Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/502e4cac-cdc1-3af7-b471-6bdde8de6860.roa
File:                     502e4cac-cdc1-3af7-b471-6bdde8de6860.roa (raw, json)
Hash identifier:          SGuRkBtVOH7k8vRDsRhp1I3L3nK9LwRys2AC2SkaUvA=
Subject key identifier:   B1:BC:37:F8:01:4E:D7:82:36:11:0F:F6:B2:BA:80:15:26:0F:2E:CC
Certificate issuer:       /CN=a4994aff-79e3-4800-875a-f4a951d7af28
Certificate serial:       010D0C9F43285843BFC8BFD4E7A33BA6D35D7640
Authority key identifier: 4A:41:44:C2:37:55:32:9B:82:E2:88:2B:51:8A:93:7E:E6:74:AF:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/502e4cac-cdc1-3af7-b471-6bdde8de6860.roa
Signing time:             Thu 02 Nov 2023 00:56:05 +0000
ROA not before:           Thu 02 Nov 2023 00:56:05 +0000
ROA not after:            Wed 31 Jan 2024 01:56:05 +0000
asID:                     834
IP address blocks:        199.68.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:bf:c8:bf:d4:e7:a3:3b:a6:d3:5d:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4994aff-79e3-4800-875a-f4a951d7af28
        Validity
            Not Before: Nov  2 00:56:05 2023 GMT
            Not After : Jan 31 01:56:05 2024 GMT
        Subject: CN=9dd204e5-4fc6-4533-a73e-51e64d0edd50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:74:c1:e0:66:e5:e2:83:4a:ae:5d:e2:89:ef:
                    39:26:04:c4:6c:95:54:0f:13:de:dc:fc:c3:5a:a5:
                    4b:69:4c:18:fc:0a:05:ab:4a:80:f7:5d:75:99:c6:
                    51:e5:d4:a0:e0:cc:75:86:e7:9e:41:2f:0f:1f:b4:
                    a6:ff:9a:e4:c5:3b:24:3c:8c:f2:d3:80:19:94:0d:
                    bb:75:08:b8:53:39:41:fa:e2:82:74:34:eb:2b:f9:
                    95:7c:f5:10:91:a2:0d:16:51:74:6c:38:f9:8d:da:
                    06:e2:6f:4e:23:1e:5d:29:0d:61:19:76:3d:94:3b:
                    17:f4:2e:bc:b3:9e:30:10:d5:99:04:91:97:df:4c:
                    8d:19:cd:df:2f:a4:a9:ef:91:9e:fd:94:9b:25:22:
                    88:67:57:34:2d:57:ff:26:9e:dd:05:82:25:3a:d0:
                    57:d3:45:9c:d5:fc:91:34:6a:7d:5a:f2:22:f4:d1:
                    ab:70:77:7e:e4:f1:85:7b:e1:6e:62:f8:42:e5:7a:
                    e5:77:eb:15:33:80:58:6f:0f:c4:97:0d:c8:4b:85:
                    69:1c:8f:01:58:51:a9:75:87:f3:e8:ef:d4:08:16:
                    e6:01:c3:ce:22:e6:37:e0:7f:45:52:ba:2b:95:2e:
                    68:ae:ac:3f:b7:b0:e5:ee:49:b5:b8:da:a2:c3:2d:
                    65:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BC:37:F8:01:4E:D7:82:36:11:0F:F6:B2:BA:80:15:26:0F:2E:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/502e4cac-cdc1-3af7-b471-6bdde8de6860.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/a4994aff-79e3-4800-875a-f4a951d7af28.crl

            X509v3 Authority Key Identifier:
                keyid:4A:41:44:C2:37:55:32:9B:82:E2:88:2B:51:8A:93:7E:E6:74:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:82:f4:3d:47:ea:89:a0:45:dd:29:e9:ae:1d:81:4e:7c:48:
         0d:cd:90:ec:fa:b4:a3:b8:d0:bd:08:a3:c4:d7:c7:5d:4c:8e:
         07:b4:56:6d:17:7b:52:81:35:02:3b:82:25:9b:e0:53:8a:d1:
         07:bf:54:e9:bb:a5:f9:c0:0a:00:e7:4c:a5:bb:49:de:4a:76:
         d2:3a:5d:5c:31:a7:9a:a5:45:9e:8e:3d:8b:b5:1a:61:dc:03:
         8d:79:97:ab:23:f4:c9:31:4f:3c:20:5b:e0:d0:f1:51:18:c0:
         b0:bc:0c:e0:3e:af:2d:53:41:3e:91:4c:76:73:3a:63:65:7c:
         ce:d6:fe:b0:cf:5f:2a:af:32:48:75:0c:c3:0e:f6:5f:a6:21:
         93:9b:3d:39:41:fe:96:85:6e:d9:07:f3:12:da:2c:61:b1:2a:
         25:38:28:1d:5d:32:1c:49:ef:fc:9b:27:cc:30:55:a9:9c:15:
         2c:9a:56:82:b1:45:9a:4a:7d:c1:ab:1f:66:d1:0a:88:1c:8d:
         55:7b:4b:62:a3:4b:74:02:cd:22:56:4c:00:0b:1f:46:ea:b6:
         3b:70:d6:90:6d:c2:82:30:3e:10:fe:3c:f6:6d:f4:15:2b:38:
         d6:a5:58:f0:0e:1e:4e:f8:a0:1d:54:0f:82:9a:07:1e:2d:f0:
         25:5a:5e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:13:58 2024 by rpki-client on console-fra.rpki-client.org