Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663/1e1de2f3-39c9-3234-a0ae-2bc343a0e02a.roa
File:                     1e1de2f3-39c9-3234-a0ae-2bc343a0e02a.roa (raw, json)
Hash identifier:          c8iddj/8SxmkOVw9q28RNDhLr4guMShYvs5NAvF5Iqg=
Subject key identifier:   6D:79:59:C9:90:AC:79:AB:08:95:EC:AC:B2:71:8D:B7:DE:B9:0D:29
Certificate issuer:       /CN=578540a4-eada-4f9a-b817-b3e81b5c2663
Certificate serial:       010D0C9F43285843E9C8E9A1D586F03611CBD7F0
Authority key identifier: 05:12:EB:24:36:F8:05:67:D9:A0:A8:BA:AF:E9:52:54:94:BD:23:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663/1e1de2f3-39c9-3234-a0ae-2bc343a0e02a.roa
Signing time:             Fri 17 Nov 2023 02:00:17 +0000
ROA not before:           Fri 17 Nov 2023 02:00:17 +0000
ROA not after:            Thu 15 Feb 2024 02:00:17 +0000
asID:                     26282
IP address blocks:        130.119.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:e9:c8:e9:a1:d5:86:f0:36:11:cb:d7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578540a4-eada-4f9a-b817-b3e81b5c2663
        Validity
            Not Before: Nov 17 02:00:17 2023 GMT
            Not After : Feb 15 02:00:17 2024 GMT
        Subject: CN=9cfe4f6d-552e-4353-856e-49709823f4e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c0:60:2a:88:e3:96:3a:ab:98:97:c1:b6:6e:
                    2a:6b:d8:f9:c3:49:6a:e3:ef:56:f1:58:10:8b:35:
                    a9:cb:49:a5:d1:4d:50:67:cf:be:88:42:58:b3:58:
                    57:dc:1d:6a:90:23:c1:94:09:ab:a3:7e:c4:80:f9:
                    83:9c:57:79:3e:49:6a:3e:a1:5a:47:84:e6:94:27:
                    d3:8a:8a:68:a5:ae:e4:54:db:2f:b1:d9:0a:bc:b7:
                    79:cc:14:d4:83:1e:5a:90:a1:ad:a8:1f:88:64:56:
                    03:10:64:e4:72:56:50:f2:c4:a0:20:95:7e:e4:f9:
                    00:31:f0:e9:c0:71:00:f2:b9:10:9f:cf:f2:96:b1:
                    84:4e:67:a3:9f:1c:31:92:0e:ea:6e:9c:46:ad:4d:
                    78:d0:f1:71:b6:df:e4:77:85:b8:8a:72:18:90:65:
                    3e:8b:2a:5b:4c:58:e3:5a:a9:b4:5b:60:c4:d4:9e:
                    3c:87:20:2f:3b:a9:89:fd:21:a4:be:2f:d6:da:80:
                    6b:4b:ef:7a:72:ff:8e:43:16:13:d3:70:04:1f:5a:
                    42:a0:68:c2:26:a0:d2:5c:f7:af:38:a0:cb:22:71:
                    77:76:07:05:35:42:5f:e4:a0:87:4e:ba:b4:4c:dc:
                    b2:63:4d:10:c0:87:95:ba:ed:aa:7d:c4:09:ec:88:
                    cd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:79:59:C9:90:AC:79:AB:08:95:EC:AC:B2:71:8D:B7:DE:B9:0D:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663/1e1de2f3-39c9-3234-a0ae-2bc343a0e02a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663/578540a4-eada-4f9a-b817-b3e81b5c2663.crl

            X509v3 Authority Key Identifier:
                keyid:05:12:EB:24:36:F8:05:67:D9:A0:A8:BA:AF:E9:52:54:94:BD:23:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.119.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:5c:21:29:f8:a1:b5:8c:65:ea:23:2a:af:33:4d:bd:44:08:
         62:21:e8:fc:0b:bb:21:13:3f:e9:2f:aa:83:50:60:45:18:cc:
         4b:b5:00:e9:01:42:58:0e:a9:7b:5f:26:fe:6c:94:d4:d3:f0:
         96:d0:ba:61:eb:61:0f:4b:31:2a:d3:42:cc:56:9b:66:48:f2:
         1a:1c:dc:c3:80:06:b8:2e:8d:bf:50:89:f3:5a:a0:3a:fa:db:
         5c:36:a6:ce:bc:0a:ad:2e:15:9d:39:17:76:46:2d:a0:ee:fc:
         11:ba:06:da:36:b8:bc:2a:85:fe:5f:d5:6a:71:a2:5b:e3:7f:
         ee:f3:b9:3c:4c:d6:53:47:fb:68:b9:08:fa:5c:70:21:fa:69:
         9f:4a:3e:0f:25:d5:d8:1b:cc:8e:41:41:04:7b:e7:34:78:67:
         d3:f3:73:18:04:35:ee:da:f4:de:fb:ab:4d:4f:0e:21:d9:b6:
         68:3f:a7:90:9e:17:a8:bb:0a:2d:53:3e:ab:0c:74:7a:59:59:
         f1:b8:f5:0f:7b:53:7b:e0:21:49:10:50:04:0e:29:43:35:88:
         a6:8c:0c:94:10:27:4f:2d:a9:4d:06:2d:22:83:10:13:2a:9c:
         54:79:10:dc:8b:d5:8e:16:9a:e4:4c:08:c4:aa:31:06:e7:9c:
         68:15:17:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:07 2024 by rpki-client on console.sobornost.net