Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfe7a41e-6afa-44a1-9acc-73bebe8ff3fb/89b69feb-d4b2-3416-9608-6c41dbd3594d.roa
File:                     89b69feb-d4b2-3416-9608-6c41dbd3594d.roa (raw, json)
Hash identifier:          RkmHBXczTHbaYfuEtzw5dAaSn0xhdyk3i3dA2balW50=
Subject key identifier:   2D:50:31:F5:BC:A2:9A:A4:8C:BD:80:22:35:D0:07:0E:38:DA:77:D7
Certificate issuer:       /CN=cfe7a41e-6afa-44a1-9acc-73bebe8ff3fb
Certificate serial:       010D0C9F43285841F05D4D66DB4B8C7096F911C0
Authority key identifier: E6:B7:50:34:8A:9C:0B:88:6A:47:C4:16:2F:09:62:2E:6D:2F:80:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfe7a41e-6afa-44a1-9acc-73bebe8ff3fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfe7a41e-6afa-44a1-9acc-73bebe8ff3fb/89b69feb-d4b2-3416-9608-6c41dbd3594d.roa
Signing time:             Sat 20 May 2023 01:00:17 +0000
ROA not before:           Sat 20 May 2023 01:00:17 +0000
ROA not after:            Fri 18 Aug 2023 01:00:17 +0000
asID:                     11248
IP address blocks:        204.8.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:f0:5d:4d:66:db:4b:8c:70:96:f9:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfe7a41e-6afa-44a1-9acc-73bebe8ff3fb
        Validity
            Not Before: May 20 01:00:17 2023 GMT
            Not After : Aug 18 01:00:17 2023 GMT
        Subject: CN=d2f467b2-842e-4664-9747-ecaf93832afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:17:aa:4b:d2:0d:75:d1:90:be:ca:b8:56:e2:
                    7b:1e:30:01:22:d6:d1:1b:d7:75:7c:ef:d1:db:b4:
                    a3:67:2f:50:35:8f:9e:41:07:c4:41:c5:45:1b:bf:
                    1c:14:fc:5e:c3:e6:38:0a:74:0b:6f:9b:7f:0e:f4:
                    a0:46:3c:b2:d4:32:49:2e:a5:54:2e:c7:f2:b8:f8:
                    d4:ca:26:67:c9:85:79:95:50:14:48:b3:f1:a4:33:
                    68:0d:be:c6:1e:79:79:21:e1:41:9e:c9:62:da:27:
                    54:7b:1e:66:fa:0f:1e:59:f7:ad:5c:3c:70:39:fd:
                    49:4c:ab:ec:0b:a5:b9:15:14:64:cf:5b:2e:35:f5:
                    bb:8f:ed:93:ed:03:9b:04:76:02:b1:01:22:28:b6:
                    1a:c8:ba:59:38:47:2a:d6:da:55:41:aa:0d:19:31:
                    95:c8:02:66:46:43:bb:7e:3c:9e:59:72:a7:38:d6:
                    87:6d:5d:41:4f:74:56:00:4a:d2:be:c0:e2:22:36:
                    a1:e7:59:17:a2:5a:eb:8e:81:3a:78:5c:3f:58:15:
                    2c:e4:1e:91:88:53:a5:70:f3:7c:e4:da:1f:27:27:
                    09:1c:a8:49:50:ea:fd:5c:f6:d9:8a:bc:95:04:44:
                    7a:82:f6:80:e8:0d:54:44:46:ba:3a:cd:9a:5c:1a:
                    f2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:50:31:F5:BC:A2:9A:A4:8C:BD:80:22:35:D0:07:0E:38:DA:77:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfe7a41e-6afa-44a1-9acc-73bebe8ff3fb/89b69feb-d4b2-3416-9608-6c41dbd3594d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfe7a41e-6afa-44a1-9acc-73bebe8ff3fb/cfe7a41e-6afa-44a1-9acc-73bebe8ff3fb.crl

            X509v3 Authority Key Identifier:
                keyid:E6:B7:50:34:8A:9C:0B:88:6A:47:C4:16:2F:09:62:2E:6D:2F:80:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfe7a41e-6afa-44a1-9acc-73bebe8ff3fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:95:40:f1:19:62:b3:d0:c4:ad:68:7f:ee:7e:78:47:0f:80:
         9e:cd:e1:e3:7d:6b:ba:9f:16:06:4a:10:3c:6b:bc:15:d2:ac:
         5d:07:db:c4:55:73:be:90:b7:85:9c:0a:2b:71:36:0f:e0:a3:
         1e:a4:f5:33:75:ba:f2:76:b7:1f:88:0e:43:63:4f:16:40:62:
         bc:48:75:e0:76:c7:87:06:80:f0:57:dc:b9:c8:c0:d8:f9:20:
         a0:f3:08:2e:f8:f1:67:a5:9e:8b:aa:35:5e:3d:e9:ac:a8:ca:
         a8:b9:97:0f:d4:ae:c1:ce:5d:10:70:9f:b1:5f:88:6e:43:bf:
         5f:7a:12:5b:c8:ad:e3:4e:b6:cf:4d:32:42:9d:d7:a8:6b:ec:
         76:22:a0:43:a1:f6:78:b2:af:7e:a0:e2:8f:4a:03:de:f9:46:
         81:24:2c:90:e7:b2:50:80:22:0d:d8:bf:54:6c:6c:3e:89:37:
         33:3b:23:41:38:91:1f:54:25:0c:27:57:61:22:4f:10:f9:48:
         e1:11:3c:d3:bb:ca:49:f9:81:6f:5f:43:12:2f:55:b2:8e:01:
         e9:08:c8:d9:b7:30:34:de:94:98:59:0d:5d:39:9e:6e:44:92:
         e5:1d:30:89:11:09:a7:51:60:2b:ab:77:c1:2f:32:0c:43:57:
         97:e0:f0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:55 2024 by rpki-client on console-ams.rpki-client.org