Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d6b0f5a-dbc0-4257-aaed-bcc7c18abcdd/6248ad03-f138-3f2b-aa13-458d5bf75f4d.roa
File:                     6248ad03-f138-3f2b-aa13-458d5bf75f4d.roa (raw, json)
Hash identifier:          oMEMoJGggjaPD37w9rxFbTKFjAUqbPxgxEFxFlqcGTw=
Subject key identifier:   CE:23:91:FE:14:96:DD:8E:63:18:13:7E:07:13:DA:E8:00:B4:C0:65
Certificate issuer:       /CN=9d6b0f5a-dbc0-4257-aaed-bcc7c18abcdd
Certificate serial:       010D0C9F43285838FC43E7F885004D1B7204B440
Authority key identifier: 5D:E2:D3:CA:B8:8B:12:F2:A3:C4:A4:A1:89:F8:93:34:04:7A:8E:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d6b0f5a-dbc0-4257-aaed-bcc7c18abcdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d6b0f5a-dbc0-4257-aaed-bcc7c18abcdd/6248ad03-f138-3f2b-aa13-458d5bf75f4d.roa
Signing time:             Wed 02 Dec 2020 05:00:00 +0000
ROA not before:           Wed 02 Dec 2020 05:00:00 +0000
ROA not after:            Tue 23 May 2023 04:00:00 +0000
asID:                     1239
IP address blocks:        45.42.40.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:fc:43:e7:f8:85:00:4d:1b:72:04:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d6b0f5a-dbc0-4257-aaed-bcc7c18abcdd
        Validity
            Not Before: Dec  2 05:00:00 2020 GMT
            Not After : May 23 04:00:00 2023 GMT
        Subject: CN=4d1752e2-9ac8-43d9-85ff-60ee603d92e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8b:8c:b4:58:23:02:43:cd:fe:40:33:ed:f3:
                    73:d3:9c:64:af:3e:b6:46:cd:3e:fb:56:6c:75:d6:
                    12:4b:26:b7:2e:90:9d:eb:30:59:16:a0:d9:34:24:
                    63:53:eb:5a:f8:03:d8:dc:ed:51:6b:89:fe:1a:26:
                    ea:0b:d4:be:16:17:a1:7f:b7:5b:e1:82:54:f8:7d:
                    b5:d9:24:b0:2d:03:df:05:0b:ad:ae:b3:56:25:fc:
                    8c:52:23:8b:7f:30:e5:c2:9f:bf:1c:31:93:0f:6f:
                    cf:c3:69:b8:61:e2:42:c1:b5:3e:99:54:c5:d9:e3:
                    de:a4:6a:80:73:5c:03:2c:8c:b0:45:e8:c4:ec:cb:
                    44:f6:56:33:89:9b:56:7c:4d:cf:8a:05:8c:2e:3c:
                    12:c6:06:56:ea:55:62:83:da:c7:05:04:30:fa:ae:
                    9a:ab:15:bc:14:a4:6e:2e:b2:0e:c5:74:2f:45:55:
                    5b:86:5d:94:14:39:dd:2d:0e:4e:fc:67:ed:51:ae:
                    6b:47:d6:21:11:4f:9b:bd:0f:3f:a5:e4:20:23:89:
                    fa:24:7f:0c:66:5c:c6:a2:88:85:15:d9:e7:a9:6c:
                    1f:d8:5d:e6:3a:b4:bf:6e:cd:34:23:73:8c:7d:81:
                    18:ca:54:3a:3a:58:52:c8:fc:f2:6e:a0:82:37:fa:
                    c7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:23:91:FE:14:96:DD:8E:63:18:13:7E:07:13:DA:E8:00:B4:C0:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d6b0f5a-dbc0-4257-aaed-bcc7c18abcdd/6248ad03-f138-3f2b-aa13-458d5bf75f4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d6b0f5a-dbc0-4257-aaed-bcc7c18abcdd/9d6b0f5a-dbc0-4257-aaed-bcc7c18abcdd.crl

            X509v3 Authority Key Identifier:
                keyid:5D:E2:D3:CA:B8:8B:12:F2:A3:C4:A4:A1:89:F8:93:34:04:7A:8E:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9d6b0f5a-dbc0-4257-aaed-bcc7c18abcdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:ca:a7:93:13:1a:32:ed:7c:77:a4:a5:63:be:6b:f5:f8:d0:
         0d:69:ea:2e:43:dd:ab:27:e2:5c:8d:d7:8b:49:f6:7e:b1:c5:
         b9:8a:c9:df:8e:b4:b4:8d:4d:38:e4:0d:83:9f:15:ab:5e:03:
         ea:2c:6d:ea:cb:2e:da:88:2b:a8:a1:d1:d6:23:cb:28:58:d0:
         38:66:1c:9a:61:11:fe:60:a6:42:52:0b:47:8e:6c:22:03:c7:
         74:79:8f:e0:ee:ab:b4:76:1c:b8:9f:c6:9b:61:19:94:28:f1:
         e4:4a:2f:5c:5f:5f:61:94:c9:e3:03:bc:04:6f:97:18:47:bc:
         17:5c:c0:e9:79:4f:5d:0e:fb:3f:7d:f1:69:f3:27:3c:2b:e3:
         3d:55:71:35:f2:f6:61:7f:cf:d1:98:21:2b:e4:a6:1a:29:eb:
         ca:79:99:fb:64:76:65:dc:ef:9f:35:ff:3a:f6:9c:93:ca:c4:
         45:aa:e9:76:20:33:c2:fa:98:e7:4a:3d:75:50:e4:fe:b4:50:
         38:05:04:68:cb:fb:bc:4f:56:1c:e9:90:44:bd:41:2e:88:bf:
         42:1b:17:6a:82:b8:36:82:37:b8:70:bb:79:49:66:38:98:14:
         a4:e2:8d:d1:d5:f7:a8:ab:02:cc:ec:44:c0:74:d9:4b:49:c1:
         59:04:81:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:19 2023 by rpki-client on console-fra.rpki-client.org