Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08/ef91fcad-57ac-31f7-9ec8-a85685697c81.roa
File:                     ef91fcad-57ac-31f7-9ec8-a85685697c81.roa (raw, json)
Hash identifier:          yZyo5AMYwDGGdIsFeQ3ixH3gXkHMsEfAcjADpNXRj+M=
Subject key identifier:   C5:EC:54:13:A2:9B:CE:F0:22:81:DC:73:C1:0C:B0:17:22:80:5E:B4
Certificate issuer:       /CN=7671ed9c-f209-4882-bd38-5f129f761a08
Certificate serial:       010D0C9F432858417281097D0766AC726A88F200
Authority key identifier: 78:9F:AB:3B:E2:30:79:06:0D:3E:CF:07:F5:DD:F6:46:B9:08:EB:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08/ef91fcad-57ac-31f7-9ec8-a85685697c81.roa
Signing time:             Tue 04 Apr 2023 19:04:07 +0000
ROA not before:           Tue 04 Apr 2023 19:04:07 +0000
ROA not after:            Mon 07 Jul 2025 04:00:00 +0000
asID:                     399970
IP address blocks:        149.112.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:72:81:09:7d:07:66:ac:72:6a:88:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7671ed9c-f209-4882-bd38-5f129f761a08
        Validity
            Not Before: Apr  4 19:04:07 2023 GMT
            Not After : Jul  7 04:00:00 2025 GMT
        Subject: CN=82433b37-7c3c-4fc5-9225-b980acd9748e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:48:f5:13:3f:3f:22:36:5f:12:65:3d:e0:f2:
                    0f:6b:be:bd:b0:99:ec:3a:52:e5:6f:b9:07:c5:3a:
                    9b:5e:b2:77:8a:ac:42:3f:d7:2a:5a:e3:d9:16:fa:
                    c0:c2:41:0d:4d:78:6d:cc:fa:8b:f4:6f:c6:fa:95:
                    b0:7e:13:9c:34:ae:7c:f8:a7:76:b9:c2:85:2f:9c:
                    c6:1c:ee:e3:88:b4:1e:ab:4d:3b:b6:e5:55:97:83:
                    f3:7c:67:bd:3f:94:9b:c1:1f:70:47:e7:cb:24:6c:
                    9f:4b:16:bc:d1:57:3f:07:67:42:7b:6f:77:e2:b9:
                    f1:f7:8b:be:86:84:09:6d:b1:49:27:83:6f:4a:7a:
                    c9:ce:89:14:8e:21:de:b6:2f:d1:e5:85:6a:f1:ac:
                    a9:84:71:d5:e4:40:27:24:78:0f:5e:d3:f9:a1:68:
                    d4:71:d0:b0:be:7b:af:f7:78:ab:9d:89:77:09:bb:
                    f8:bc:25:90:b6:45:c2:d1:5b:0f:d5:8c:68:ea:06:
                    5c:83:f0:56:99:3a:46:50:80:55:cb:c6:22:70:0d:
                    b8:9b:34:a5:e6:f3:85:76:93:c3:4a:6e:5f:3a:ab:
                    3a:f0:6e:e0:1f:3d:9e:61:10:7f:4f:f2:c5:a6:ed:
                    57:51:f5:9c:37:f8:14:ab:2e:12:3e:1d:81:2f:fe:
                    ab:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EC:54:13:A2:9B:CE:F0:22:81:DC:73:C1:0C:B0:17:22:80:5E:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08/ef91fcad-57ac-31f7-9ec8-a85685697c81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08/7671ed9c-f209-4882-bd38-5f129f761a08.crl

            X509v3 Authority Key Identifier:
                keyid:78:9F:AB:3B:E2:30:79:06:0D:3E:CF:07:F5:DD:F6:46:B9:08:EB:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7671ed9c-f209-4882-bd38-5f129f761a08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:25:ad:87:e1:ca:34:e3:37:f9:c1:d6:da:b8:0b:41:4b:3e:
         6c:25:a0:26:6f:92:9e:3d:1e:53:87:5a:50:0f:cc:43:50:a0:
         a0:c7:8e:b3:a6:8c:0b:37:a9:6c:e2:e1:d6:5e:9a:dc:58:78:
         36:18:72:a0:8a:97:6e:ae:b4:11:60:07:97:b8:b7:23:2c:8e:
         23:77:d6:60:af:44:a1:60:6a:c8:05:71:62:07:a9:55:50:f2:
         f3:3f:ee:de:8d:9d:57:17:b8:3b:f3:cd:0f:93:bf:a9:5b:bf:
         4b:2a:4b:58:60:39:3f:18:9d:73:f8:74:77:d8:81:e7:bf:21:
         f8:45:4f:37:84:27:c4:35:88:3a:ca:87:ab:ce:48:54:00:f8:
         52:ad:72:02:a0:13:a1:1c:87:7e:ce:c9:06:29:3f:c5:f9:2f:
         cf:fa:96:45:05:a9:7f:1c:a0:af:8f:af:70:b9:c1:26:b8:52:
         c2:57:06:4d:78:7a:d6:3b:95:5f:3e:8b:0f:67:28:72:e5:a2:
         19:6c:34:7e:c4:0d:22:22:4c:55:32:04:cc:02:9a:ba:79:0c:
         ae:78:29:a5:2d:b2:95:10:a9:d5:da:0b:e0:1b:9c:3e:5b:13:
         a1:dc:ff:fd:35:6c:3b:a3:db:bd:5c:eb:25:bc:50:bb:5d:96:
         06:58:e9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:40 2024 by rpki-client on console-ams.rpki-client.org