Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6533ffb7-119e-44e8-bcb9-54961e2eb1b8/fc1a3254-6664-3325-b0d4-2f2fdf57cfac.roa
File:                     fc1a3254-6664-3325-b0d4-2f2fdf57cfac.roa (raw, json)
Hash identifier:          FKAeL9IO+fRRXv0/pSSrQ1dYSftQdtgs/5fr6IadYG0=
Subject key identifier:   A6:51:F9:7D:E9:C6:2D:3A:E9:87:3D:0F:01:1B:26:8B:F1:0A:12:2B
Certificate issuer:       /CN=6533ffb7-119e-44e8-bcb9-54961e2eb1b8
Certificate serial:       010D0C9F43285840D8AF17A9936DFD5154711980
Authority key identifier: C6:21:7A:89:F1:30:14:43:15:1C:31:C1:49:CD:05:5F:F6:38:A3:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6533ffb7-119e-44e8-bcb9-54961e2eb1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6533ffb7-119e-44e8-bcb9-54961e2eb1b8/fc1a3254-6664-3325-b0d4-2f2fdf57cfac.roa
Signing time:             Mon 06 Feb 2023 12:00:00 +0000
ROA not before:           Mon 06 Feb 2023 12:00:00 +0000
ROA not after:            Wed 04 Jun 2031 04:00:00 +0000
asID:                     13984
IP address blocks:        206.124.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:d8:af:17:a9:93:6d:fd:51:54:71:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6533ffb7-119e-44e8-bcb9-54961e2eb1b8
        Validity
            Not Before: Feb  6 12:00:00 2023 GMT
            Not After : Jun  4 04:00:00 2031 GMT
        Subject: CN=53f5011f-7659-4e68-83b6-541fb3a78567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fc:5b:93:6b:40:29:0a:ad:a2:00:43:0f:db:
                    44:18:7f:ca:c5:97:34:43:ec:0f:3f:65:96:1c:47:
                    2e:6b:3c:b5:cc:55:a8:7c:3c:a3:0c:59:ef:e8:6a:
                    d9:75:79:c0:3b:1c:6b:bb:2d:40:41:ce:ef:f6:0c:
                    e3:0d:df:8f:35:31:82:d5:da:c6:39:c9:a0:50:ad:
                    36:a2:20:5d:cb:33:fc:a6:45:c5:2d:ad:79:93:c7:
                    3d:9f:68:d7:7d:e8:53:16:af:01:03:bc:e7:bb:0a:
                    c2:9d:47:ea:7b:eb:7e:91:fb:8e:71:96:3b:f0:e6:
                    60:90:1c:c4:bf:68:4c:2f:25:a6:9c:68:22:5d:4f:
                    74:d3:24:86:1e:dc:10:86:c3:0b:e3:81:ee:6c:f9:
                    f6:26:ac:fc:aa:5c:0f:ef:6c:17:6b:f5:34:ad:ad:
                    05:67:33:68:e0:38:14:cb:89:f7:08:ca:d7:9f:57:
                    ca:ae:c0:f2:5b:93:b8:a6:2c:d8:90:00:1d:79:f1:
                    ae:91:99:f0:5e:e5:8e:a8:76:01:be:a1:7e:85:2f:
                    64:5a:d8:7f:72:25:9c:32:db:3a:cd:71:d7:e4:2c:
                    40:84:2f:7f:ed:3a:f3:ca:a3:7d:db:01:07:91:ef:
                    a6:56:71:2e:59:03:ec:27:eb:58:00:6f:3b:be:fc:
                    92:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:51:F9:7D:E9:C6:2D:3A:E9:87:3D:0F:01:1B:26:8B:F1:0A:12:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6533ffb7-119e-44e8-bcb9-54961e2eb1b8/fc1a3254-6664-3325-b0d4-2f2fdf57cfac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6533ffb7-119e-44e8-bcb9-54961e2eb1b8/6533ffb7-119e-44e8-bcb9-54961e2eb1b8.crl

            X509v3 Authority Key Identifier:
                keyid:C6:21:7A:89:F1:30:14:43:15:1C:31:C1:49:CD:05:5F:F6:38:A3:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6533ffb7-119e-44e8-bcb9-54961e2eb1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.124.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:45:f2:47:b2:3d:98:a1:db:4f:5e:d7:e4:6a:6d:3d:09:09:
         9c:10:e5:0c:09:a8:a3:1e:0c:89:16:24:81:4c:4b:7e:93:8a:
         b7:b5:ad:37:ef:b3:cd:82:e8:a8:e7:66:1d:db:c0:ca:46:5e:
         f4:3a:2f:50:e4:8d:a1:34:ee:d7:31:44:fe:ce:b8:14:65:73:
         57:cb:aa:8f:38:1c:de:6f:63:98:a9:2a:b9:6b:1d:a7:0e:71:
         7e:e9:6f:9a:3d:6e:14:b7:cc:48:fa:3e:81:60:18:e6:10:1c:
         db:4f:44:59:d6:e9:94:f8:39:bb:16:73:9e:96:4c:43:96:4b:
         1d:77:eb:70:8b:0c:15:37:3c:99:67:d7:62:23:b8:7c:bb:1a:
         da:7c:ba:e5:14:a1:7f:f8:22:79:7a:49:20:6a:a8:46:8b:80:
         8c:a7:c9:29:2a:66:a7:b2:0d:31:22:8c:8e:44:b9:6a:0d:5d:
         2e:9e:db:20:5b:7b:dc:7b:23:87:32:0f:94:90:1a:b6:14:9b:
         f9:43:2e:b4:e8:52:14:f9:75:53:13:88:1a:88:4b:f7:af:f9:
         d3:51:07:cd:f8:56:54:fa:03:32:07:0e:43:85:ad:58:8c:5e:
         63:60:09:7e:dc:1b:f2:94:0b:a0:23:43:1a:4c:fb:f4:ac:67:
         36:44:4f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:29 2023 by rpki-client on console-ams.rpki-client.org