Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfe7a41e-6afa-44a1-9acc-73bebe8ff3fb/73eb4d44-c05d-31a6-b246-86b9bac535c3.roa
File:                     73eb4d44-c05d-31a6-b246-86b9bac535c3.roa (raw, json)
Hash identifier:          jBTt/x6v1Xih+B3iw/eoF1tG97sOXUtucUejVK5U/Oo=
Subject key identifier:   A2:88:81:A3:59:2A:D9:2B:10:87:9C:91:8E:9E:CC:5E:12:9B:2E:56
Certificate issuer:       /CN=cfe7a41e-6afa-44a1-9acc-73bebe8ff3fb
Certificate serial:       010D0C9F43285841F05D4CDE39ECAA8C95790F80
Authority key identifier: E6:B7:50:34:8A:9C:0B:88:6A:47:C4:16:2F:09:62:2E:6D:2F:80:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfe7a41e-6afa-44a1-9acc-73bebe8ff3fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfe7a41e-6afa-44a1-9acc-73bebe8ff3fb/73eb4d44-c05d-31a6-b246-86b9bac535c3.roa
Signing time:             Sat 20 May 2023 01:00:17 +0000
ROA not before:           Sat 20 May 2023 01:00:17 +0000
ROA not after:            Fri 18 Aug 2023 01:00:17 +0000
asID:                     11248
IP address blocks:        204.8.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:f0:5d:4c:de:39:ec:aa:8c:95:79:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfe7a41e-6afa-44a1-9acc-73bebe8ff3fb
        Validity
            Not Before: May 20 01:00:17 2023 GMT
            Not After : Aug 18 01:00:17 2023 GMT
        Subject: CN=870793a5-4110-4ae5-a3fd-6b06ed932496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:34:df:d8:0f:2c:c6:8f:54:0e:e3:44:01:51:
                    76:09:34:3d:c1:af:7a:6a:ed:26:f3:9f:99:e3:46:
                    8e:b5:74:8a:b5:87:72:b8:17:ac:77:01:2c:b1:a6:
                    b5:6c:09:de:79:c4:9f:a3:2b:a7:23:4d:1e:af:6a:
                    e9:a9:35:49:8e:f8:ec:79:2b:78:0d:fb:42:b0:d5:
                    25:03:28:c4:e5:e2:31:49:f3:28:3e:1c:7d:d5:70:
                    8b:b2:17:e6:06:32:d8:b5:f9:8d:9d:4e:4a:ac:70:
                    2c:52:02:4e:7d:55:b2:b0:0f:4a:99:55:82:d0:a7:
                    04:03:53:c1:bc:85:1f:4b:69:8f:19:d4:17:0d:1d:
                    c9:9c:c1:57:2b:d9:2e:81:96:69:4e:f0:72:c2:30:
                    36:6f:b0:47:49:fa:0a:80:0a:19:74:0a:3d:f5:4d:
                    74:f7:70:cf:d5:6b:61:ac:c0:42:f3:38:6f:26:40:
                    3c:77:45:f2:e8:cb:a6:11:dd:5f:a8:e8:2c:b9:36:
                    1e:f8:44:7c:fa:b6:7c:74:88:41:57:aa:78:6d:a4:
                    1a:0c:a6:e9:c9:e9:d9:8e:b9:7d:51:3d:60:9e:16:
                    35:b4:f9:cb:2e:56:1f:a1:0f:9d:32:a5:77:54:3b:
                    54:1a:a3:9e:be:13:21:44:77:70:fe:a9:45:a0:cd:
                    be:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:88:81:A3:59:2A:D9:2B:10:87:9C:91:8E:9E:CC:5E:12:9B:2E:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfe7a41e-6afa-44a1-9acc-73bebe8ff3fb/73eb4d44-c05d-31a6-b246-86b9bac535c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfe7a41e-6afa-44a1-9acc-73bebe8ff3fb/cfe7a41e-6afa-44a1-9acc-73bebe8ff3fb.crl

            X509v3 Authority Key Identifier:
                keyid:E6:B7:50:34:8A:9C:0B:88:6A:47:C4:16:2F:09:62:2E:6D:2F:80:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfe7a41e-6afa-44a1-9acc-73bebe8ff3fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:72:c7:47:b8:a5:f6:20:9d:fe:1a:a1:16:1a:2d:15:f4:8f:
         94:03:22:f2:32:50:94:a1:56:a1:9a:d4:b8:55:57:78:48:25:
         db:d9:32:7f:34:64:bc:37:b3:fc:39:e8:24:b8:f0:75:a6:48:
         7e:ed:a4:98:b2:b0:84:78:67:53:44:1f:57:c9:7b:88:8d:ea:
         19:7d:bd:41:14:bd:34:38:e9:d4:54:ed:fd:eb:6a:ac:6a:84:
         21:4a:b5:86:3e:15:00:65:bf:43:52:28:f1:a3:36:3b:96:32:
         5c:c9:02:01:69:da:40:e8:fc:32:8f:ad:be:27:a9:6c:07:00:
         6d:45:cc:29:df:7b:bc:78:2f:62:10:84:3b:b9:75:e1:20:fe:
         4c:5e:7a:54:43:ed:43:d4:9a:9d:ca:2b:d4:44:df:1c:17:95:
         97:49:08:4f:ec:2c:cd:6b:6d:fd:2d:99:83:40:7b:8e:64:86:
         03:6b:d3:d1:86:62:0f:3c:85:ef:9d:dc:ce:47:0a:10:b0:c5:
         bf:77:18:9f:8e:88:22:ec:f4:0b:cc:4b:f8:68:d1:ee:00:01:
         f8:ba:66:ab:c3:7c:5b:03:d4:97:bb:f1:cf:8c:1c:5a:0d:50:
         b4:89:ec:1d:66:6d:74:ff:ba:7c:d7:69:4d:a8:4b:a9:04:2b:
         22:12:12:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:57 2024 by rpki-client on console-fra.rpki-client.org