Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/228cc421-5f55-3517-992b-42595d15286f.roa
File:                     228cc421-5f55-3517-992b-42595d15286f.roa (raw, json)
Hash identifier:          7KSTg6RjSKPIFFV3qufkHXpIZmkHniB3q4E0v07A4fM=
Subject key identifier:   3F:D9:F0:37:F8:E6:CD:83:E2:57:4F:FD:F2:BB:0E:F6:D6:71:F8:55
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583EA5A6EA8676C44F39EFC9E600
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/228cc421-5f55-3517-992b-42595d15286f.roa
Signing time:             Wed 20 Jul 2022 12:00:00 +0000
ROA not before:           Wed 20 Jul 2022 12:00:00 +0000
ROA not after:            Sat 23 Jul 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:a5:a6:ea:86:76:c4:4f:39:ef:c9:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jul 20 12:00:00 2022 GMT
            Not After : Jul 23 04:00:00 2022 GMT
        Subject: CN=a69e4de5-f425-4002-8281-2e84fa096469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:53:45:ac:03:80:7f:15:0c:df:f8:e1:4f:98:
                    96:d1:66:44:c2:87:a8:08:8f:7c:60:ce:e0:9e:53:
                    d2:88:34:e6:34:b9:2d:15:38:9e:14:21:61:6a:ab:
                    f4:85:5f:23:31:f6:95:e5:fa:05:97:47:61:30:02:
                    68:cb:24:15:35:ec:6d:92:ce:81:cc:b7:15:54:6b:
                    83:92:96:8d:5b:a0:e7:d9:35:66:81:7d:cc:ef:12:
                    75:df:a2:e6:25:ee:9a:80:99:22:1e:6f:d4:46:54:
                    98:fb:af:cd:ed:33:d7:e8:de:e3:49:1e:2d:14:71:
                    a9:1c:68:78:2a:4a:f9:07:37:91:ac:67:82:92:c2:
                    73:89:cd:91:a3:89:e3:8a:71:ef:96:59:16:84:f0:
                    21:f9:73:9c:40:77:dd:b6:16:ca:81:c5:3c:b7:c8:
                    6a:7c:03:2e:0e:84:0a:e9:b1:f7:35:1b:54:9a:b6:
                    08:b8:ca:d8:f8:35:67:ce:20:2d:d7:bf:2e:16:7c:
                    b0:dc:9b:5e:51:7d:2e:f3:ca:9e:cc:fe:e4:c4:35:
                    ac:f7:95:2e:1e:e1:e1:60:c6:82:53:c8:eb:46:9d:
                    3b:5c:16:28:8f:f6:43:65:f3:55:2e:54:dc:2e:5a:
                    48:f4:c2:b9:03:21:56:55:af:23:57:74:58:da:3b:
                    7e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D9:F0:37:F8:E6:CD:83:E2:57:4F:FD:F2:BB:0E:F6:D6:71:F8:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/228cc421-5f55-3517-992b-42595d15286f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:b9:0d:48:aa:4b:52:03:7b:17:3e:47:fc:b6:d4:e7:2e:21:
         78:93:0f:1d:13:8d:9a:b8:77:20:85:a6:c7:da:4d:a8:cd:1a:
         c1:ab:52:83:82:25:95:05:56:1c:26:79:66:c7:98:df:39:cb:
         8e:9e:89:a6:b4:66:1b:d4:f5:16:ea:0a:6d:b3:fb:00:5d:27:
         16:e6:6c:44:f5:92:35:ba:7a:b9:2c:d9:98:4c:82:8c:cb:4e:
         75:8e:95:7a:ae:49:90:25:74:f3:0a:55:3c:d4:7e:25:8c:5f:
         f0:9d:3e:2e:1a:6a:91:2d:01:00:a3:31:55:5b:af:cf:ec:94:
         5e:6f:10:75:1b:d2:ad:d9:b4:b6:21:5d:cf:9f:3e:24:56:14:
         e5:bd:be:f7:62:cc:21:ef:1a:82:c7:c7:b5:30:c8:b6:24:11:
         d1:0b:08:d7:02:17:c6:a6:65:26:0a:b7:92:8a:90:a0:dc:cb:
         1e:93:7c:66:f6:40:c3:92:ef:c3:ad:38:59:6f:c7:f1:c5:ea:
         71:66:a9:37:79:e7:0a:4a:83:d8:44:7a:e1:1d:92:bc:45:2e:
         8d:71:05:db:60:b8:04:8b:48:8e:9d:68:a7:1e:fc:c8:28:d4:
         15:ce:84:96:a5:a3:bd:c6:25:1d:06:f2:b6:8a:f2:56:b8:6c:
         bd:50:e7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:49 2024 by rpki-client on console-ams.rpki-client.org