Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/ed08e1e9-4b0b-3057-934a-b18e5d474afb.roa
File:                     ed08e1e9-4b0b-3057-934a-b18e5d474afb.roa (raw, json)
Hash identifier:          38WkoHLlc+aspXwnnnPrdh+8MM30YidOun+iHC/EngI=
Subject key identifier:   C4:4A:4B:31:76:C5:3C:0C:4A:09:BB:87:EC:9E:95:B8:D2:00:FF:1E
Certificate issuer:       /CN=f80f9298-8029-4285-89d7-27308341b2e0
Certificate serial:       010D0C9F4328584656D488CC33163D0202B08500
Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/ed08e1e9-4b0b-3057-934a-b18e5d474afb.roa
Signing time:             Wed 26 Jun 2024 13:00:35 +0000
ROA not before:           Wed 26 Jun 2024 13:00:35 +0000
ROA not after:            Tue 24 Sep 2024 13:00:35 +0000
asID:                     2639
IP address blocks:        160.32.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:56:d4:88:cc:33:16:3d:02:02:b0:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0
        Validity
            Not Before: Jun 26 13:00:35 2024 GMT
            Not After : Sep 24 13:00:35 2024 GMT
        Subject: CN=f9e81c53-b60e-4b84-988d-eac0b50bf9a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e2:dd:57:64:58:66:95:dc:60:4c:be:a1:94:
                    69:81:2d:7c:36:c0:f1:3a:da:aa:a4:93:30:05:31:
                    50:3a:8e:3a:77:82:fb:e5:29:0e:cc:82:95:a4:62:
                    a8:8e:79:ea:c3:83:90:68:d0:65:13:73:34:ed:9d:
                    21:df:41:81:90:eb:97:fa:6f:47:cf:6b:7f:fc:89:
                    17:57:bc:9b:92:c8:1f:97:b0:bd:29:4b:01:08:aa:
                    33:84:90:44:fc:7d:84:92:72:49:e7:01:25:44:0b:
                    3a:f5:ee:65:db:aa:54:05:4c:d2:98:d7:8f:c3:4f:
                    91:a2:a4:e0:d3:27:15:87:a3:2d:1a:52:e2:d6:f6:
                    d1:d0:16:ef:64:b7:7c:dc:be:4e:96:ce:73:d9:7b:
                    0f:32:73:5f:86:b2:f5:2b:d4:2d:28:00:4f:77:93:
                    95:46:2e:7d:d5:90:0f:b5:d2:20:f4:e7:31:8f:0a:
                    2c:14:64:ea:e3:4b:a3:ee:8f:4d:ee:f2:ca:56:dd:
                    72:b4:84:22:21:56:37:e1:6d:37:06:6f:a9:2e:81:
                    46:4f:85:47:6b:3a:f1:ed:32:ad:5a:13:c5:82:c3:
                    7b:ca:d7:c4:6b:bd:be:df:f5:17:10:1b:20:07:49:
                    63:53:e9:b4:6b:86:b6:c9:d2:69:21:e8:6e:89:40:
                    ca:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4A:4B:31:76:C5:3C:0C:4A:09:BB:87:EC:9E:95:B8:D2:00:FF:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/ed08e1e9-4b0b-3057-934a-b18e5d474afb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl

            X509v3 Authority Key Identifier:
                keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.32.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:54:a4:01:94:d9:3d:1b:15:8a:b9:90:2b:ca:7d:33:cd:ba:
         6a:73:76:6b:5c:6f:3c:bb:55:41:74:c9:1b:0f:86:29:ce:91:
         55:e3:3d:97:3c:19:0a:b8:a5:93:06:43:e1:3d:fe:33:ec:54:
         c9:3c:9f:8b:bd:7c:be:6a:2e:f9:9c:48:8c:a6:43:f9:17:fe:
         9a:fb:50:81:40:01:1b:07:be:04:93:91:98:71:82:c6:e5:ce:
         00:a6:08:d3:d8:be:0b:27:62:c1:a0:db:12:d4:06:bc:6d:f8:
         af:cb:3c:08:07:25:ce:da:ab:39:79:56:24:bd:55:74:34:88:
         53:c5:49:3c:d9:c6:78:35:da:b1:1d:2c:c4:1a:c2:0a:fb:3e:
         6f:43:f0:20:4a:f7:cd:09:2b:fa:53:39:82:45:44:59:2b:37:
         6b:eb:c4:2e:e9:9d:cb:e7:6b:7d:4a:94:84:b2:3b:20:1a:6c:
         a6:69:e0:90:c1:7e:6f:76:c4:3e:fe:ee:98:dd:51:14:02:fa:
         1e:de:a2:74:bd:b9:36:19:88:25:2f:6c:87:24:7a:75:dd:a8:
         0b:fd:b1:a2:50:85:d2:bc:ce:31:22:2f:bb:94:f8:c0:ff:cc:
         1c:28:cf:4c:7b:f8:80:a9:f5:29:ad:ea:2d:e4:32:5f:08:d5:
         85:6a:d7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 08:35:57 2024 by rpki-client on console.sobornost.net