Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b02168db-a914-4497-b4f3-7926b36419c5/638780be-190d-368a-a450-38cc8cb5db37.roa
File:                     638780be-190d-368a-a450-38cc8cb5db37.roa (raw, json)
Hash identifier:          BFTOLkqDur04ptXCENY3tNATkS48pDeI1USQzCaJLNQ=
Subject key identifier:   60:2C:99:F4:70:48:FE:8D:F0:76:8F:AE:5A:A7:19:B7:5C:DD:50:83
Certificate issuer:       /CN=b02168db-a914-4497-b4f3-7926b36419c5
Certificate serial:       010D0C9F43285842E549E343566E5F2A69A841F0
Authority key identifier: 14:66:D7:0F:A2:22:05:D4:AF:19:00:28:F5:6B:20:56:53:98:87:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b02168db-a914-4497-b4f3-7926b36419c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b02168db-a914-4497-b4f3-7926b36419c5/638780be-190d-368a-a450-38cc8cb5db37.roa
Signing time:             Tue 15 Aug 2023 18:34:15 +0000
ROA not before:           Tue 15 Aug 2023 18:34:15 +0000
ROA not after:            Mon 13 Nov 2023 19:34:15 +0000
asID:                     7896
IP address blocks:        64.39.240.0/20 maxlen: 24
                          216.128.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:e5:49:e3:43:56:6e:5f:2a:69:a8:41:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02168db-a914-4497-b4f3-7926b36419c5
        Validity
            Not Before: Aug 15 18:34:15 2023 GMT
            Not After : Nov 13 19:34:15 2023 GMT
        Subject: CN=2bf840f9-663d-4134-b65e-7de5afc88d33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:43:8a:10:77:2b:80:a2:bf:a8:99:cf:9b:e3:
                    6f:07:83:b6:c0:63:6a:4c:9f:9a:18:fe:37:a0:70:
                    41:81:6b:0d:9f:b1:c4:f5:3e:26:8f:2c:8c:d7:e2:
                    e6:7e:c8:a4:4f:52:21:12:1e:f9:03:c0:39:fd:9b:
                    20:01:cb:79:65:07:29:8b:64:df:81:7d:15:62:aa:
                    9a:f7:f8:c7:f7:de:70:fc:c3:7a:f8:05:07:1e:21:
                    fe:1a:16:0d:37:5c:28:cc:11:fb:1b:f1:5e:70:1d:
                    d5:4e:8a:73:ab:34:64:25:a3:a0:4a:a5:f8:cd:21:
                    49:b1:29:23:d7:ff:d2:7a:4b:78:cb:2f:e6:c5:a4:
                    ad:4f:a4:0e:4c:64:ee:84:1c:1b:5b:f8:6b:18:6e:
                    01:9f:0a:e3:c6:1e:23:a8:58:01:0b:d7:e4:b4:72:
                    63:7d:0c:b4:c9:ab:40:92:1d:ac:11:45:2d:5d:78:
                    0b:5d:13:33:b3:d3:fc:78:41:50:ef:1b:6b:5d:1b:
                    f7:46:e2:95:3b:1a:dd:d2:55:fc:cc:9d:28:43:8c:
                    28:d0:94:f1:a8:35:13:4c:94:d4:36:3e:e1:a1:6e:
                    01:45:83:30:b1:7c:56:73:8e:9d:fa:54:1d:9f:d1:
                    9d:5a:8e:2f:6b:e4:c0:0a:6d:77:4e:ba:88:89:a3:
                    aa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2C:99:F4:70:48:FE:8D:F0:76:8F:AE:5A:A7:19:B7:5C:DD:50:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b02168db-a914-4497-b4f3-7926b36419c5/638780be-190d-368a-a450-38cc8cb5db37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b02168db-a914-4497-b4f3-7926b36419c5/b02168db-a914-4497-b4f3-7926b36419c5.crl

            X509v3 Authority Key Identifier:
                keyid:14:66:D7:0F:A2:22:05:D4:AF:19:00:28:F5:6B:20:56:53:98:87:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b02168db-a914-4497-b4f3-7926b36419c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.240.0/20
                  216.128.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:7d:08:e4:d0:20:a2:9c:04:36:df:38:cc:c8:8a:1e:b4:78:
         cb:3c:81:15:bf:55:88:92:24:c0:e5:77:0c:42:3d:20:60:e6:
         9e:da:08:a5:9b:ec:8f:4d:5a:24:d1:66:30:2a:7b:e2:86:66:
         25:df:17:3a:fb:ab:67:20:9a:66:d4:be:1a:ea:4b:5c:11:86:
         f3:99:93:43:1a:d8:4d:13:33:e7:9e:d4:70:9d:fe:8a:86:ee:
         f5:9a:63:82:72:f6:ce:05:6e:7e:88:45:5f:34:26:7c:c6:75:
         e1:07:ea:b8:97:8f:79:39:5d:4d:07:31:c9:d5:20:8f:48:ff:
         46:a4:be:a4:28:72:60:e7:f1:2a:35:e1:b6:2b:a7:06:14:56:
         5e:80:f1:0c:e3:1c:91:23:c9:3f:02:1e:8e:6b:6e:26:82:51:
         53:d9:4b:77:b0:a2:2e:39:fb:a1:bf:2f:0b:92:a8:d2:e4:12:
         6a:4d:4b:ba:da:9c:d3:98:db:9e:7a:8e:92:bc:47:f0:ec:8c:
         26:46:8e:90:b8:a2:1f:2f:df:71:ea:21:3a:88:b2:31:ba:98:
         50:56:85:35:08:89:01:dc:e8:49:5d:18:0e:31:b3:de:e2:29:
         12:42:dc:a4:f9:6d:d4:a9:9c:c4:4e:45:5a:71:fa:94:26:b4:
         3d:97:1a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:56 2024 by rpki-client on console-ams.rpki-client.org