Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/c107e672-f20e-3995-b2db-bd0a8da7dc0c.roa
File:                     c107e672-f20e-3995-b2db-bd0a8da7dc0c.roa (raw, json)
Hash identifier:          gYUZdGh/dBYLaw8kHmochiYMRmxRdGWw6/7Aj7xceB8=
Subject key identifier:   CD:14:C6:C5:AA:8A:D5:90:0C:8D:B4:F2:3A:EF:45:99:68:52:95:F5
Certificate issuer:       /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
Certificate serial:       010D0C9F43285847F584EE6FEEC5E1A899B9BE00
Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/c107e672-f20e-3995-b2db-bd0a8da7dc0c.roa
Signing time:             Fri 22 Nov 2024 02:00:40 +0000
ROA not before:           Fri 22 Nov 2024 02:00:40 +0000
ROA not after:            Thu 20 Feb 2025 02:00:40 +0000
asID:                     19437
IP address blocks:        199.101.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f5:84:ee:6f:ee:c5:e1:a8:99:b9:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
        Validity
            Not Before: Nov 22 02:00:40 2024 GMT
            Not After : Feb 20 02:00:40 2025 GMT
        Subject: CN=e3711672-a0b3-447b-ba65-b56ab53eb6ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1f:da:23:0d:7e:05:bd:02:a2:6c:92:60:4f:
                    3f:52:1f:e1:09:6a:b3:31:14:d8:f0:b8:fa:08:b8:
                    98:3f:a5:d4:17:bb:ec:3d:c8:1d:04:fc:11:7a:3f:
                    96:7f:75:c5:dd:3c:ed:5e:bf:28:69:35:60:5d:af:
                    da:cf:9a:81:7a:03:5f:b9:d6:64:f0:8a:5a:3e:f1:
                    0d:74:0d:71:c4:2f:ab:2f:5b:d1:a5:2d:13:0f:ee:
                    9e:37:70:86:81:ca:8d:d3:b1:7d:68:6b:d7:64:c5:
                    54:d8:20:5d:5e:60:71:b4:69:e3:14:f5:9a:8c:55:
                    64:dc:3b:30:2f:8c:dc:cc:aa:50:bb:35:5a:9f:93:
                    fb:f7:b2:82:bb:3d:1c:bd:cd:53:93:72:1b:49:61:
                    63:eb:e7:eb:91:cf:b5:24:52:ca:40:e0:c1:4c:2d:
                    d3:ca:00:13:be:93:52:48:06:66:4c:a4:0b:82:f3:
                    ea:38:0b:f9:56:8c:9a:1e:9d:c3:6d:60:3f:17:ae:
                    1b:ac:39:89:b2:39:cf:f8:cf:27:6c:1b:b2:0a:e7:
                    7e:d0:1f:6c:31:2c:19:aa:31:dc:1f:ba:0a:64:e1:
                    3c:27:cb:b7:0b:a5:4d:a1:f1:ea:9b:b7:03:d2:a8:
                    65:89:07:63:98:52:e8:88:49:17:bc:74:f2:60:5e:
                    d7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:14:C6:C5:AA:8A:D5:90:0C:8D:B4:F2:3A:EF:45:99:68:52:95:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/c107e672-f20e-3995-b2db-bd0a8da7dc0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl

            X509v3 Authority Key Identifier:
                keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:2d:de:c7:f5:00:57:1b:26:66:0f:aa:e7:82:61:e5:3b:50:
         82:91:7d:da:5c:bc:a3:46:86:e1:29:ba:b4:78:d5:fd:59:17:
         50:e4:c4:0b:0b:da:cd:c6:0e:1f:c0:34:83:13:aa:f0:9b:a2:
         97:71:49:e9:44:1a:6f:4c:0d:86:39:d3:54:f2:8b:d7:4b:20:
         76:25:e7:a7:ce:1a:5e:53:72:2b:e3:42:36:eb:c6:53:c1:a5:
         a6:d3:bc:6a:bc:a4:47:04:61:f4:d0:c9:83:23:9b:8d:93:b8:
         9c:51:8d:14:e1:23:f2:e1:4d:e8:98:5d:20:6a:46:49:96:66:
         9e:53:a7:40:41:cf:21:a5:10:a7:54:a3:ec:43:da:ec:d2:4c:
         b1:c9:82:ba:c0:c3:f1:30:6c:c9:2c:48:d6:92:3a:a7:77:f9:
         a8:1a:7a:04:65:73:f3:a0:8c:c5:99:5e:97:ac:af:dd:f6:75:
         71:00:26:07:a9:b3:35:24:9d:96:cc:32:89:76:e7:17:10:06:
         f0:ec:f0:3e:ef:d3:ea:37:4d:17:9d:72:09:81:3e:ef:13:d3:
         d6:c8:55:b3:73:d5:dc:86:d8:ea:0c:ab:a2:2a:0e:80:21:a4:
         38:55:6e:63:e0:ac:27:d7:56:18:d2:6a:7e:a6:32:84:27:e0:
         7b:40:b1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 19:04:25 2024 by rpki-client on console.sobornost.net