Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e83c85e5-8535-4793-9639-6216c5afd18a/ec08e75a-8d62-37fa-b735-c0da5b3f7557.roa
File:                     ec08e75a-8d62-37fa-b735-c0da5b3f7557.roa (raw, json)
Hash identifier:          W4M/yXuNDduzonV55dGBce8tqV9m8LlhAINg5Cl1VPU=
Subject key identifier:   3F:39:D8:E5:E2:D3:7F:DA:94:37:A9:0C:0A:B3:AC:16:92:0D:12:BA
Certificate issuer:       /CN=e83c85e5-8535-4793-9639-6216c5afd18a
Certificate serial:       010D0C9F43285846B88A841219BD94980630A240
Authority key identifier: 49:9D:B0:7D:E7:A3:F6:88:C4:53:69:91:95:A8:D0:E1:6C:7B:44:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e83c85e5-8535-4793-9639-6216c5afd18a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e83c85e5-8535-4793-9639-6216c5afd18a/ec08e75a-8d62-37fa-b735-c0da5b3f7557.roa
Signing time:             Wed 31 Jul 2024 13:00:38 +0000
ROA not before:           Wed 31 Jul 2024 13:00:38 +0000
ROA not after:            Tue 29 Oct 2024 13:00:38 +0000
asID:                     20446
IP address blocks:        151.139.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b8:8a:84:12:19:bd:94:98:06:30:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e83c85e5-8535-4793-9639-6216c5afd18a
        Validity
            Not Before: Jul 31 13:00:38 2024 GMT
            Not After : Oct 29 13:00:38 2024 GMT
        Subject: CN=4dddf265-e30f-4e66-88ca-18f5dc79bef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f0:22:8c:e0:fb:80:b8:b8:bd:11:18:46:38:
                    ca:96:49:44:67:8a:dc:bb:6e:20:60:d3:3e:ed:5f:
                    bc:96:3d:e4:2d:37:3d:12:33:ef:1a:f3:ed:02:d9:
                    72:b9:44:9a:d6:93:8a:25:ba:6a:f3:7b:d4:24:29:
                    06:fc:af:17:81:40:e0:91:18:e5:31:15:db:be:52:
                    9b:0a:f4:42:38:11:f5:c6:c1:8e:2c:e5:25:d8:33:
                    33:f0:59:aa:5e:28:85:65:23:d4:c6:77:08:b4:3b:
                    e5:b3:ab:9e:8c:5c:ae:d7:c2:c7:5a:e8:bc:c9:12:
                    1a:9a:3b:86:55:e4:cf:0f:84:81:30:42:cd:6e:26:
                    21:74:22:4e:60:b4:7a:28:68:40:10:a8:1c:dc:52:
                    9c:1e:e1:76:e2:86:f5:98:66:e5:34:2e:e5:c5:da:
                    52:1c:8b:90:14:0f:5f:36:5a:47:56:10:8e:67:26:
                    de:60:a5:81:db:11:2e:5b:60:fc:60:09:be:7d:43:
                    49:3c:9b:f2:67:d7:09:cf:6f:9c:27:03:87:26:d9:
                    3d:ef:38:53:e4:d8:e8:c0:ba:e1:5b:11:19:38:48:
                    2d:2a:25:69:7f:2f:d5:e0:ee:62:90:b7:41:d3:b3:
                    58:ce:a2:68:67:95:c3:a7:6c:12:15:96:0a:19:5f:
                    35:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:39:D8:E5:E2:D3:7F:DA:94:37:A9:0C:0A:B3:AC:16:92:0D:12:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e83c85e5-8535-4793-9639-6216c5afd18a/ec08e75a-8d62-37fa-b735-c0da5b3f7557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e83c85e5-8535-4793-9639-6216c5afd18a/e83c85e5-8535-4793-9639-6216c5afd18a.crl

            X509v3 Authority Key Identifier:
                keyid:49:9D:B0:7D:E7:A3:F6:88:C4:53:69:91:95:A8:D0:E1:6C:7B:44:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e83c85e5-8535-4793-9639-6216c5afd18a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.139.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:b7:4f:9e:ca:40:16:d2:22:ae:20:8d:05:fa:7a:0f:72:d1:
         db:01:ec:a6:0c:49:9f:40:af:29:fb:ba:17:f1:db:8c:45:99:
         4c:2e:dd:4c:30:ea:46:12:d0:8e:74:a1:ad:e7:f7:cf:dc:aa:
         76:6b:28:3a:b0:e8:5f:71:4d:bf:65:e9:4c:47:19:e9:72:f8:
         58:ed:0e:c4:a8:64:a9:f0:d6:44:ae:11:62:4c:81:1f:58:ae:
         e6:f8:66:70:c9:72:ae:76:ec:15:8a:33:dc:a5:a0:02:42:4f:
         73:58:92:09:91:8d:cd:6a:3e:ab:4f:80:e1:c8:84:2d:b0:80:
         9a:02:99:23:80:91:22:5f:4e:77:6e:c7:4e:cb:cd:7d:2d:72:
         be:b0:f5:bc:bb:b8:92:98:37:e0:67:26:c1:d7:a6:0f:d6:f9:
         31:1a:42:47:f3:8e:8c:cd:36:ba:85:7c:9e:c1:10:67:c8:a7:
         a6:21:de:9e:a2:c0:47:6b:6f:a3:bb:88:ae:69:7c:30:e8:71:
         71:88:e1:78:32:c0:c7:6b:0e:78:8f:ac:dc:b7:af:93:a2:90:
         a6:3a:38:23:a4:d9:6c:fc:0e:20:aa:de:5b:f3:f1:c6:4a:45:
         a8:50:61:a3:65:d3:f2:19:d9:15:a0:c5:c5:fa:12:61:c0:31:
         5f:e3:74:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 17:27:32 2024 by rpki-client on console-ams.rpki-client.org