Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663/59f186c3-13f8-3361-9b4d-781b9abb4ab3.roa
File:                     59f186c3-13f8-3361-9b4d-781b9abb4ab3.roa (raw, json)
Hash identifier:          TbCdJhQiPKflW8nu7MywgV3840mLbuMvnOEBuYw0Gwo=
Subject key identifier:   66:86:3F:F0:B5:5E:C6:13:E8:0A:1C:F8:20:61:C8:4A:EC:09:B3:5F
Certificate issuer:       /CN=578540a4-eada-4f9a-b817-b3e81b5c2663
Certificate serial:       010D0C9F43285843D3736664A74CD72CEA6D5D00
Authority key identifier: 05:12:EB:24:36:F8:05:67:D9:A0:A8:BA:AF:E9:52:54:94:BD:23:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663/59f186c3-13f8-3361-9b4d-781b9abb4ab3.roa
Signing time:             Thu 09 Nov 2023 02:00:16 +0000
ROA not before:           Thu 09 Nov 2023 02:00:16 +0000
ROA not after:            Wed 07 Feb 2024 02:00:16 +0000
asID:                     396982
IP address blocks:        141.202.0.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:d3:73:66:64:a7:4c:d7:2c:ea:6d:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578540a4-eada-4f9a-b817-b3e81b5c2663
        Validity
            Not Before: Nov  9 02:00:16 2023 GMT
            Not After : Feb  7 02:00:16 2024 GMT
        Subject: CN=eceef0fe-125e-4062-84c9-c0eaba0526ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bc:66:7e:e2:e5:95:10:83:1b:17:24:7d:ce:
                    3d:75:08:64:76:70:eb:4e:96:b4:60:6e:7c:46:43:
                    7b:8a:f1:89:a6:46:5d:56:50:47:8a:b4:26:ec:45:
                    50:f5:a2:4a:47:bb:91:f3:80:49:7f:26:34:39:c7:
                    e8:ad:b3:d5:81:ae:69:e0:8c:dc:94:d5:0a:63:bf:
                    57:b4:36:cd:44:04:c2:14:5a:6c:80:4a:77:6e:97:
                    0d:b6:08:e1:ad:d7:a9:21:ff:80:00:1d:d3:62:3f:
                    93:37:55:c3:30:b5:ba:f2:d2:2c:3f:35:6f:58:c9:
                    95:55:50:b0:39:b4:5d:ad:41:2e:5d:8e:0e:ea:91:
                    6f:0e:11:8e:73:a6:41:b1:ab:fe:8a:0b:74:76:15:
                    ef:ab:e0:6f:93:10:39:bb:18:ae:cf:f8:84:0e:d2:
                    b8:5f:fc:18:9d:33:40:5f:f2:cd:b5:c6:3a:9d:a8:
                    f4:bb:91:26:d7:b0:f0:36:64:50:33:5a:21:d8:be:
                    52:70:27:96:33:f0:cf:fe:1c:f5:d4:05:e8:13:3b:
                    14:78:9e:99:34:90:f5:08:30:7f:cd:02:5d:ef:97:
                    0f:9d:66:4e:29:90:56:64:4c:79:8e:ab:0d:40:9f:
                    88:c5:dd:6f:35:09:fd:3d:08:7b:80:48:02:bf:00:
                    a8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:86:3F:F0:B5:5E:C6:13:E8:0A:1C:F8:20:61:C8:4A:EC:09:B3:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663/59f186c3-13f8-3361-9b4d-781b9abb4ab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663/578540a4-eada-4f9a-b817-b3e81b5c2663.crl

            X509v3 Authority Key Identifier:
                keyid:05:12:EB:24:36:F8:05:67:D9:A0:A8:BA:AF:E9:52:54:94:BD:23:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/578540a4-eada-4f9a-b817-b3e81b5c2663.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.202.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:9d:55:7c:42:0d:00:e1:d8:71:86:84:90:03:01:ea:8f:ff:
         af:b6:40:f8:95:cc:55:9f:1c:61:bf:36:16:1c:2c:fb:4f:0a:
         70:81:dd:51:bb:21:d9:33:1e:9d:02:dd:1b:58:1c:e2:2f:44:
         d0:52:cb:1d:be:01:4a:5c:e4:9b:1f:17:28:0c:e7:c0:ae:06:
         58:88:38:e9:00:ef:8a:a9:b2:7b:31:75:71:93:62:c2:41:9c:
         88:d5:ee:be:d2:7c:50:d3:ce:32:a4:b7:19:db:9c:d4:3d:37:
         81:fb:96:eb:87:98:3a:5b:79:85:74:64:db:b6:8b:ce:8c:4e:
         3f:80:da:30:b5:6f:31:d5:8b:ce:97:49:87:54:be:2c:0a:ab:
         29:7f:f8:01:62:7c:17:5d:cd:33:4a:41:d8:43:fb:20:f2:c4:
         be:e3:5f:f5:37:8f:aa:bb:87:c4:ee:be:05:10:51:84:35:c2:
         24:ce:c6:06:8f:af:d2:da:18:6c:6c:cd:74:1c:42:cf:8a:27:
         2e:88:b0:75:95:18:be:60:28:09:59:22:71:10:36:01:57:5b:
         5e:41:5e:32:08:c8:97:87:b7:2f:8e:d0:be:6a:dc:62:fb:81:
         d4:29:bb:c9:a4:f8:e7:05:46:f5:94:a9:ea:3c:a5:eb:7d:38:
         25:44:2e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:07 2024 by rpki-client on console.sobornost.net