Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/6d39865a-e65c-32b5-9bc6-6c75bd50a357.roa
File:                     6d39865a-e65c-32b5-9bc6-6c75bd50a357.roa (raw, json)
Hash identifier:          +S2Ql/1PAgx5nQe+F/ONdZojyTbNQy/lJnbU0ZG1AAo=
Subject key identifier:   05:F4:54:E0:BD:92:2C:F9:B3:39:5D:09:3D:A8:3D:39:7D:AD:82:A6
Certificate issuer:       /CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Certificate serial:       010D0C9F4328584797E130231025AAA8DDB98180
Authority key identifier: E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/6d39865a-e65c-32b5-9bc6-6c75bd50a357.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     31786
IP address blocks:        199.253.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:30:23:10:25:aa:a8:dd:b9:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=bd4a783b-94f5-4284-bde8-04e4c6a7b0c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4e:45:a0:e7:9e:f5:83:32:74:fc:c8:71:dc:
                    76:f6:9f:e1:09:57:e4:1a:d1:2b:99:53:15:f6:9e:
                    aa:b6:df:0e:6c:92:12:a1:b7:a8:69:c1:7f:7d:e6:
                    e7:9c:28:7c:6a:7c:f9:18:e1:95:94:e7:82:17:a1:
                    b0:03:ec:9c:b5:10:ae:60:70:6e:7a:3f:58:50:72:
                    16:76:7d:da:46:25:e4:7a:a1:74:45:82:99:67:56:
                    9e:48:a8:6a:fd:87:89:e7:10:e7:fc:58:8f:34:28:
                    59:ad:c3:92:e9:98:f6:a1:5d:85:54:56:da:50:ed:
                    cc:23:8c:ff:26:a5:be:f5:fa:5a:7c:ad:45:e3:06:
                    0b:1e:b6:0d:d5:05:27:bb:de:e6:10:fb:bc:8e:34:
                    dc:ef:d3:1a:10:b2:10:f7:5e:28:1a:f9:25:aa:8d:
                    d7:d0:c0:e1:7a:a0:ec:6c:07:4f:89:c1:b2:88:6f:
                    d1:d8:9e:ef:f3:39:ca:ad:64:53:41:18:b9:2f:a0:
                    73:0e:e1:49:99:b2:4a:af:c6:8b:be:94:42:d1:4e:
                    62:28:2e:e9:90:1c:57:85:7a:54:c9:b6:11:bb:1d:
                    c5:13:4e:f1:65:ab:51:fe:0a:94:cf:3a:fb:72:a1:
                    70:f8:b6:8a:f1:14:7b:c4:74:38:5f:61:a3:25:ce:
                    54:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F4:54:E0:BD:92:2C:F9:B3:39:5D:09:3D:A8:3D:39:7D:AD:82:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/6d39865a-e65c-32b5-9bc6-6c75bd50a357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.253.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:48:31:61:3e:c4:36:80:9f:dd:44:49:f0:bf:2a:5f:fd:23:
         75:39:a7:95:58:35:ab:44:2b:ed:6a:f6:b2:e8:de:87:f3:45:
         76:62:01:73:33:e5:13:a8:b4:bc:1b:27:42:75:54:e2:b7:00:
         98:ce:fa:10:5b:a7:46:36:b9:91:f5:c8:a8:dc:3c:2b:d8:5f:
         8e:fa:a3:03:99:cf:e4:1e:26:40:e6:0c:0a:e4:91:1e:bf:77:
         c2:71:30:bd:e3:15:f3:ff:6c:43:fb:9b:b1:10:fa:7b:ea:e4:
         5e:20:69:62:f1:18:14:9e:19:a4:5f:c2:45:3b:ec:90:f8:4d:
         ff:3d:d3:64:cf:c9:d1:f9:5b:b6:80:2d:a3:a3:af:6a:b4:76:
         66:00:2f:7e:17:04:6c:43:17:9e:42:95:45:67:5d:6a:dc:f1:
         d9:35:c7:40:9e:47:88:64:09:62:1a:3e:82:40:71:78:e4:8f:
         66:d3:cd:bc:cf:2d:a6:d8:f2:2c:b4:c5:0c:63:c1:d7:b7:cc:
         90:68:b0:44:14:4b:f3:72:50:b0:3d:aa:fe:5e:aa:dc:c8:77:
         1a:14:de:e4:88:62:22:58:2d:f8:a1:76:74:22:18:6f:9c:92:
         cd:3a:44:f3:fb:53:3c:3f:03:bf:46:8c:eb:6e:72:d8:ad:89:
         f2:be:87:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 19:04:17 2024 by rpki-client on console.sobornost.net