Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/809f406e-ebaf-3ea9-84c2-89c2ec2c5c9a.roa
File:                     809f406e-ebaf-3ea9-84c2-89c2ec2c5c9a.roa (raw, json)
Hash identifier:          CLmxzam3KIIJRVIZpi9h5/XgxBTpA3hA6gx7JYKP0l0=
Subject key identifier:   40:B2:8B:F1:0D:9B:6A:16:8D:EE:2C:23:A7:9E:1D:B7:63:C3:7B:5E
Certificate issuer:       /CN=cfcccd62-c9ce-4ffb-9a64-2a45ff890f94
Certificate serial:       010D0C9F43285845F51E8D0B3205641ECBDFCA00
Authority key identifier: 65:7B:E1:EA:EC:93:E2:02:51:44:6A:AE:54:69:4E:A3:D4:7A:90:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/809f406e-ebaf-3ea9-84c2-89c2ec2c5c9a.roa
Signing time:             Wed 22 May 2024 13:00:33 +0000
ROA not before:           Wed 22 May 2024 13:00:33 +0000
ROA not after:            Tue 20 Aug 2024 13:00:33 +0000
asID:                     61317
IP address blocks:        216.252.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f5:1e:8d:0b:32:05:64:1e:cb:df:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfcccd62-c9ce-4ffb-9a64-2a45ff890f94
        Validity
            Not Before: May 22 13:00:33 2024 GMT
            Not After : Aug 20 13:00:33 2024 GMT
        Subject: CN=ca255732-e9ce-4ec7-9f59-7fecad9ed3ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:83:54:a9:fa:b7:9d:3c:29:12:d0:ae:dc:8e:
                    93:2f:66:0f:f0:f0:be:13:0d:9d:ef:56:73:f0:d7:
                    ef:82:a9:b9:65:94:5e:5e:8a:b0:d8:19:40:be:f0:
                    2b:c2:0a:c3:d9:ed:b3:96:39:41:ac:0c:24:b1:63:
                    10:f5:5e:eb:3e:3d:a3:39:08:97:10:3a:d7:10:af:
                    75:6e:9f:33:bc:10:b7:94:8a:f4:ec:34:fd:ec:82:
                    d9:92:89:9b:17:4b:57:93:31:3c:f4:69:8c:9e:4a:
                    c9:c4:b5:6a:16:28:9e:ca:e9:6a:1d:ae:6c:3c:b2:
                    55:e1:9d:b0:b1:b0:a7:fc:fb:09:32:dc:5e:6e:26:
                    51:65:cb:16:61:80:53:7c:cd:e8:85:65:bc:6f:2e:
                    b3:58:e0:dc:59:e4:1c:37:dc:2e:76:39:cb:d6:fd:
                    b7:f7:25:d8:e6:c1:bc:c5:80:a8:de:66:96:2e:cb:
                    ad:fe:c1:a5:04:db:6a:b9:ac:0e:3b:b4:cc:ed:75:
                    4b:0d:95:be:b7:eb:98:ef:18:22:21:22:90:e9:ec:
                    19:b3:fa:3b:b5:2a:db:b8:79:fd:44:90:b5:74:ef:
                    68:c1:cd:de:b8:9d:06:e3:35:84:f5:a5:a1:36:65:
                    82:f0:1e:c5:2d:f1:15:4d:5d:f5:de:39:1f:bd:e0:
                    f0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B2:8B:F1:0D:9B:6A:16:8D:EE:2C:23:A7:9E:1D:B7:63:C3:7B:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/809f406e-ebaf-3ea9-84c2-89c2ec2c5c9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.crl

            X509v3 Authority Key Identifier:
                keyid:65:7B:E1:EA:EC:93:E2:02:51:44:6A:AE:54:69:4E:A3:D4:7A:90:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cfcccd62-c9ce-4ffb-9a64-2a45ff890f94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.252.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:84:3e:bd:0f:52:31:62:6e:f1:0a:59:57:3f:74:f7:0a:50:
         0b:60:a4:c0:27:26:ef:3a:1a:fc:0b:99:99:6f:54:76:c6:b2:
         01:1b:2f:d2:d8:1f:ec:d6:b8:a7:4c:28:c2:ff:05:ef:c8:33:
         f0:5a:0e:2c:82:a8:47:44:e6:5a:e1:80:ae:c0:7b:c7:75:e7:
         7a:69:16:04:18:74:0f:94:69:75:9a:69:f8:41:36:0c:f3:9a:
         b0:af:31:f6:81:58:01:de:44:30:af:ad:a8:17:8e:8e:6e:c6:
         76:63:96:29:e0:86:14:c4:c3:f9:4a:ee:24:10:50:77:94:6e:
         d4:ac:0a:1b:e0:3e:85:57:b5:f9:f6:83:e4:3d:b8:97:de:5d:
         ea:71:40:58:35:fd:bf:bf:39:3c:24:85:5e:77:12:b8:fc:00:
         14:f6:20:0d:f7:be:77:42:8f:db:21:e2:e0:02:5b:0d:75:e6:
         4d:c2:4c:1d:04:f1:6a:9f:60:08:90:6b:31:fc:6f:db:86:3b:
         80:99:89:0c:49:a3:4d:74:bf:95:27:0f:e1:1a:a2:fc:90:60:
         4e:f3:ed:c8:d3:56:0d:bc:5a:df:21:78:df:a3:b9:82:a2:21:
         1a:20:12:1f:1c:aa:ea:24:71:a2:83:7a:fd:1b:d3:f2:9b:19:
         85:c3:75:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 04:35:17 2024 by rpki-client on console.sobornost.net