Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29/27d73b30-cc3c-3886-ac1f-1cf38b1027dd.roa
File:                     27d73b30-cc3c-3886-ac1f-1cf38b1027dd.roa (raw, json)
Hash identifier:          aFWbQoU7Mm5V6BP1etJ65DEt+eWIPhvwk3zzXFqszKM=
Subject key identifier:   01:FD:95:76:46:91:A6:81:F1:1C:2B:56:A6:3F:BB:A6:EA:9B:F1:55
Certificate issuer:       /CN=90e0e2fb-b856-4bab-b967-a8918ce1cb29
Certificate serial:       010D0C9F43285843C3FAE88E9B125F523D4F2580
Authority key identifier: D9:F0:59:7D:DD:E5:0B:71:70:E9:D9:96:27:EB:07:0D:E8:54:20:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29/27d73b30-cc3c-3886-ac1f-1cf38b1027dd.roa
Signing time:             Fri 03 Nov 2023 13:00:22 +0000
ROA not before:           Fri 03 Nov 2023 13:00:22 +0000
ROA not after:            Thu 01 Feb 2024 14:00:22 +0000
asID:                     13830
IP address blocks:        163.123.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:c3:fa:e8:8e:9b:12:5f:52:3d:4f:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90e0e2fb-b856-4bab-b967-a8918ce1cb29
        Validity
            Not Before: Nov  3 13:00:22 2023 GMT
            Not After : Feb  1 14:00:22 2024 GMT
        Subject: CN=a62c19f8-ceb8-442c-a061-60633fa330c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:95:b1:88:1a:be:b2:62:5e:0d:58:c8:be:55:
                    07:74:ab:16:7f:cc:bb:f6:25:77:cf:78:5d:7c:17:
                    d0:24:b1:3f:fe:28:05:21:aa:90:be:51:ce:db:ed:
                    b3:d3:0c:95:c4:ef:65:7a:e2:3d:93:7c:a9:51:35:
                    62:ff:f1:5b:20:b7:d3:f4:87:29:0f:b0:a2:72:4a:
                    8b:b3:96:5a:70:f5:fe:c0:c9:c0:ff:ee:ba:0d:7b:
                    a1:9a:8a:bf:2c:58:c2:59:31:a3:20:1e:93:60:2a:
                    b9:b1:59:20:3a:44:e5:06:69:7a:48:e7:e9:24:8d:
                    0d:b9:0f:07:35:af:1e:ba:56:29:7f:02:ed:64:60:
                    8a:77:14:d1:48:9b:9a:64:d8:10:7b:7c:f1:fb:f9:
                    f6:f9:6a:60:f0:4d:dd:e5:36:db:0d:bc:d8:89:81:
                    f4:45:83:ed:5f:73:7c:e1:c4:40:b6:93:3d:1a:2c:
                    7f:46:15:41:06:b6:58:42:09:58:79:e9:7a:3a:be:
                    15:c6:c1:5f:53:f8:37:0b:86:eb:df:28:b8:88:61:
                    9c:37:05:3d:c5:78:24:a3:ab:de:e9:a5:18:45:6c:
                    cc:87:1c:12:f1:28:12:67:b6:99:e5:ef:6f:67:9b:
                    79:72:4e:8c:d0:b7:be:d4:32:1f:40:90:81:f6:1d:
                    77:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FD:95:76:46:91:A6:81:F1:1C:2B:56:A6:3F:BB:A6:EA:9B:F1:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29/27d73b30-cc3c-3886-ac1f-1cf38b1027dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29/90e0e2fb-b856-4bab-b967-a8918ce1cb29.crl

            X509v3 Authority Key Identifier:
                keyid:D9:F0:59:7D:DD:E5:0B:71:70:E9:D9:96:27:EB:07:0D:E8:54:20:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:66:7c:6c:8e:4c:77:20:db:cf:aa:4c:31:57:66:dc:21:c0:
         50:0e:36:42:df:52:32:3d:cf:c4:21:34:88:d0:39:5a:ba:70:
         38:35:c2:d3:fb:eb:19:8b:85:68:5f:11:39:fe:e5:3f:29:d3:
         39:0a:58:30:e3:43:b8:3c:35:0a:6b:59:4c:8e:e9:49:fc:1a:
         cb:fa:d7:40:32:7d:23:84:6b:1a:0f:a9:c2:8b:81:8b:1c:5d:
         03:32:a5:93:e0:f3:27:33:13:d6:85:92:b9:40:39:14:e9:13:
         d8:81:53:8e:17:2e:05:71:5b:cf:b9:ea:77:ca:89:1e:bf:96:
         09:47:34:cc:3f:23:63:1d:c9:29:66:2c:aa:7c:34:3b:99:f9:
         06:27:84:cb:44:38:b8:3c:07:65:ac:b1:22:34:cf:63:5a:85:
         a1:90:68:e6:15:92:dc:ce:c8:a7:52:e0:9a:80:50:48:37:db:
         29:56:0d:9c:cd:b8:46:bf:8f:48:8d:0b:8c:cd:20:31:40:a1:
         d2:5f:c8:ab:37:b2:69:67:ce:10:1f:2d:52:9b:b8:d3:73:30:
         1f:b4:cc:e6:32:73:d2:8d:96:d4:94:72:6e:ba:28:6d:a3:00:
         ce:70:cb:aa:38:a0:67:5d:44:24:de:43:c6:f6:5c:1b:e6:2c:
         a7:2b:1f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:07 2024 by rpki-client on console.sobornost.net