Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b02168db-a914-4497-b4f3-7926b36419c5/15921e9c-36a5-3a40-a34a-bf4177e318a1.roa
File:                     15921e9c-36a5-3a40-a34a-bf4177e318a1.roa (raw, json)
Hash identifier:          odAZ9BojGU2NOkUmlpq1utG58vlm0Mz/E8TB6+bldO8=
Subject key identifier:   C2:7C:45:F0:4E:6F:DB:D1:E0:11:2E:30:78:80:48:BF:C4:54:0F:9A
Certificate issuer:       /CN=b02168db-a914-4497-b4f3-7926b36419c5
Certificate serial:       010D0C9F43285845B3836E0D94893D640051A480
Authority key identifier: 14:66:D7:0F:A2:22:05:D4:AF:19:00:28:F5:6B:20:56:53:98:87:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b02168db-a914-4497-b4f3-7926b36419c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b02168db-a914-4497-b4f3-7926b36419c5/15921e9c-36a5-3a40-a34a-bf4177e318a1.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     7896
IP address blocks:        216.128.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:6e:0d:94:89:3d:64:00:51:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02168db-a914-4497-b4f3-7926b36419c5
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=eb63a811-34c9-4d54-9463-1c5280b064ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5d:83:7a:f4:91:9b:3f:71:19:51:42:1e:ff:
                    74:0c:b0:f5:33:0e:64:2b:25:46:cc:ef:7b:ca:fe:
                    1b:05:bf:0a:57:ea:1e:c9:af:3a:d6:60:c4:98:e8:
                    84:ec:86:af:30:ec:b6:ab:51:33:74:2c:60:07:d6:
                    13:cb:7d:e1:d3:2d:95:ff:a6:97:fb:48:22:dd:b7:
                    ab:3b:06:c0:9f:a4:3c:f0:b5:ad:33:cc:d1:87:42:
                    4b:9e:e2:8d:3b:a0:5f:b2:3b:db:05:32:cd:bc:51:
                    a0:0c:74:52:e3:2e:87:d0:14:c9:db:3b:c3:e2:24:
                    a3:54:02:10:1e:a8:29:14:19:7e:d0:76:f5:30:a0:
                    cf:df:39:3e:c4:4b:cf:fd:c3:f1:36:93:60:ec:dc:
                    b1:99:f3:6c:35:d9:b3:b4:0e:2d:64:2a:01:8b:d8:
                    a4:30:d5:a9:1e:5a:9e:37:85:32:3e:49:d6:74:7a:
                    92:3f:13:f5:c2:dc:52:f4:72:75:a6:a6:79:e0:5c:
                    53:fd:41:c7:d3:89:8f:6c:e9:b7:c2:1c:84:dd:d3:
                    57:2d:5f:17:a3:cf:82:4c:ef:57:ee:f4:f9:13:db:
                    39:b5:c5:3f:57:8c:28:0d:38:90:8e:a8:f8:6f:1c:
                    d8:77:72:f1:c7:ef:15:7f:47:a2:ff:dc:75:71:a1:
                    de:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7C:45:F0:4E:6F:DB:D1:E0:11:2E:30:78:80:48:BF:C4:54:0F:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b02168db-a914-4497-b4f3-7926b36419c5/15921e9c-36a5-3a40-a34a-bf4177e318a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b02168db-a914-4497-b4f3-7926b36419c5/b02168db-a914-4497-b4f3-7926b36419c5.crl

            X509v3 Authority Key Identifier:
                keyid:14:66:D7:0F:A2:22:05:D4:AF:19:00:28:F5:6B:20:56:53:98:87:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b02168db-a914-4497-b4f3-7926b36419c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.128.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:4d:b4:5d:e5:fc:24:7a:58:22:40:51:34:93:76:0a:c8:b0:
         57:05:00:49:86:63:1a:86:37:ba:9c:df:69:38:02:10:9d:90:
         ed:8c:03:a4:22:d1:2d:b4:d6:5e:fa:5f:b9:55:4a:a8:24:91:
         ac:65:de:10:ea:b7:38:4c:ab:77:a3:0f:33:c6:e3:69:a6:5f:
         bf:57:76:bc:d5:9f:d7:6b:9a:28:2f:e0:0a:fb:3a:b5:fb:08:
         93:a0:da:16:67:f3:f2:92:0a:b3:47:73:40:59:df:d6:66:1b:
         3c:94:a5:ec:05:86:27:9e:5c:f7:e2:37:ff:be:1d:05:5d:01:
         67:ff:d6:3a:b4:30:fe:d9:7f:9e:14:13:43:dd:a1:85:31:e0:
         bf:fd:f2:cd:2a:eb:62:9b:aa:04:03:68:1d:a2:1e:87:41:e4:
         09:4f:70:94:b2:c8:5d:8a:f7:48:13:93:c8:42:50:31:70:73:
         00:7c:ea:ca:eb:86:fe:01:39:a4:bd:26:07:7d:e7:0a:a5:5e:
         15:5f:e3:f7:46:6b:3a:b8:d9:c8:c4:c0:79:aa:c9:95:1f:96:
         c5:f9:fd:70:b7:fd:5e:c2:1d:26:d4:b8:b0:75:b2:aa:15:db:
         70:8e:61:27:16:26:5d:cf:8b:8d:12:47:32:f2:31:2d:46:f9:
         83:95:92:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:56 2024 by rpki-client on console-ams.rpki-client.org