Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e/c289bd8d-b960-3b66-a5ee-93a8e793c0a3.roa
File:                     c289bd8d-b960-3b66-a5ee-93a8e793c0a3.roa (raw, json)
Hash identifier:          6HHOGNiogwleXibkLHau0GnNMF6ohkJNQ/pKxELbFqo=
Subject key identifier:   BF:CC:92:9C:39:DA:00:09:CA:4A:C5:F6:A8:C0:DF:FB:2B:60:B5:1D
Certificate issuer:       /CN=7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e
Certificate serial:       010D0C9F4328583E6CA32C299C24542808DE0900
Authority key identifier: A9:9B:7D:23:00:FE:03:6E:23:9A:5A:4C:08:96:8A:C6:A8:56:E9:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e/c289bd8d-b960-3b66-a5ee-93a8e793c0a3.roa
Signing time:             Fri 01 Jul 2022 18:10:46 +0000
ROA not before:           Fri 01 Jul 2022 18:10:46 +0000
ROA not after:            Thu 03 Oct 2024 04:00:00 +0000
asID:                     399970
IP address blocks:        149.112.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6c:a3:2c:29:9c:24:54:28:08:de:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e
        Validity
            Not Before: Jul  1 18:10:46 2022 GMT
            Not After : Oct  3 04:00:00 2024 GMT
        Subject: CN=2a362479-eb2d-435c-97fd-f9cbaa53c77d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ce:57:9a:da:39:41:f3:dd:f2:8d:43:13:46:
                    ea:47:4e:82:72:9e:ff:50:06:7b:ab:3d:dc:a2:96:
                    eb:68:4b:87:3e:ec:b9:f4:a3:88:54:06:f3:0f:13:
                    10:db:4d:56:d9:23:27:44:99:4c:08:1b:c2:c3:a7:
                    be:ae:36:30:c7:e0:90:30:7e:ba:a2:99:88:ab:dd:
                    a0:3f:7c:aa:25:84:61:ae:fd:d0:fc:7e:a2:bb:52:
                    44:da:72:3b:c7:f4:d6:93:96:87:75:79:c4:14:bf:
                    26:58:6d:53:bf:18:c4:d7:99:ac:5b:57:fa:eb:d9:
                    fa:c7:16:64:a6:d1:03:f9:fe:19:03:30:92:f3:40:
                    a0:a3:19:9b:bf:92:7b:08:86:cb:2e:c6:e4:31:8f:
                    61:f3:ae:7e:bb:8a:9e:cd:a0:70:4e:92:aa:8f:b2:
                    34:87:53:30:fc:c6:b9:9e:cc:c5:96:19:57:dc:73:
                    cf:dc:8c:03:52:c9:84:e6:44:27:ea:39:bd:da:d6:
                    79:0d:b3:d8:94:aa:04:26:35:14:4e:da:84:eb:e9:
                    98:5b:04:e1:bd:f1:be:e4:6e:cc:b9:d2:e7:4b:c0:
                    9b:f4:e2:d6:db:8f:78:39:9c:00:5e:0e:19:1c:cf:
                    09:c5:cb:5c:ee:70:5b:ca:9b:bd:08:b9:f8:8e:b6:
                    83:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:CC:92:9C:39:DA:00:09:CA:4A:C5:F6:A8:C0:DF:FB:2B:60:B5:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e/c289bd8d-b960-3b66-a5ee-93a8e793c0a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e.crl

            X509v3 Authority Key Identifier:
                keyid:A9:9B:7D:23:00:FE:03:6E:23:9A:5A:4C:08:96:8A:C6:A8:56:E9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:af:71:2c:47:64:ba:a6:bf:89:7b:93:3f:70:c8:1d:c3:51:
         ce:d4:2a:9a:53:c0:11:dc:83:f2:ec:60:45:15:eb:94:c4:97:
         5b:f1:eb:4d:60:8d:04:3f:35:a0:29:2c:35:e2:6a:0b:d5:18:
         e9:72:45:31:23:94:62:a8:d3:f0:87:7b:bb:0b:aa:f5:2d:81:
         eb:48:84:c7:30:de:fd:29:93:73:3b:72:de:90:ff:6f:d3:a4:
         6b:cc:e6:b3:8d:40:0e:31:a6:1b:20:ce:66:76:e8:87:d0:5e:
         99:c1:37:3f:27:9f:9e:f0:f7:61:5b:27:5d:2e:bf:b6:38:13:
         ed:97:3f:9c:1d:2f:32:9f:63:3d:24:3b:25:38:94:fd:8b:c5:
         9a:a8:40:90:48:1e:93:2e:be:15:44:be:95:a2:e7:86:1a:50:
         21:76:7a:f9:32:05:c3:56:b8:ee:3a:67:82:43:2e:23:87:7b:
         6f:ff:1c:10:97:f8:6d:6c:5b:c9:56:ed:44:19:80:f6:c7:71:
         8c:8a:68:2f:61:76:d3:87:de:93:92:37:63:21:04:6d:75:16:
         62:34:e5:2d:51:5c:0e:10:bb:c2:05:4b:6b:f9:7f:a4:b2:dd:
         02:82:cf:bb:84:ab:94:af:cd:24:cd:1a:91:a5:a1:47:a6:2c:
         d1:9c:37:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:40 2023 by rpki-client on console-fra.rpki-client.org