Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/1ef0334e-5cd9-3dfa-b3a9-97aaa0955a50.roa
File:                     1ef0334e-5cd9-3dfa-b3a9-97aaa0955a50.roa (raw, json)
Hash identifier:          ChoUHmAv0TomiIpUOFyedxIpXGQMZBIi9qPENCvxdWY=
Subject key identifier:   46:D5:1E:C4:9D:C5:80:53:02:87:54:56:F4:75:8A:47:26:E5:C8:33
Certificate issuer:       /CN=a2ff7ccf-c138-4e25-b3bb-dc206512af3a
Certificate serial:       010D0C9F43285844289954C5807E3A1686926480
Authority key identifier: DC:0F:FB:CA:DD:AE:2F:35:60:29:BF:BC:FD:B6:6F:2D:03:9F:E4:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/1ef0334e-5cd9-3dfa-b3a9-97aaa0955a50.roa
Signing time:             Sat 09 Dec 2023 14:00:21 +0000
ROA not before:           Sat 09 Dec 2023 14:00:21 +0000
ROA not after:            Fri 08 Mar 2024 14:00:21 +0000
asID:                     396982
IP address blocks:        144.49.240.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:28:99:54:c5:80:7e:3a:16:86:92:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2ff7ccf-c138-4e25-b3bb-dc206512af3a
        Validity
            Not Before: Dec  9 14:00:21 2023 GMT
            Not After : Mar  8 14:00:21 2024 GMT
        Subject: CN=5a89fc29-5ce0-410f-8c1f-894b64d1eb95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:83:83:7c:11:5a:7a:88:4c:ed:ed:7a:9d:d0:
                    b0:37:c5:d8:26:fd:00:c3:b5:ae:e9:73:b0:62:0a:
                    b2:b3:65:7d:c5:cb:06:3d:ed:9b:64:77:a6:aa:dd:
                    14:8f:4d:61:f8:17:30:d9:a7:7f:97:5b:c2:88:9b:
                    91:db:c3:46:71:77:79:ae:f1:86:be:38:f8:ca:bd:
                    3c:23:66:b9:3b:8c:c4:45:15:1e:22:87:05:c8:b6:
                    14:b7:60:50:45:ff:25:87:36:5a:29:bc:cc:a6:c4:
                    e7:6a:7a:9f:30:a6:88:d3:96:88:6b:e4:be:d3:22:
                    98:15:46:87:f3:61:9d:e2:da:d7:86:27:b4:c1:a7:
                    d3:64:37:6a:9d:91:9f:d6:8d:af:14:36:cd:8d:8d:
                    69:b6:78:9f:f9:58:ac:ca:c8:8b:27:8b:dd:50:8c:
                    a5:c9:51:fb:80:8d:dd:03:9d:76:52:36:d2:36:48:
                    49:02:eb:d5:9f:9e:45:11:29:2e:f6:b3:e8:88:72:
                    e9:2c:7a:35:d6:9d:0e:6b:77:1a:5b:63:53:0e:45:
                    24:86:c5:d7:db:ce:81:00:be:d4:0d:24:03:86:fb:
                    86:1a:b4:32:d1:0e:26:e7:28:68:4c:81:ca:09:d4:
                    9f:bb:96:49:35:72:e9:02:a1:7f:7e:c9:f4:81:e5:
                    8a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D5:1E:C4:9D:C5:80:53:02:87:54:56:F4:75:8A:47:26:E5:C8:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/1ef0334e-5cd9-3dfa-b3a9-97aaa0955a50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.crl

            X509v3 Authority Key Identifier:
                keyid:DC:0F:FB:CA:DD:AE:2F:35:60:29:BF:BC:FD:B6:6F:2D:03:9F:E4:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.49.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:0e:ca:19:18:46:f6:23:bd:47:4c:77:3f:6b:4b:a6:65:28:
         40:7f:47:94:f9:87:dd:fb:f5:cf:5b:38:ea:2a:62:cb:b0:95:
         23:6f:b4:b3:50:2a:e8:7a:7d:76:7d:d4:7d:03:67:5f:7b:aa:
         67:3c:bf:24:b9:f5:c3:0f:01:4f:0b:b5:f4:6b:7c:71:3b:62:
         10:ec:1d:89:a5:b4:54:c5:f7:bb:ca:e5:ba:2e:a7:2c:3f:cf:
         ad:01:fa:c1:5f:12:50:d3:7c:7a:58:ea:3a:2a:3c:21:93:c7:
         39:2b:95:73:43:81:ae:5f:f3:db:3d:04:47:22:6a:48:14:05:
         17:96:5f:50:17:58:2c:cc:da:00:46:9d:8a:2b:5e:dd:0f:1d:
         d0:84:a7:d2:20:ce:9a:92:b5:be:4e:4e:ac:2f:11:3c:3d:92:
         7e:29:99:1f:cf:b1:73:45:b7:cb:e3:32:af:c9:a4:90:62:62:
         cd:29:23:98:77:9d:1e:05:33:af:8a:4c:0d:4a:12:39:0d:68:
         65:23:19:97:a5:51:96:41:3b:23:be:fb:85:16:8c:7b:cf:6d:
         8c:3c:e1:30:6d:63:d1:d1:74:4a:2e:7b:b9:7a:90:fe:e3:94:
         9a:77:ba:32:66:52:79:25:32:47:34:f1:c1:cd:61:9f:3e:05:
         66:5e:7b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 20:17:00 2024 by rpki-client on console-fra.rpki-client.org