Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/caa730f0-47ab-305d-bb9f-e92713a91986.roa
File:                     caa730f0-47ab-305d-bb9f-e92713a91986.roa (raw, json)
Hash identifier:          WFooCGzmfC8EzH3OYEcNZMTQ7qBfMYJGtFudyyBcY8o=
Subject key identifier:   2D:4D:34:88:56:D3:A4:8F:4D:92:BB:72:FF:29:0A:B0:8C:95:0A:33
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584705502CAA66A9FBD81C813F80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/caa730f0-47ab-305d-bb9f-e92713a91986.roa
Signing time:             Wed 28 Aug 2024 01:00:31 +0000
ROA not before:           Wed 28 Aug 2024 01:00:31 +0000
ROA not after:            Tue 26 Nov 2024 02:00:31 +0000
asID:                     834
IP address blocks:        216.122.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:05:50:2c:aa:66:a9:fb:d8:1c:81:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 28 01:00:31 2024 GMT
            Not After : Nov 26 02:00:31 2024 GMT
        Subject: CN=0dec6890-ba9b-4c1a-bb4f-a4e9e03aff76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:47:7f:97:ae:09:ed:a1:d9:57:c3:2c:ac:89:
                    2a:48:52:0d:0d:e9:41:f9:79:fd:9e:bd:b4:ac:c7:
                    0a:16:4e:a3:a9:f1:7d:f3:a2:af:82:91:a4:bc:86:
                    23:54:7b:11:a8:12:78:32:d0:0e:78:8d:77:81:bf:
                    1d:be:dc:64:91:a1:62:7d:78:ff:a0:60:d5:d4:71:
                    77:77:a1:1a:3a:f4:a0:b7:bd:0b:c2:42:25:b9:c1:
                    32:96:d5:9b:4b:db:74:45:2d:79:e1:f8:ef:25:7e:
                    28:67:61:9b:55:23:8d:cf:7e:33:6d:18:25:f3:17:
                    20:d7:05:73:b7:e1:23:4f:fd:61:a5:60:7f:33:c5:
                    2c:95:bf:2e:52:2f:c5:4a:e9:d8:e1:7b:9b:f6:7e:
                    89:ae:6b:89:33:00:b4:d8:0b:80:e1:d8:04:3c:f0:
                    e2:18:a6:36:b1:db:71:79:24:fb:0f:dc:31:88:41:
                    40:da:e5:4d:d0:e2:f3:8a:03:c5:64:d8:65:19:c6:
                    04:94:61:61:34:85:c8:d8:d9:d9:ed:3d:9c:3b:67:
                    07:ca:ec:b4:38:bc:e4:b2:5f:e5:35:5a:cb:70:41:
                    e2:e2:bf:13:5f:9a:b9:52:fa:a7:c3:14:30:4b:bf:
                    ad:12:ba:46:83:66:9a:bd:9b:8e:1c:b5:fd:b2:cb:
                    2d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4D:34:88:56:D3:A4:8F:4D:92:BB:72:FF:29:0A:B0:8C:95:0A:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/caa730f0-47ab-305d-bb9f-e92713a91986.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:e8:34:e4:d8:cb:ba:75:8c:4a:f0:78:25:4b:81:1a:18:39:
         99:59:3c:9f:7d:4b:72:e9:f2:c8:a0:d1:c8:df:7d:d3:54:bb:
         08:b9:7c:9c:d3:1f:37:68:cd:2b:ba:7e:95:d3:76:f0:2b:c7:
         39:f9:53:e1:bc:e0:c1:a5:fd:79:26:b9:86:9c:55:fc:25:fb:
         67:66:7e:1a:b1:73:c1:aa:fa:7b:e6:0d:ae:a8:e4:39:3c:46:
         c7:cc:fb:93:7a:01:4d:e2:1c:7c:d0:72:5f:4d:06:6d:9c:a3:
         a1:4f:b5:f0:aa:a3:23:22:f6:76:76:37:b4:1b:64:fc:03:c2:
         f1:fe:8b:f8:24:a6:26:96:f7:64:6d:a0:69:71:4d:55:d4:d5:
         db:65:f7:f0:db:b1:59:a4:95:e2:14:c4:ac:8c:40:f3:2c:d0:
         fa:79:e0:d2:39:83:e8:32:dd:e0:8b:c8:85:e5:dc:80:a3:b0:
         9e:d5:36:36:ef:68:00:da:10:44:1d:27:e6:20:34:c2:37:d2:
         41:b2:8a:b9:4b:86:5f:45:c4:7f:6c:d6:32:b9:f4:a7:ee:65:
         ff:8d:d0:b3:50:2e:2c:41:6e:82:32:dc:47:ea:59:c2:6a:50:
         d7:e0:e1:17:7d:72:7d:1d:4c:87:dd:84:2c:e1:8b:7c:a7:cb:
         3d:b7:81:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 04:30:36 2024 by rpki-client on console.sobornost.net