Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/1df2def2-4ac0-3dee-9f98-9e0b6ff741ac.roa
File:                     1df2def2-4ac0-3dee-9f98-9e0b6ff741ac.roa (raw, json)
Hash identifier:          Dka2GjkONr8kaekPYl8J4LeKirg78HQT9nywODhjHaw=
Subject key identifier:   A9:78:DA:80:AF:CC:81:E7:1C:9D:9E:46:1F:EB:BD:3D:A3:09:C7:66
Certificate issuer:       /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial:       010D0C9F432858479277DDE3D8CA833860AAD280
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/1df2def2-4ac0-3dee-9f98-9e0b6ff741ac.roa
Signing time:             Thu 17 Oct 2024 14:29:29 +0000
ROA not before:           Thu 17 Oct 2024 14:29:29 +0000
ROA not after:            Wed 15 Jan 2025 15:29:29 +0000
asID:                     214411
IP address blocks:        65.87.24.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:77:dd:e3:d8:ca:83:38:60:aa:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
        Validity
            Not Before: Oct 17 14:29:29 2024 GMT
            Not After : Jan 15 15:29:29 2025 GMT
        Subject: CN=4c573b5d-7a1c-4a82-9494-69cc245ca13e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:0f:6c:63:0a:49:b5:00:59:2b:df:bc:39:5a:
                    fd:76:8d:cb:2e:03:9b:de:f1:48:ee:53:de:7f:90:
                    cd:45:3b:47:6e:7d:be:e9:9c:72:8c:75:b5:10:1d:
                    35:61:96:2a:1f:96:bf:46:28:51:7a:3b:fb:fe:e5:
                    48:f7:41:ff:d1:1d:a1:6b:19:31:bb:25:48:53:01:
                    5e:e6:ab:a6:88:a0:7b:f3:1b:bf:c1:97:ca:d8:b4:
                    ae:f7:69:d9:54:34:ef:17:0c:b5:e5:4d:1d:36:0b:
                    b2:f0:a5:f8:45:e7:14:f2:07:b5:77:ec:97:7b:b6:
                    19:1a:2c:ce:f5:bc:31:13:3b:6d:89:a1:dd:4a:68:
                    76:40:6b:af:50:51:e2:02:b0:b6:ec:70:08:0e:fb:
                    04:fc:63:95:54:c3:14:36:99:eb:a4:64:63:ea:c0:
                    3e:aa:64:48:3a:92:0b:63:33:1b:74:aa:15:6f:fc:
                    87:54:e1:59:90:3a:2b:92:90:c1:1d:b4:d2:9f:f8:
                    7f:8a:96:df:85:03:e2:04:6f:9a:c1:42:8c:71:bb:
                    6f:7c:79:18:82:bd:6b:a0:53:62:e7:b1:c9:b4:76:
                    3d:60:96:2d:65:63:3f:66:13:49:c1:bd:48:40:ec:
                    32:b4:cd:bd:4d:4a:4c:15:1a:c5:62:cb:4b:51:1b:
                    41:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:78:DA:80:AF:CC:81:E7:1C:9D:9E:46:1F:EB:BD:3D:A3:09:C7:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/1df2def2-4ac0-3dee-9f98-9e0b6ff741ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl

            X509v3 Authority Key Identifier:
                keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:f4:05:72:0d:fa:5a:1a:43:8a:50:c9:30:c0:90:da:fd:3f:
         17:01:92:18:8c:ae:f6:f9:0a:53:89:25:57:f1:3c:06:69:04:
         3c:fc:ac:1d:eb:c3:ea:f6:02:12:5a:5a:6c:b1:84:f7:ef:96:
         70:ee:aa:71:6b:f6:d3:90:78:50:d9:10:cb:07:bd:0a:98:ae:
         ee:a6:43:55:bf:94:bd:4f:2c:06:31:fc:bf:ad:4c:45:92:3f:
         e7:45:62:81:db:10:9f:e4:af:bd:64:94:30:b3:5c:69:46:4c:
         53:c9:8a:05:38:12:f3:61:5f:4d:ae:92:e0:08:b2:a9:d2:33:
         40:3d:45:02:82:d0:f3:c1:36:de:b9:fb:a7:27:54:69:c2:50:
         68:f4:ad:69:e2:0e:02:7f:bd:0b:4e:08:c6:a5:0c:32:6a:54:
         e0:50:dd:20:33:af:24:79:f8:ff:90:2b:61:bd:00:dd:7b:f9:
         c7:ad:18:a8:e6:39:d4:be:b1:8c:de:19:0d:52:47:9d:c4:aa:
         a7:cf:2f:e0:47:a3:56:dc:58:5f:a6:e0:21:6e:14:38:6c:5f:
         74:fb:3a:d6:00:c6:1e:f8:0f:e6:6e:8b:57:84:62:36:f1:6f:
         41:d5:72:ba:c2:30:55:37:96:a4:b8:ee:1f:72:73:7e:ed:fa:
         41:5f:03:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 19:02:03 2024 by rpki-client on console.sobornost.net