23:cc:c5:aa:92:81:4d:1a:a5:33:68:4d:a7:ae:
         4f:12:0d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 20:17:00 2024 by rpki-client on console-fra.rpki-client.org