Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3ad60a81-172e-4de8-b784-d98f58f60dcc/07619237-42ca-38da-a4f0-27cc439c8e32.roa
File:                     07619237-42ca-38da-a4f0-27cc439c8e32.roa (raw, json)
Hash identifier:          lMqXOrfTfrSfwMtgtI+gyVu4Iy+R6mt+HDw1qzd6Iqk=
Subject key identifier:   6A:21:34:16:E3:03:D9:8B:81:0C:72:95:E7:7D:33:3C:4C:C1:0A:BB
Certificate issuer:       /CN=3ad60a81-172e-4de8-b784-d98f58f60dcc
Certificate serial:       010D0C9F4328584706B5ABE6B47F06EF88969C00
Authority key identifier: D0:C0:04:19:35:79:AB:69:45:9C:1E:B3:1E:BD:7C:2C:F1:32:71:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3ad60a81-172e-4de8-b784-d98f58f60dcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3ad60a81-172e-4de8-b784-d98f58f60dcc/07619237-42ca-38da-a4f0-27cc439c8e32.roa
Signing time:             Wed 28 Aug 2024 13:00:42 +0000
ROA not before:           Wed 28 Aug 2024 13:00:42 +0000
ROA not after:            Tue 26 Nov 2024 14:00:42 +0000
asID:                     398573
IP address blocks:        204.108.184.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:06:b5:ab:e6:b4:7f:06:ef:88:96:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ad60a81-172e-4de8-b784-d98f58f60dcc
        Validity
            Not Before: Aug 28 13:00:42 2024 GMT
            Not After : Nov 26 14:00:42 2024 GMT
        Subject: CN=f44a51f2-09ec-4884-8846-7e6610e6c113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f7:4c:70:df:9e:44:2c:aa:8e:cf:15:3c:ba:
                    a6:2c:56:07:12:09:5d:3f:79:fe:fe:7d:77:65:50:
                    19:a2:f2:c1:7c:a5:89:af:62:90:8a:f1:86:97:f4:
                    ac:b2:2c:65:ff:3e:e0:5f:7e:ac:0d:1c:a6:51:dd:
                    20:9d:a7:aa:f7:69:fd:d0:51:04:e8:2d:55:80:73:
                    61:92:1b:d9:a5:a5:c1:3c:8f:dd:01:4a:e5:83:01:
                    c3:51:6a:4c:1c:ca:60:e4:a7:13:4c:bf:5e:0d:c1:
                    79:b3:1a:f6:dd:5a:1e:e4:c7:cc:f2:3c:99:82:63:
                    cf:63:7e:fa:10:92:aa:53:a3:e8:2b:16:48:f3:9a:
                    ef:71:7e:f5:b0:8c:db:a6:97:a3:f7:a6:16:9d:8b:
                    23:3c:c5:4e:67:c1:f6:78:0c:28:b8:9e:ba:2a:5c:
                    e6:56:fd:91:55:31:d2:d9:23:f7:89:f2:1f:b0:6a:
                    fb:1e:f0:8d:7e:a9:f5:be:3d:f3:02:ea:a9:2a:af:
                    fc:3a:4f:ee:80:a8:54:39:56:03:df:28:85:ea:3b:
                    79:43:86:06:49:d4:cd:36:3b:c9:f6:f5:7e:49:08:
                    e0:3d:b9:ab:36:4c:ee:13:c1:a1:94:b3:b7:74:e8:
                    44:67:0a:af:a0:fd:ae:c4:28:1e:75:ca:9f:95:1d:
                    52:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:21:34:16:E3:03:D9:8B:81:0C:72:95:E7:7D:33:3C:4C:C1:0A:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3ad60a81-172e-4de8-b784-d98f58f60dcc/07619237-42ca-38da-a4f0-27cc439c8e32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3ad60a81-172e-4de8-b784-d98f58f60dcc/3ad60a81-172e-4de8-b784-d98f58f60dcc.crl

            X509v3 Authority Key Identifier:
                keyid:D0:C0:04:19:35:79:AB:69:45:9C:1E:B3:1E:BD:7C:2C:F1:32:71:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3ad60a81-172e-4de8-b784-d98f58f60dcc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.108.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:fb:0e:2c:8b:ec:94:c4:73:e7:b6:47:ff:04:86:83:8d:d3:
         a7:8b:1f:3c:bb:cd:27:90:88:67:dd:8e:1c:d5:bb:e3:d4:ec:
         1d:9c:54:e7:52:48:85:60:bd:07:a4:e0:6a:fc:97:2b:01:94:
         1b:00:e0:56:0b:cf:25:0a:22:bd:fe:a6:de:8c:d1:d5:9f:4e:
         78:d4:23:12:5f:5f:f5:fc:3d:d7:df:97:5a:b7:99:ed:ab:20:
         77:de:4c:8c:86:ae:2d:c7:50:f3:5a:af:c8:03:5c:37:07:3c:
         93:5a:8a:dc:49:51:41:b0:64:22:5f:bc:e4:37:44:5c:1c:af:
         d5:2e:d0:51:8f:fe:f2:b9:49:b9:78:a2:62:d6:53:1a:f8:d5:
         dc:0a:3b:80:37:ea:0c:b4:44:18:30:04:f2:60:39:2e:9e:af:
         6d:fe:9e:55:e0:75:9f:5c:18:96:bd:73:d7:07:ba:43:3c:a3:
         9c:8f:ba:b2:02:cc:bd:22:09:df:e4:87:95:5b:a7:d4:05:38:
         be:ab:66:c7:f3:56:cc:54:0e:23:1d:3f:6e:81:02:0b:60:57:
         9d:d9:6e:67:75:f2:37:df:ec:72:1a:fc:0d:a6:57:55:6e:94:
         3c:1d:95:c2:22:0b:08:bd:30:cb:c2:70:3e:bc:e4:91:50:68:
         bc:0a:55:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 00:46:23 2024 by rpki-client on console-ams.rpki-client.org