Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6c6a32b6-ad00-3f2b-a2b5-058c5f4856a0.roa
File:                     6c6a32b6-ad00-3f2b-a2b5-058c5f4856a0.roa (raw, json)
Hash identifier:          0LQHZj+5YhBDcnWB3422wFI7UAZ2yNHwMFdk/WPndcE=
Subject key identifier:   C5:B2:40:1D:39:8A:9B:E3:54:9C:B9:2C:4B:83:3B:88:B7:74:30:9A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840BA1A3D559CD8B97B3C6C13E0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6c6a32b6-ad00-3f2b-a2b5-058c5f4856a0.roa
Signing time:             Fri 27 Jan 2023 12:00:00 +0000
ROA not before:           Fri 27 Jan 2023 12:00:00 +0000
ROA not after:            Sat 04 Mar 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        18.154.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:ba:1a:3d:55:9c:d8:b9:7b:3c:6c:13:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 27 12:00:00 2023 GMT
            Not After : Mar  4 05:00:00 2023 GMT
        Subject: CN=db08d811-a5b8-4d93-bd4f-897886e94c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6d:9b:bd:be:55:be:d6:61:af:9f:e9:69:f6:
                    72:22:e1:5e:ac:0d:05:81:f0:63:44:3e:05:26:02:
                    3b:3a:8b:0d:af:8d:1a:c7:f2:85:dc:b5:a3:54:bb:
                    3d:5c:4e:54:6e:e0:d8:91:53:6e:8d:03:42:7b:8f:
                    7a:9d:d1:38:40:0e:42:8d:5f:b4:34:2a:42:80:cc:
                    15:f5:16:aa:b9:1f:12:fc:d1:c4:5d:30:de:d9:39:
                    fe:6a:3a:22:6e:a7:a3:d1:8a:62:05:44:b2:c3:c4:
                    66:aa:c7:6f:10:3b:77:da:f8:fe:73:54:f1:64:91:
                    65:f2:7a:4e:33:31:00:0c:66:27:77:d2:34:3e:67:
                    6d:80:de:dc:cf:c2:9d:b1:ec:6f:fa:74:ef:d1:b0:
                    aa:cf:24:1e:81:8f:42:86:b4:67:87:be:a6:74:6f:
                    74:f3:4e:f4:51:87:cd:81:2e:21:07:cd:4f:96:b3:
                    c3:d4:fe:40:cc:0c:32:bf:9a:f3:3b:98:c5:a5:79:
                    1c:eb:bf:a0:88:78:a6:c2:c8:24:0d:a9:35:d2:51:
                    cb:ad:a9:b9:28:c4:66:9f:cb:55:ee:29:ec:d5:57:
                    68:42:4c:63:f6:5e:0a:1d:4d:f6:8a:0c:2d:ec:a5:
                    9f:0b:4f:28:a9:81:26:48:92:e2:d5:62:79:e4:b1:
                    ed:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B2:40:1D:39:8A:9B:E3:54:9C:B9:2C:4B:83:3B:88:B7:74:30:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6c6a32b6-ad00-3f2b-a2b5-058c5f4856a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.154.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f0:54:9d:54:96:a9:5a:12:5f:d9:fb:37:a3:21:c5:d6:dc:
         8c:21:09:09:07:11:df:7d:f3:58:ff:6c:81:e6:16:1d:fa:58:
         84:df:cf:26:04:fe:9d:89:07:c0:03:43:01:b6:fb:69:c2:df:
         30:42:88:5b:cd:aa:35:86:2b:f9:6a:cd:02:87:9f:a4:83:57:
         72:97:70:b7:71:4f:96:1d:87:37:02:d2:8d:6f:e7:7f:aa:aa:
         80:5f:82:32:e9:26:4d:16:1c:0b:df:70:7c:2a:85:d2:4e:c3:
         53:86:3e:7e:39:da:77:30:60:4a:d2:cb:df:5f:03:94:8c:a3:
         09:01:b7:41:8e:07:df:96:c7:1c:3e:5f:fe:6a:24:28:1b:ed:
         7c:80:ec:38:a8:ee:5d:e3:9b:75:1f:28:0d:40:fd:da:f8:0b:
         29:dd:fc:64:eb:08:54:aa:fb:1b:37:b5:56:89:b0:7b:ef:b4:
         d9:76:34:ba:73:8d:8f:1d:d6:c6:09:48:cd:c2:5b:ca:fe:2f:
         10:d0:a8:a9:d2:7c:32:be:5f:a7:62:9a:27:46:df:5b:a8:50:
         30:53:d2:e6:aa:f4:95:ff:0b:a4:27:e6:bf:4a:71:6d:06:16:
         cb:24:af:2c:fe:23:93:63:36:f1:de:d0:f4:dc:cf:17:fd:14:
         eb:ff:81:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:37:11 2023 by rpki-client on console.sobornost.net