Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c4e3d42c-dcc9-4388-9b3d-a69d1bf0d2dd/c6977191-7d28-31a9-be34-c171d32f6fe7.roa
File:                     c6977191-7d28-31a9-be34-c171d32f6fe7.roa (raw, json)
Hash identifier:          CZUk4R5Eo52tUL5dslOo49Z7jAMFOkum1x813cvayMk=
Subject key identifier:   DE:80:3F:5F:59:C9:1E:21:7D:D9:3A:A1:89:86:C0:FF:9A:16:44:24
Certificate issuer:       /CN=c4e3d42c-dcc9-4388-9b3d-a69d1bf0d2dd
Certificate serial:       010D0C9F43285844861F4217FA6D72436A172F40
Authority key identifier: C4:59:A6:8F:10:6E:BB:7F:D6:78:E7:9A:83:0E:85:F9:31:AA:1A:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c4e3d42c-dcc9-4388-9b3d-a69d1bf0d2dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c4e3d42c-dcc9-4388-9b3d-a69d1bf0d2dd/c6977191-7d28-31a9-be34-c171d32f6fe7.roa
Signing time:             Fri 12 Jan 2024 02:00:24 +0000
ROA not before:           Fri 12 Jan 2024 02:00:24 +0000
ROA not after:            Thu 11 Apr 2024 01:00:24 +0000
asID:                     49195
IP address blocks:        23.164.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:86:1f:42:17:fa:6d:72:43:6a:17:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4e3d42c-dcc9-4388-9b3d-a69d1bf0d2dd
        Validity
            Not Before: Jan 12 02:00:24 2024 GMT
            Not After : Apr 11 01:00:24 2024 GMT
        Subject: CN=b89c8286-266c-4c0a-8e29-c4a814f19667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:31:30:af:59:05:5d:1b:83:01:4b:0a:07:e8:
                    a8:bf:bf:cc:a8:5d:5f:b5:c8:ef:37:7d:f2:5a:3a:
                    2d:87:73:b5:dd:3a:94:46:60:9a:05:8e:7f:78:59:
                    68:23:31:2e:01:45:84:78:b5:f7:e7:06:25:ab:e4:
                    aa:fb:d8:ec:9d:ff:ed:1f:25:ce:55:e9:f4:95:37:
                    62:2a:65:7c:b6:cc:57:83:07:b9:30:3e:1e:e3:60:
                    eb:a8:b1:a4:dc:cd:36:50:55:7c:ad:7a:0b:ce:a1:
                    21:43:65:08:8f:40:2e:eb:12:09:fe:08:dd:46:0f:
                    fc:2a:44:9e:c2:ec:8e:7e:96:e0:9e:e1:dd:5f:e2:
                    f1:63:05:1d:ea:92:66:b1:9b:71:28:f5:1e:9b:23:
                    ec:cc:89:ea:2c:7f:15:90:bc:7c:33:06:c3:69:e0:
                    20:a0:50:57:1b:fb:03:be:e6:6e:0f:34:91:8f:c4:
                    13:d5:40:85:8e:98:98:8b:ab:0c:09:ba:bc:8b:04:
                    dc:8d:6d:0a:15:9e:a2:38:38:bd:4c:4a:ac:e2:75:
                    76:52:99:58:d5:88:2d:bd:00:64:d9:9a:82:72:80:
                    b9:22:ce:b0:40:e6:c3:97:58:b4:ea:ea:b5:64:49:
                    04:66:e6:99:98:04:41:d6:f4:dd:28:48:f6:96:fd:
                    29:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:80:3F:5F:59:C9:1E:21:7D:D9:3A:A1:89:86:C0:FF:9A:16:44:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c4e3d42c-dcc9-4388-9b3d-a69d1bf0d2dd/c6977191-7d28-31a9-be34-c171d32f6fe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c4e3d42c-dcc9-4388-9b3d-a69d1bf0d2dd/c4e3d42c-dcc9-4388-9b3d-a69d1bf0d2dd.crl

            X509v3 Authority Key Identifier:
                keyid:C4:59:A6:8F:10:6E:BB:7F:D6:78:E7:9A:83:0E:85:F9:31:AA:1A:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c4e3d42c-dcc9-4388-9b3d-a69d1bf0d2dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:72:d6:53:44:3d:0b:e6:bd:59:ff:c0:04:23:e2:79:79:82:
         0c:a7:5a:cd:1b:e2:5d:e1:62:94:15:86:14:71:f5:e1:b5:b5:
         b5:51:08:0b:84:e7:dd:11:d5:91:bf:f1:62:55:d9:8b:be:bd:
         f9:6e:9a:9d:22:f1:76:ea:bb:e7:d2:51:bf:8f:7c:7d:5e:09:
         54:59:cb:0b:32:06:a3:80:0b:94:08:7b:29:9e:59:89:4f:ed:
         0c:af:0f:58:ef:d9:76:f0:98:8a:50:b8:eb:bb:cb:3c:2a:d7:
         46:b5:13:9c:e7:ba:7f:bc:b5:02:ab:54:d7:bb:48:36:81:e4:
         ba:14:f1:50:b0:99:0f:d6:34:ae:70:99:6f:d1:e2:cd:3d:f4:
         03:4d:5f:14:79:bf:53:47:b5:27:9c:a0:45:90:33:7e:cb:8c:
         1e:8a:5f:c3:77:d5:64:b9:91:57:83:6e:02:c5:7b:5a:b2:02:
         89:66:ce:b1:db:ed:31:ee:7c:65:36:eb:d4:db:85:ce:31:94:
         b0:29:67:2e:a8:47:de:8b:30:cc:39:46:e9:0d:07:bf:c1:79:
         33:51:6a:5a:e4:83:7a:bc:1f:5a:5b:87:5e:db:ec:d3:b3:5a:
         59:e4:ad:d2:63:49:36:fb:f7:3d:5c:0f:e1:bb:ab:0a:ec:f2:
         29:06:60:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:12 2024 by rpki-client on console-fra.rpki-client.org