Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/67b8e9c5-0ea7-4a51-94f0-dabaab00e9cb/0ef54191-83d3-390e-b9ce-569bfc3880e6.roa
File:                     0ef54191-83d3-390e-b9ce-569bfc3880e6.roa (raw, json)
Hash identifier:          lM7BzJfI9UM7OLPKwGMB3be48q+AxQSivMz59W1I2jA=
Subject key identifier:   C9:42:5B:71:4C:BE:DF:9D:DF:8A:21:10:30:1D:AF:D2:1C:00:BC:7B
Certificate issuer:       /CN=67b8e9c5-0ea7-4a51-94f0-dabaab00e9cb
Certificate serial:       010D0C9F432858437C912B8976FA89640CC463C0
Authority key identifier: 28:6C:35:F7:70:BA:3A:C4:56:71:8D:27:1E:E5:45:F7:1A:41:68:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/67b8e9c5-0ea7-4a51-94f0-dabaab00e9cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/67b8e9c5-0ea7-4a51-94f0-dabaab00e9cb/0ef54191-83d3-390e-b9ce-569bfc3880e6.roa
Signing time:             Sun 08 Oct 2023 23:04:56 +0000
ROA not before:           Sun 08 Oct 2023 23:04:56 +0000
ROA not after:            Sun 07 Jan 2024 00:04:56 +0000
asID:                     42055
IP address blocks:        66.205.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:7c:91:2b:89:76:fa:89:64:0c:c4:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67b8e9c5-0ea7-4a51-94f0-dabaab00e9cb
        Validity
            Not Before: Oct  8 23:04:56 2023 GMT
            Not After : Jan  7 00:04:56 2024 GMT
        Subject: CN=decaf83b-3880-4bfd-9331-4edbaa950e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b1:d6:bb:cf:a1:5c:25:bb:59:f9:52:c9:02:
                    68:0c:99:ae:9d:13:8c:72:50:39:25:ae:a3:8e:24:
                    e2:50:97:f0:e3:07:80:fd:51:52:51:bc:27:15:b0:
                    73:1d:ee:87:cc:ef:d4:07:bd:f6:8c:b7:09:59:62:
                    5e:c7:25:3f:d1:64:a3:4c:75:60:c1:e6:b6:35:62:
                    3f:5d:ad:c3:09:61:8c:28:40:97:79:e2:62:0a:be:
                    5a:e5:3c:f6:29:27:34:b5:af:50:d0:2a:8a:38:1c:
                    a1:50:00:6a:46:8c:57:1c:89:36:31:f5:c9:5c:5a:
                    3f:87:6e:9e:7b:0f:46:f4:ed:c3:fe:d9:2c:3d:07:
                    84:d4:37:29:70:47:b4:f1:04:f6:43:a5:7e:45:f8:
                    f9:aa:93:f0:2f:fd:be:a5:d3:3c:97:b9:0b:ee:f2:
                    9e:a4:6c:c9:04:4a:0a:34:c4:3b:aa:8c:50:47:ee:
                    a8:9d:24:03:b3:8f:49:4c:34:d0:58:43:a2:da:62:
                    ef:00:37:9f:a6:16:41:c6:96:b5:1a:e7:ee:ce:ad:
                    16:39:79:46:10:8a:3e:f7:01:9f:97:44:55:fe:b8:
                    1c:35:16:33:f5:fe:16:25:c3:61:fe:ab:06:53:a7:
                    e4:95:20:4f:9c:75:14:3c:c2:12:7c:c5:a0:da:21:
                    f0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:42:5B:71:4C:BE:DF:9D:DF:8A:21:10:30:1D:AF:D2:1C:00:BC:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/67b8e9c5-0ea7-4a51-94f0-dabaab00e9cb/0ef54191-83d3-390e-b9ce-569bfc3880e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/67b8e9c5-0ea7-4a51-94f0-dabaab00e9cb/67b8e9c5-0ea7-4a51-94f0-dabaab00e9cb.crl

            X509v3 Authority Key Identifier:
                keyid:28:6C:35:F7:70:BA:3A:C4:56:71:8D:27:1E:E5:45:F7:1A:41:68:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/67b8e9c5-0ea7-4a51-94f0-dabaab00e9cb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         df:1c:2b:4d:b2:02:26:40:93:22:83:61:fb:5b:30:40:c8:48:
         70:c4:ed:88:9b:ab:2f:6a:69:44:01:48:df:9d:80:16:88:4c:
         1a:85:fe:85:90:33:a4:b0:f4:90:37:15:74:b0:46:1e:ba:f8:
         75:2b:49:1f:12:83:82:24:c9:13:0b:18:bc:71:11:26:23:67:
         10:ec:94:75:35:55:04:66:34:b8:91:d5:3c:de:7c:9c:f6:43:
         8a:8b:39:a1:51:ef:e9:17:b3:24:d3:2a:76:aa:0d:ef:88:a5:
         42:09:8a:ff:e6:9f:b5:33:dd:fc:ad:47:ba:75:d0:4d:26:62:
         00:0c:f8:b9:2a:4d:22:e8:3a:a2:b0:f6:a9:91:84:63:f5:d5:
         1b:47:26:a2:65:42:b6:e3:67:3d:74:eb:d4:66:1e:49:52:09:
         e8:4a:2a:91:64:81:79:4e:7b:cf:5c:25:e4:a7:20:c3:8b:e7:
         0e:ce:9d:0f:c7:b6:e2:d5:b8:48:bd:95:8b:7a:08:db:0c:47:
         c7:e7:01:3f:3e:7a:28:74:15:ce:bb:7b:3b:7a:cd:21:bc:ff:
         53:b6:00:65:70:59:69:f8:cb:f6:4d:d6:57:1d:b6:26:4f:eb:
         87:c3:b0:0b:7b:e5:bc:d4:83:a9:6b:49:cc:41:97:44:54:17:
         ce:f0:42:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:37 2024 by rpki-client on console-ams.rpki-client.org