Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d669241-5dfb-43f2-99a8-90b846457b5b/8485574d-7e3c-387b-8ad2-3d1910f4f1f5.roa
File:                     8485574d-7e3c-387b-8ad2-3d1910f4f1f5.roa (raw, json)
Hash identifier:          hmzpp5V8MNC7oyMnIRNj+xCpLijJDJwjhGfAJTBtPLk=
Subject key identifier:   56:51:2F:D6:05:06:B2:79:C1:72:C8:12:6A:AB:EC:06:91:BF:2F:44
Certificate issuer:       /CN=1d669241-5dfb-43f2-99a8-90b846457b5b
Certificate serial:       010D0C9F432858464D0F0E5CB34507CEAB628100
Authority key identifier: AF:EA:52:BA:EC:9F:EB:98:25:59:92:63:3B:5A:30:2F:25:7B:FB:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d669241-5dfb-43f2-99a8-90b846457b5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d669241-5dfb-43f2-99a8-90b846457b5b/8485574d-7e3c-387b-8ad2-3d1910f4f1f5.roa
Signing time:             Sun 23 Jun 2024 01:00:24 +0000
ROA not before:           Sun 23 Jun 2024 01:00:24 +0000
ROA not after:            Sat 21 Sep 2024 01:00:24 +0000
asID:                     14618
IP address blocks:        104.238.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:4d:0f:0e:5c:b3:45:07:ce:ab:62:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d669241-5dfb-43f2-99a8-90b846457b5b
        Validity
            Not Before: Jun 23 01:00:24 2024 GMT
            Not After : Sep 21 01:00:24 2024 GMT
        Subject: CN=42581b7e-6626-4fd8-9c5e-ae14255c2949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:18:dc:12:7b:0b:f5:7a:02:29:47:1c:4d:3c:
                    0b:bf:df:b9:c9:50:23:23:12:d1:79:98:17:1d:2c:
                    91:c2:1f:e5:b6:a8:da:0f:4b:14:91:ae:ad:7d:cd:
                    86:56:31:e2:e9:b8:4b:73:5f:ee:1a:13:95:ec:a9:
                    c1:3d:4d:bc:72:c6:46:45:25:db:af:f7:10:51:0d:
                    df:1c:66:f4:ee:93:be:7b:69:02:0b:31:25:4e:2f:
                    50:ba:a3:f6:d6:03:89:bf:60:b7:0d:d5:0d:04:fb:
                    9f:80:e8:87:23:e7:37:59:00:7c:73:07:cb:80:0d:
                    74:f4:ce:89:3f:9d:66:ef:40:8c:80:b9:c0:46:48:
                    70:ae:63:c6:10:8a:56:e7:83:4e:64:80:9f:6a:4c:
                    ea:86:58:c6:d0:55:6f:09:26:3f:0d:6e:0a:53:5a:
                    c1:47:4f:7a:2d:82:fd:3a:87:37:83:25:16:54:b5:
                    6a:48:70:92:da:e0:08:dc:74:c4:0c:99:52:68:4c:
                    38:b6:49:d3:ed:fd:9e:37:95:fb:41:ee:e7:b8:19:
                    39:7e:a8:02:3c:61:d1:a3:29:a1:ec:26:f4:40:82:
                    ed:ff:ed:5a:4c:66:81:75:db:a9:da:83:cc:0e:14:
                    68:97:e4:2b:42:df:c1:40:52:6f:6d:54:86:d2:2a:
                    72:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:51:2F:D6:05:06:B2:79:C1:72:C8:12:6A:AB:EC:06:91:BF:2F:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d669241-5dfb-43f2-99a8-90b846457b5b/8485574d-7e3c-387b-8ad2-3d1910f4f1f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d669241-5dfb-43f2-99a8-90b846457b5b/1d669241-5dfb-43f2-99a8-90b846457b5b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:EA:52:BA:EC:9F:EB:98:25:59:92:63:3B:5A:30:2F:25:7B:FB:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d669241-5dfb-43f2-99a8-90b846457b5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.238.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:76:e5:aa:66:e9:7b:0e:50:c1:96:31:f2:09:aa:09:6e:a9:
         9e:3e:32:01:57:f7:56:d9:3d:fb:7c:98:f7:71:f4:ab:96:ee:
         13:e2:50:fe:7f:ba:0a:5b:42:e9:07:c3:aa:59:b3:1c:41:c3:
         08:42:82:b2:d6:c6:00:d0:f3:ee:11:56:b3:08:f1:37:b0:7e:
         35:38:8d:a6:54:d9:47:88:15:89:cb:00:1c:2b:07:c5:a0:73:
         e0:8b:b9:f4:e4:1a:77:a6:c9:b9:a4:49:f8:63:0f:51:13:dd:
         9d:8d:68:d5:e3:00:56:4a:f2:0d:09:c1:2d:f2:88:4b:57:21:
         9f:f0:56:6a:a9:91:d8:23:55:be:52:95:14:c3:25:ee:3f:76:
         2e:97:e6:ed:38:2c:cc:c0:f5:18:ba:c0:06:17:52:69:d1:ee:
         ad:38:da:68:e1:87:be:49:64:3a:0e:61:3b:0e:05:26:59:0f:
         00:c9:c3:c0:e2:1c:7c:4f:a0:c9:6d:83:43:44:45:99:7d:18:
         53:49:50:e8:1b:e8:37:ea:11:55:45:2e:ed:2c:24:3a:1a:7b:
         c8:cc:c7:7b:3e:35:95:9c:6c:1a:e4:e0:d4:4b:a9:06:50:ec:
         9f:ee:de:70:e2:1a:8b:09:b8:93:68:69:c6:22:97:c1:55:4c:
         2c:49:eb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 04:42:59 2024 by rpki-client on console.sobornost.net