Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2fa500d5-f1a5-4c83-a037-0bf390e16ac5/67e4a046-7937-3b5d-b486-ea8482426504.roa
File:                     67e4a046-7937-3b5d-b486-ea8482426504.roa (raw, json)
Hash identifier:          HWNHM/QCGizHzsqsRTARUflU0VUio1ZiDXFDjTrrwhg=
Subject key identifier:   67:0E:42:D7:AF:A3:77:09:68:7D:C0:D7:2D:7C:A8:EC:85:34:0A:4E
Certificate issuer:       /CN=2fa500d5-f1a5-4c83-a037-0bf390e16ac5
Certificate serial:       010D0C9F432858464FD9B355579F236E3E0E2580
Authority key identifier: 30:56:D1:78:3C:FF:0E:9F:7E:8F:70:D6:43:88:04:40:29:B5:AD:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2fa500d5-f1a5-4c83-a037-0bf390e16ac5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2fa500d5-f1a5-4c83-a037-0bf390e16ac5/67e4a046-7937-3b5d-b486-ea8482426504.roa
Signing time:             Mon 24 Jun 2024 01:00:24 +0000
ROA not before:           Mon 24 Jun 2024 01:00:24 +0000
ROA not after:            Sun 22 Sep 2024 01:00:24 +0000
asID:                     1828
IP address blocks:        50.115.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:4f:d9:b3:55:57:9f:23:6e:3e:0e:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa500d5-f1a5-4c83-a037-0bf390e16ac5
        Validity
            Not Before: Jun 24 01:00:24 2024 GMT
            Not After : Sep 22 01:00:24 2024 GMT
        Subject: CN=7c1b4511-dbcb-461b-b1be-e3cb93dbdb8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ce:44:48:9e:d3:08:db:c1:1a:58:80:aa:88:
                    58:b6:b0:84:cb:f2:ca:77:95:12:13:74:9f:c8:e0:
                    a4:af:8a:77:00:d1:c8:d2:13:15:fd:05:a0:26:85:
                    e1:ae:01:46:28:7b:dd:68:bd:bd:55:78:0e:82:7c:
                    fa:ac:d2:ac:21:40:bb:50:70:65:bf:40:a8:ee:cb:
                    92:4d:7d:5d:3d:f8:2d:05:97:d7:b3:ba:0b:1f:b2:
                    9d:92:b9:46:e7:1e:18:bf:cc:45:39:ec:d2:95:76:
                    bc:c0:81:db:3e:ed:9a:98:21:96:e4:f3:cb:22:34:
                    b9:8a:7f:83:d9:7d:47:3c:ad:d3:9a:c5:2f:e2:9d:
                    64:7c:d1:6c:68:01:72:1c:c6:1d:9b:87:ff:bc:af:
                    fa:83:9c:16:05:0b:16:81:0c:0c:de:fd:16:ce:db:
                    55:2d:9f:bb:8c:02:18:d4:0b:fa:bf:38:69:56:76:
                    2c:b2:6a:03:9f:58:02:fe:f8:b1:c9:0a:f4:ae:e6:
                    6e:dc:0a:60:de:72:84:f7:d7:82:3e:08:e9:01:10:
                    a1:c0:2f:a6:3f:14:5d:50:a9:2d:c2:9a:26:9a:65:
                    bb:0b:61:74:64:7f:64:df:bc:34:46:3b:af:d0:71:
                    d7:90:89:b7:2a:d6:ed:d0:97:d9:f1:76:1c:aa:20:
                    7a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0E:42:D7:AF:A3:77:09:68:7D:C0:D7:2D:7C:A8:EC:85:34:0A:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2fa500d5-f1a5-4c83-a037-0bf390e16ac5/67e4a046-7937-3b5d-b486-ea8482426504.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2fa500d5-f1a5-4c83-a037-0bf390e16ac5/2fa500d5-f1a5-4c83-a037-0bf390e16ac5.crl

            X509v3 Authority Key Identifier:
                keyid:30:56:D1:78:3C:FF:0E:9F:7E:8F:70:D6:43:88:04:40:29:B5:AD:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2fa500d5-f1a5-4c83-a037-0bf390e16ac5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.115.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:69:33:4e:8b:cb:bf:c6:e4:81:1e:56:c1:1c:a7:d8:17:a9:
         26:56:de:e2:4b:bc:9a:7b:c0:35:17:ed:0b:9a:ea:fe:93:f9:
         31:ef:58:35:c1:a9:c3:d9:af:e0:81:51:1a:d8:b9:e3:71:e7:
         0a:06:d2:37:c7:74:9b:55:e8:52:4a:e4:c9:72:44:32:38:35:
         d4:27:1b:45:79:41:d1:13:c6:08:2d:86:c3:ba:60:9b:10:45:
         34:bd:26:56:35:c5:fb:f4:19:e3:c8:0d:ac:9f:46:c8:e4:cc:
         0b:77:f0:84:25:00:c7:57:61:71:00:22:f2:3e:08:f2:06:af:
         23:de:45:3d:10:22:8e:87:35:47:4d:90:3a:cb:23:89:d5:ff:
         4f:a6:e5:d5:94:cb:ef:5d:5c:37:18:72:f5:a8:d9:16:83:ff:
         56:1f:2c:16:5f:34:0c:12:19:58:1f:79:c2:cd:7c:bc:44:d9:
         22:e7:48:59:46:2f:cb:8d:95:e5:b5:cf:1c:e8:32:9b:3b:6d:
         e0:da:b8:49:33:7f:b4:73:06:67:b6:be:bc:6b:42:22:49:9c:
         5b:ce:62:0f:5b:dd:b8:fb:e5:a8:b0:75:04:60:a8:7c:c8:e7:
         6f:6d:38:48:ca:10:19:43:33:8d:d2:8a:57:9e:b4:ea:33:a4:
         1f:4a:ee:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 24 16:28:32 2024 by rpki-client on console-fra.rpki-client.org