Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/26b3fb21-f46f-4cff-9543-f81785755004/ca76fb7f-ef0e-3738-88bd-2ffb6e7e1ab4.roa
File:                     ca76fb7f-ef0e-3738-88bd-2ffb6e7e1ab4.roa (raw, json)
Hash identifier:          VN9zF6bGy9BgcDU8OpVuTdhT5R4Jxz/ifQZp3QSYQT0=
Subject key identifier:   B9:4D:01:9B:0F:C7:3B:51:9C:97:C2:09:F5:1C:84:27:C2:CD:0D:69
Certificate issuer:       /CN=26b3fb21-f46f-4cff-9543-f81785755004
Certificate serial:       010D0C9F432858387529D9FF9ECF231C6C0E9B00
Authority key identifier: DF:EA:AA:11:88:C0:2D:00:11:B5:31:27:C4:DB:9C:46:3C:82:38:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/26b3fb21-f46f-4cff-9543-f81785755004.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/26b3fb21-f46f-4cff-9543-f81785755004/ca76fb7f-ef0e-3738-88bd-2ffb6e7e1ab4.roa
Signing time:             Wed 30 Dec 2020 05:00:00 +0000
ROA not before:           Wed 30 Dec 2020 05:00:00 +0000
ROA not after:            Wed 05 Apr 2023 04:00:00 +0000
asID:                     397797
IP address blocks:        205.137.240.0/22 maxlen: 24
                          2605:6640::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:75:29:d9:ff:9e:cf:23:1c:6c:0e:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26b3fb21-f46f-4cff-9543-f81785755004
        Validity
            Not Before: Dec 30 05:00:00 2020 GMT
            Not After : Apr  5 04:00:00 2023 GMT
        Subject: CN=2c1913fd-5b3d-4997-b4be-6c7a63527474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9a:bd:cf:07:1f:9b:24:1c:f6:99:06:96:1a:
                    bc:d5:0e:6f:c2:69:64:da:20:88:85:a3:a4:cc:1f:
                    9f:57:b6:49:17:9f:98:16:91:d7:a2:aa:12:36:73:
                    da:b2:29:f0:1e:68:24:52:35:53:f7:73:9b:79:cf:
                    89:11:e9:ad:d9:85:f9:f5:82:2b:31:e0:ba:24:d9:
                    e2:65:df:21:35:93:44:58:08:84:17:da:a7:75:f6:
                    85:ef:6a:8c:67:2d:64:3f:e4:81:6b:8c:ee:6c:cf:
                    04:40:bc:ca:3d:b3:72:12:8e:fc:4c:ae:0f:e7:18:
                    e2:c7:0b:24:43:7b:f0:89:da:9d:4c:87:1f:86:89:
                    58:74:cc:55:1b:41:02:55:8e:30:ba:8e:40:97:7b:
                    46:32:8c:89:41:a4:01:1f:6a:96:9c:bc:b6:7e:8a:
                    2e:45:65:87:ff:9a:1a:92:55:bd:93:51:55:99:c2:
                    43:49:5a:af:0d:23:c0:ca:3f:40:3b:4f:01:ed:5d:
                    c4:c3:f0:75:13:54:5b:5d:c4:63:65:b1:29:73:e0:
                    20:a6:5e:bd:d5:6a:0e:ad:70:f4:44:cd:4a:0e:ab:
                    10:54:53:b4:90:03:58:91:46:8c:ca:ba:9b:ac:7b:
                    13:8b:60:9e:1a:c9:fc:01:f0:b7:fe:60:ba:8a:81:
                    c3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4D:01:9B:0F:C7:3B:51:9C:97:C2:09:F5:1C:84:27:C2:CD:0D:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/26b3fb21-f46f-4cff-9543-f81785755004/ca76fb7f-ef0e-3738-88bd-2ffb6e7e1ab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/26b3fb21-f46f-4cff-9543-f81785755004/26b3fb21-f46f-4cff-9543-f81785755004.crl

            X509v3 Authority Key Identifier:
                keyid:DF:EA:AA:11:88:C0:2D:00:11:B5:31:27:C4:DB:9C:46:3C:82:38:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/26b3fb21-f46f-4cff-9543-f81785755004.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.137.240.0/22
                IPv6:
                  2605:6640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:f4:5e:0c:99:94:c9:41:a2:2f:87:d6:f4:ec:f6:bc:e0:80:
         51:81:68:33:c1:44:0c:f9:63:b1:46:91:89:fd:1b:89:88:4f:
         d0:21:84:02:0f:45:cc:be:23:6c:3f:47:b2:e0:60:a2:7c:68:
         c1:3e:a4:8a:ce:95:30:4f:d7:c5:c3:20:2a:3d:05:12:ee:bf:
         0d:d9:7d:19:16:ec:6c:98:f4:67:ff:7c:29:1e:a5:a0:d6:ed:
         9b:32:c6:2b:06:3c:17:db:64:6d:83:35:5b:4e:9d:e1:88:35:
         41:e5:53:11:f3:8a:38:41:f1:88:65:ca:ba:68:6c:68:3d:89:
         4f:11:43:4f:61:85:93:38:c7:c4:7d:d7:d0:8a:af:a6:eb:37:
         54:80:a8:1b:c5:37:cc:c6:a2:84:96:81:d8:53:92:fa:69:a2:
         24:1e:64:60:32:f6:d4:ab:3d:10:bb:92:e2:b4:d7:69:5d:a5:
         a5:5a:8d:5f:ce:4e:da:9b:e6:c9:3f:01:17:43:1a:20:23:1f:
         72:62:3b:32:d9:b4:d0:f9:bd:48:58:0a:ff:96:c2:e6:35:4a:
         7b:6f:66:fd:37:84:08:7d:10:2b:4f:19:63:79:cb:ae:59:6e:
         99:0c:4e:07:47:38:92:06:16:84:51:55:52:9f:4d:a0:2f:0f:
         24:c8:30:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:59 2023 by rpki-client on console-fra.rpki-client.org