Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ea946fd-0372-44d8-b799-58c9dc190b3e/16d86949-272c-38ad-82a4-cd984e3893f3.roa
File:                     16d86949-272c-38ad-82a4-cd984e3893f3.roa (raw, json)
Hash identifier:          /AW037oc+KfWnyuZHn/rJlbeaI8aGF/fs7crLNr4ucg=
Subject key identifier:   F0:93:6B:B4:EF:D4:5D:41:EC:E4:2C:C6:E2:12:07:C2:E4:03:F5:69
Certificate issuer:       /CN=3ea946fd-0372-44d8-b799-58c9dc190b3e
Certificate serial:       010D0C9F43285837D3DF950F94D2BF5B8E31A3D8
Authority key identifier: 87:E2:7B:B9:1E:A5:91:D9:F8:46:56:75:8F:7A:14:20:D8:4D:5B:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ea946fd-0372-44d8-b799-58c9dc190b3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ea946fd-0372-44d8-b799-58c9dc190b3e/16d86949-272c-38ad-82a4-cd984e3893f3.roa
Signing time:             Thu 08 Oct 2020 04:00:00 +0000
ROA not before:           Thu 08 Oct 2020 04:00:00 +0000
ROA not after:            Mon 06 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        192.206.146.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d3:df:95:0f:94:d2:bf:5b:8e:31:a3:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ea946fd-0372-44d8-b799-58c9dc190b3e
        Validity
            Not Before: Oct  8 04:00:00 2020 GMT
            Not After : Feb  6 05:00:00 2023 GMT
        Subject: CN=d5ea3bc5-f7c8-4c2e-a9f9-2d845c0cba4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:93:09:90:dd:19:27:1f:00:fa:59:7c:28:3e:
                    27:1a:56:3c:2c:56:3e:d2:4e:b1:ec:40:01:12:c0:
                    f1:46:8e:e1:07:41:ea:74:af:bf:de:2f:cf:4b:39:
                    e6:8c:00:31:92:7f:ad:23:01:6c:5b:f1:e1:c1:6e:
                    17:05:97:bb:26:df:40:87:58:1d:ab:8e:78:de:ec:
                    bd:78:82:41:4e:78:11:5c:98:d9:41:bc:02:b9:2d:
                    3d:5c:2d:d8:21:97:e2:85:16:68:04:f1:02:5b:b4:
                    c3:c8:f9:83:fe:26:9a:de:5c:85:5d:6d:c4:d8:f4:
                    a9:19:97:eb:ff:af:c2:a3:1a:aa:11:5e:c2:b3:b4:
                    8e:6b:cc:43:20:64:6d:95:3c:ba:de:13:ea:6c:83:
                    59:66:ad:56:de:b5:60:cc:ae:a1:8d:a5:fe:02:cc:
                    bd:a6:f6:65:0b:9a:80:1b:d0:12:53:b8:a8:37:da:
                    0f:84:29:e1:84:c5:f7:04:9f:37:a2:98:1a:97:db:
                    d5:ee:0d:cf:29:49:4d:51:c1:72:72:19:c6:63:57:
                    be:ca:6d:60:9e:06:11:c8:a1:cb:87:70:03:87:e0:
                    2a:63:a9:39:b4:9e:7a:2e:c9:3b:41:f8:95:61:d0:
                    73:5d:6f:aa:01:bc:99:3f:22:5c:f7:13:48:a5:6d:
                    2e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:93:6B:B4:EF:D4:5D:41:EC:E4:2C:C6:E2:12:07:C2:E4:03:F5:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ea946fd-0372-44d8-b799-58c9dc190b3e/16d86949-272c-38ad-82a4-cd984e3893f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ea946fd-0372-44d8-b799-58c9dc190b3e/3ea946fd-0372-44d8-b799-58c9dc190b3e.crl

            X509v3 Authority Key Identifier:
                keyid:87:E2:7B:B9:1E:A5:91:D9:F8:46:56:75:8F:7A:14:20:D8:4D:5B:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ea946fd-0372-44d8-b799-58c9dc190b3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:10:13:71:e3:39:1f:9d:9c:55:ab:15:99:96:26:23:c1:e2:
         d8:72:d1:53:b3:a5:44:27:7e:70:b7:c3:92:05:77:f3:f4:6e:
         41:4b:2e:ac:dd:b2:09:3d:dd:9c:2d:32:13:6c:86:86:45:a4:
         7a:e2:af:8b:14:08:9d:7e:c6:55:19:f6:e8:c2:c3:79:47:92:
         78:4a:b7:a4:ea:3e:3a:8d:88:c1:f7:5a:d3:74:4b:08:57:75:
         dd:ce:ea:4d:e4:b5:78:08:c1:41:fd:d2:ef:1d:7c:0e:f8:db:
         48:2f:4f:6e:54:d0:f8:99:a1:f3:2c:c5:0c:a6:72:11:e2:35:
         7f:c6:60:1e:c4:78:5e:fb:c2:d3:97:f3:5e:ea:be:8c:af:f7:
         43:1c:9a:d7:9e:cd:13:c5:44:fc:88:36:87:6e:77:78:d6:86:
         6f:fd:5e:1e:e5:a5:74:bd:65:69:ce:cb:0d:03:1e:79:9d:12:
         bf:ad:5d:cc:46:10:2d:ca:9e:40:ae:3b:e8:a6:1a:ac:0b:4a:
         46:15:3d:4b:b1:2f:3c:07:bc:99:49:af:02:89:1f:d3:74:b9:
         6b:e2:b5:89:7e:68:44:41:a1:fd:2e:f1:8e:73:66:82:e6:17:
         1c:fa:c4:02:3a:72:c8:92:91:49:1f:f0:24:3d:5f:14:9a:3f:
         72:8d:dd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:00 2023 by rpki-client on console-fra.rpki-client.org