Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/03e1d207-98ac-327f-8fca-52b3ff320ed9.roa
File:                     03e1d207-98ac-327f-8fca-52b3ff320ed9.roa (raw, json)
Hash identifier:          yHND5sxhh1nBe3u/IJba7s4/nwaIj61uBpSXocqNPig=
Subject key identifier:   8B:4F:7D:14:5F:02:92:25:60:15:EF:60:EA:AB:04:33:DE:B5:E2:A0
Certificate issuer:       /CN=e02382c7-abd5-4293-a7a2-334013e1284b
Certificate serial:       010D0C9F432858442303F283D0ACA19657DC2E80
Authority key identifier: 95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/03e1d207-98ac-327f-8fca-52b3ff320ed9.roa
Signing time:             Thu 07 Dec 2023 14:00:20 +0000
ROA not before:           Thu 07 Dec 2023 14:00:20 +0000
ROA not after:            Wed 06 Mar 2024 14:00:20 +0000
asID:                     36352
IP address blocks:        206.217.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:23:03:f2:83:d0:ac:a1:96:57:dc:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02382c7-abd5-4293-a7a2-334013e1284b
        Validity
            Not Before: Dec  7 14:00:20 2023 GMT
            Not After : Mar  6 14:00:20 2024 GMT
        Subject: CN=4e256574-e344-4502-ad23-c011605f303b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:53:9c:3f:70:00:5b:b8:cf:31:59:93:8f:9e:
                    38:a5:26:d4:31:c1:62:2d:a4:55:0c:5c:95:b3:d8:
                    03:ec:2f:b5:23:19:f5:f7:18:bc:62:81:b3:4d:46:
                    0d:e6:01:89:25:8c:34:f9:de:74:a7:c9:26:bf:0f:
                    85:aa:5d:26:74:7d:eb:ed:9a:24:60:fb:2a:19:af:
                    c6:39:92:d1:71:c7:31:79:02:6c:ba:b9:4f:50:00:
                    c2:9c:df:20:be:fc:a0:76:f0:fe:6e:4d:ea:5f:d2:
                    d5:d7:f6:f7:44:d4:bf:a1:8a:f6:33:00:ed:76:e6:
                    75:7e:9b:09:7a:a4:79:96:5f:cc:72:6b:ab:fc:ef:
                    83:c1:4c:6a:cd:3c:39:d0:1b:5e:b2:04:87:d3:b3:
                    e2:72:67:bc:2a:2a:52:68:92:b9:22:a6:00:2e:3a:
                    1d:96:35:e2:f4:58:45:51:1d:1b:71:f3:d4:32:3d:
                    63:c1:6f:b6:ee:c5:dd:7d:21:11:4d:7c:d3:89:60:
                    49:ea:d6:be:92:1f:0c:9a:e9:77:e1:72:39:3c:30:
                    a1:f2:ee:fc:86:d3:01:12:0c:80:52:35:92:66:b1:
                    3a:67:f8:35:be:37:59:61:59:75:a8:93:df:6f:1f:
                    17:a7:f3:3a:e9:b5:43:01:6f:de:4b:aa:f1:2e:ec:
                    95:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4F:7D:14:5F:02:92:25:60:15:EF:60:EA:AB:04:33:DE:B5:E2:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/03e1d207-98ac-327f-8fca-52b3ff320ed9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/e02382c7-abd5-4293-a7a2-334013e1284b.crl

            X509v3 Authority Key Identifier:
                keyid:95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.217.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:b5:38:2f:21:49:56:8f:32:13:55:56:1d:1f:8e:a9:3b:d8:
         cd:30:d0:f7:af:c8:6e:c4:ef:80:14:24:ed:3a:d9:4c:34:84:
         42:ef:80:71:50:9e:62:97:8d:4d:24:08:83:de:b1:d4:3b:44:
         ab:48:3e:f3:f0:0e:71:22:26:60:09:3b:b1:4e:c2:c3:d8:77:
         ff:47:57:88:3c:76:c7:c3:ec:d5:9d:e2:83:7c:de:67:da:97:
         db:56:e2:62:53:5d:d9:9b:db:32:3d:7b:9b:d2:a1:a8:e3:eb:
         6d:c9:ef:70:08:0e:02:2b:40:b3:da:14:34:72:8a:95:10:57:
         4a:00:a1:4a:05:22:41:f5:25:fc:07:9c:50:20:da:cb:65:f1:
         3a:44:d2:51:71:2d:51:80:7f:77:c4:f5:b9:78:4d:ea:94:11:
         5b:1f:4c:7c:ef:23:6c:4b:7c:8c:fa:c4:7f:7b:b3:eb:a0:45:
         90:2d:fb:3c:44:83:d8:85:83:df:54:14:15:16:59:c7:da:0f:
         c9:ca:b4:83:de:fc:c6:5b:71:7d:29:61:48:96:0a:e4:cd:cf:
         bd:2c:db:a1:9e:51:65:7c:cb:32:da:26:47:06:dd:58:1f:7c:
         07:43:61:27:cb:be:73:7f:a1:d7:96:d1:1a:7b:7d:25:0f:85:
         2e:f8:49:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 4 18:44:05 2024 by rpki-client on console-fra.rpki-client.org