Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/c86a5fd5-f02f-382a-b563-73a588f7427d.roa
File:                     c86a5fd5-f02f-382a-b563-73a588f7427d.roa (raw, json)
Hash identifier:          d5nKKiRsywLRlvTAz3D7zn/hS/UCTWJEm9V0BUlkcTk=
Subject key identifier:   A3:79:77:6C:CC:01:F4:B0:29:ED:FB:CF:DE:28:C0:92:BE:BF:7E:E7
Certificate issuer:       /CN=d3237408-0888-4b1f-bed5-a45886656401
Certificate serial:       010D0C9F4328584680B4D8BA024294DD70C17D00
Authority key identifier: E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/c86a5fd5-f02f-382a-b563-73a588f7427d.roa
Signing time:             Thu 11 Jul 2024 13:00:34 +0000
ROA not before:           Thu 11 Jul 2024 13:00:34 +0000
ROA not after:            Wed 09 Oct 2024 13:00:34 +0000
asID:                     212271
IP address blocks:        208.65.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:80:b4:d8:ba:02:42:94:dd:70:c1:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3237408-0888-4b1f-bed5-a45886656401
        Validity
            Not Before: Jul 11 13:00:34 2024 GMT
            Not After : Oct  9 13:00:34 2024 GMT
        Subject: CN=350b7c3f-624d-4d3a-8cda-8ee0ebe037f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2e:f5:5a:81:7c:a3:64:4c:3a:9f:f7:31:31:
                    01:3a:11:ad:de:e2:18:c1:26:7f:49:31:8a:64:11:
                    38:83:f4:0f:40:b0:02:b6:a3:b9:fc:18:3f:14:8b:
                    f2:cd:f1:74:82:dd:d4:a6:0e:2b:0d:3e:f5:6d:b5:
                    fe:79:55:cf:36:f2:34:a1:33:49:1e:6a:82:9a:62:
                    16:ef:38:e8:e1:5c:38:4f:11:08:d5:9b:14:30:0e:
                    08:e3:56:50:78:97:02:77:96:1b:ec:d9:f0:a1:f1:
                    cb:51:64:94:47:a5:35:a5:40:7e:bf:b1:97:66:95:
                    8b:a2:51:c4:fc:25:52:fd:37:5c:b7:ae:13:77:b2:
                    a9:55:98:ea:bc:d1:da:f3:c0:12:c9:2e:e0:a8:ff:
                    ba:8c:00:c6:a3:37:56:07:cd:73:72:fe:fc:1a:ee:
                    60:fb:ae:42:e4:b5:ff:ca:38:69:18:c1:14:01:c3:
                    4d:20:53:fc:f0:b6:bd:81:7b:a8:73:f3:aa:67:33:
                    de:f3:9d:eb:18:66:0e:4e:d5:91:c7:bd:6f:f4:47:
                    2e:f8:7e:fc:e2:4d:83:c6:8d:75:2e:f0:70:00:29:
                    33:2d:28:86:59:31:f4:9c:80:cf:ed:cf:e7:00:32:
                    55:6e:1a:da:0a:ea:55:c1:ea:e4:fc:0e:d4:57:5f:
                    f4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:79:77:6C:CC:01:F4:B0:29:ED:FB:CF:DE:28:C0:92:BE:BF:7E:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/c86a5fd5-f02f-382a-b563-73a588f7427d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl

            X509v3 Authority Key Identifier:
                keyid:E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.65.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:67:82:80:c7:64:af:f3:f1:b2:c4:3b:2d:27:90:1e:01:30:
         27:3c:7b:55:a9:68:fc:dc:ef:1b:0f:e0:26:0e:9b:16:4f:69:
         ac:e2:b7:71:21:27:16:19:2d:8f:72:af:82:ff:b0:40:04:31:
         6b:96:ce:bb:7a:76:3b:00:93:3e:24:a6:16:49:1b:bb:f1:fc:
         ec:e2:11:cc:1f:19:ee:20:fd:be:e2:4d:17:85:19:89:3d:62:
         56:83:cd:fe:60:1a:81:c2:8d:25:b8:a0:d5:60:32:d9:02:1b:
         00:35:87:7c:c4:15:9f:ec:8f:d8:a7:47:79:70:e5:5a:60:14:
         9f:38:e1:a3:52:09:eb:76:b2:37:11:ea:66:30:f8:73:ba:1e:
         44:d3:e2:cd:cb:d7:dd:ac:c0:9e:5e:d8:83:48:46:f7:a9:fc:
         d3:b9:09:bc:4a:4e:df:d6:e0:3c:d1:4a:ca:37:eb:0d:ba:8e:
         58:6c:4a:15:d5:88:52:78:f5:34:3b:da:c5:08:61:34:04:47:
         e0:d6:f4:74:aa:4f:07:59:cb:3d:8b:89:f8:0b:61:c2:70:30:
         46:36:81:d9:35:2c:4b:5f:cd:ed:1b:b8:53:b4:18:8d:76:f9:
         be:d1:df:4b:a4:74:43:9b:b1:11:18:a5:e6:05:8b:e9:21:7e:
         69:e3:38:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 08:36:18 2024 by rpki-client on console.sobornost.net