Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663/59f186c3-13f8-3361-9b4d-781b9abb4ab3.roa
File:                     59f186c3-13f8-3361-9b4d-781b9abb4ab3.roa (raw, json)
Hash identifier:          BK5wl6nEaqywRjynIQko2EP5zJXX8+V7hLEI7gbn220=
Subject key identifier:   7C:E5:88:23:E3:7A:10:40:1D:78:B2:2F:F1:42:2E:0E:AF:77:26:FB
Certificate issuer:       /CN=578540a4-eada-4f9a-b817-b3e81b5c2663
Certificate serial:       010D0C9F43285844B2CA59549D85B109E4E74200
Authority key identifier: 05:12:EB:24:36:F8:05:67:D9:A0:A8:BA:AF:E9:52:54:94:BD:23:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663/59f186c3-13f8-3361-9b4d-781b9abb4ab3.roa
Signing time:             Sun 28 Jan 2024 02:00:26 +0000
ROA not before:           Sun 28 Jan 2024 02:00:26 +0000
ROA not after:            Sat 27 Apr 2024 01:00:26 +0000
asID:                     396982
IP address blocks:        141.202.0.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:b2:ca:59:54:9d:85:b1:09:e4:e7:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578540a4-eada-4f9a-b817-b3e81b5c2663
        Validity
            Not Before: Jan 28 02:00:26 2024 GMT
            Not After : Apr 27 01:00:26 2024 GMT
        Subject: CN=476162f3-8b64-4e80-abf2-0add2188f321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4c:c5:b3:12:9a:11:3d:91:13:c9:8f:c4:88:
                    4c:93:ec:09:08:ec:ff:d0:82:a5:91:80:cb:b6:ed:
                    de:31:48:09:4f:fc:f3:77:f8:7b:28:8b:2a:11:b0:
                    24:40:39:a2:8b:89:4c:23:65:3e:9a:17:28:21:e2:
                    d8:fb:03:70:47:9c:0f:86:16:c0:bc:ef:3f:8e:b2:
                    82:ca:7b:59:77:83:9d:d2:c9:56:1a:a3:48:65:5d:
                    b7:73:40:c3:4f:88:05:f4:1a:2e:89:86:a0:84:a6:
                    f6:a9:10:83:f8:d2:d0:a0:2d:3a:f7:1b:d7:cb:76:
                    b9:c7:af:3f:4c:5e:69:8c:d4:64:92:d3:68:6f:1d:
                    45:16:06:68:87:69:50:3f:e7:26:e8:6a:22:e7:01:
                    13:2c:71:a5:e5:ca:e1:b1:6f:16:c0:16:66:1d:ec:
                    b0:09:e8:e9:fe:8d:92:8e:f9:11:d4:39:1e:6c:f6:
                    6d:70:3b:3e:0f:a1:f0:cb:f6:c0:5a:21:2a:b7:02:
                    1a:18:7d:dc:81:47:1b:b7:6b:18:69:93:4d:9a:dd:
                    34:73:8b:11:ab:26:fb:b6:88:a9:df:f9:d6:0c:a5:
                    9f:03:60:b3:ac:91:1c:1a:37:5a:3f:b0:01:77:5a:
                    65:d5:9b:c8:74:76:fa:97:84:2d:55:b4:d9:68:04:
                    10:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E5:88:23:E3:7A:10:40:1D:78:B2:2F:F1:42:2E:0E:AF:77:26:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663/59f186c3-13f8-3361-9b4d-781b9abb4ab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663/578540a4-eada-4f9a-b817-b3e81b5c2663.crl

            X509v3 Authority Key Identifier:
                keyid:05:12:EB:24:36:F8:05:67:D9:A0:A8:BA:AF:E9:52:54:94:BD:23:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.202.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ea:79:cb:1f:78:ef:88:bb:ee:b5:26:b9:23:e8:fc:72:83:
         61:c7:f5:a7:f9:5c:46:8c:7d:ac:59:22:68:ff:22:5c:8e:cc:
         56:b2:ee:d0:81:20:c1:b6:85:aa:5c:ec:fe:e8:95:db:19:26:
         3e:f2:a5:b0:60:4c:be:01:ac:b2:eb:ec:72:ad:34:fb:1f:62:
         b7:25:8e:10:72:a2:0f:62:94:41:cd:db:51:eb:0c:ad:b1:ef:
         91:e8:5d:44:42:a4:85:86:24:90:7d:0e:90:bf:22:f3:0a:8a:
         d7:ea:3e:b7:83:c9:41:2b:bf:7d:63:ce:2e:04:48:b9:5d:2a:
         70:82:6b:32:2c:94:2b:dc:9a:7a:89:44:d8:71:d0:d6:68:e2:
         12:c3:56:94:83:0e:bd:df:17:25:1f:eb:d1:14:6d:a6:ee:6c:
         7c:20:86:c5:af:10:fa:be:0c:91:f5:66:bc:12:e0:06:89:07:
         a9:55:48:f3:d4:e2:4e:7a:3d:d9:78:0c:0c:fa:84:50:c7:58:
         42:ae:ca:8e:25:52:87:ca:1f:c2:be:be:c8:38:a6:3a:ef:0e:
         b3:f4:85:75:88:6c:66:c8:3b:14:5f:a1:96:bf:77:2e:b1:c3:
         cd:17:70:ab:7e:4b:4c:d6:ef:8b:6e:db:a1:85:af:2f:b7:ec:
         fa:57:e7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 20:13:09 2024 by rpki-client on console-ams.rpki-client.org