Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63e9b3a5-0873-46d2-b3db-1fe1d280a18c/3d67b58a-17fa-387f-9543-034f5fd48c00.roa
File:                     3d67b58a-17fa-387f-9543-034f5fd48c00.roa (raw, json)
Hash identifier:          Pw0KdjYRyX8cw3Kzd29Kk+gg64Hg7v7GaAhOPDI0fjY=
Subject key identifier:   6C:AF:E2:78:70:B2:4E:8E:08:AD:AC:A3:CF:72:73:23:58:AD:5D:94
Certificate issuer:       /CN=63e9b3a5-0873-46d2-b3db-1fe1d280a18c
Certificate serial:       010D0C9F43285843E598EC369D25C7AA20580000
Authority key identifier: B9:93:7F:20:21:00:43:B7:2F:FF:77:B0:F3:4D:ED:DB:98:F4:3E:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63e9b3a5-0873-46d2-b3db-1fe1d280a18c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63e9b3a5-0873-46d2-b3db-1fe1d280a18c/3d67b58a-17fa-387f-9543-034f5fd48c00.roa
Signing time:             Wed 15 Nov 2023 14:00:21 +0000
ROA not before:           Wed 15 Nov 2023 14:00:21 +0000
ROA not after:            Tue 13 Feb 2024 14:00:21 +0000
asID:                     8100
IP address blocks:        146.71.77.0/24 maxlen: 24
                          2604:bc0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:e5:98:ec:36:9d:25:c7:aa:20:58:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e9b3a5-0873-46d2-b3db-1fe1d280a18c
        Validity
            Not Before: Nov 15 14:00:21 2023 GMT
            Not After : Feb 13 14:00:21 2024 GMT
        Subject: CN=f5169cf4-05a6-4484-afcb-5fc04ce65d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3e:78:44:56:07:ce:b7:59:4c:5b:71:0b:d1:
                    4b:96:38:e1:21:b8:f6:8f:a1:7e:fe:e3:da:7b:74:
                    30:3a:53:8d:86:c9:94:86:3f:a6:51:11:16:a6:4b:
                    87:63:22:06:75:e2:b0:8b:05:50:5b:38:b6:08:0e:
                    44:1b:61:30:bf:ed:a8:ec:76:a5:3a:52:24:cb:b4:
                    7a:b3:2a:b8:46:6e:d2:15:37:cf:25:8f:ba:f7:7a:
                    5c:9f:9b:c2:9c:3e:fb:3d:42:5b:7b:9d:56:52:ba:
                    75:bd:cb:e3:f1:1a:5f:c5:a4:60:3c:cf:22:c8:04:
                    c4:9b:12:1c:4d:b9:7d:01:f8:ac:f5:06:11:04:7f:
                    14:69:e2:7c:b0:ee:c7:50:f0:ab:30:a1:f6:3e:73:
                    8d:b7:d2:dd:cd:05:dc:95:42:ef:f6:30:f7:87:02:
                    62:17:ab:53:c1:6f:ed:01:2d:a7:cd:7a:73:27:e7:
                    97:16:00:fe:fb:df:bc:99:e2:bc:ff:93:5b:34:94:
                    39:61:4c:13:47:bf:83:91:17:32:c1:e8:aa:71:3e:
                    43:61:26:3c:4f:c3:9e:fa:ac:3c:2e:7e:6c:7f:d7:
                    86:9e:68:9b:a0:e1:91:95:6b:3a:15:44:e4:ac:ab:
                    2f:a9:79:81:2d:d1:51:c8:b2:e8:1c:aa:c2:b7:1a:
                    67:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AF:E2:78:70:B2:4E:8E:08:AD:AC:A3:CF:72:73:23:58:AD:5D:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63e9b3a5-0873-46d2-b3db-1fe1d280a18c/3d67b58a-17fa-387f-9543-034f5fd48c00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63e9b3a5-0873-46d2-b3db-1fe1d280a18c/63e9b3a5-0873-46d2-b3db-1fe1d280a18c.crl

            X509v3 Authority Key Identifier:
                keyid:B9:93:7F:20:21:00:43:B7:2F:FF:77:B0:F3:4D:ED:DB:98:F4:3E:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63e9b3a5-0873-46d2-b3db-1fe1d280a18c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.71.77.0/24
                IPv6:
                  2604:bc0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:1b:65:a0:a0:97:48:0e:11:05:4c:27:f3:2b:0f:7b:52:17:
         82:39:1f:f7:55:5c:7d:cd:a9:5d:7e:85:cf:e8:fc:24:75:83:
         27:76:02:77:51:c4:9d:d9:7c:46:44:6e:9f:1c:d3:7a:15:65:
         38:c9:7c:77:17:fa:05:83:49:aa:de:1d:43:78:f5:69:0b:e9:
         f0:9e:be:09:00:13:30:86:6a:3b:59:a7:ae:a5:cc:1e:8b:3c:
         5d:99:44:53:c5:28:62:9f:a6:96:00:19:7f:46:65:fa:95:6d:
         df:e4:73:90:75:11:79:a0:c2:fa:61:0c:31:d5:b7:1f:6d:bf:
         e5:32:e0:f7:f4:f7:d7:20:92:d5:49:26:19:32:40:b0:03:6a:
         14:7d:8f:a1:63:69:d6:82:d5:d3:c2:ef:6f:46:ef:20:cf:a4:
         94:29:44:3a:3c:b0:c9:b8:6b:cf:1b:6f:a3:d5:18:8b:35:99:
         be:3c:3e:bd:08:72:1e:44:a3:0b:84:4b:3d:3e:69:68:ca:3c:
         29:b2:c1:82:84:e3:8c:db:b6:48:f4:57:cf:84:63:3f:25:29:
         fb:bf:9a:3c:47:44:02:f6:24:c0:67:3a:88:e4:90:47:81:c9:
         a5:04:04:0c:aa:03:35:0b:db:14:53:52:5b:e0:34:0c:ad:48:
         28:d2:2a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:19 2024 by rpki-client on console-fra.rpki-client.org