Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ed970e0-1f12-33a9-9ce6-8e4904102a46.roa
File:                     8ed970e0-1f12-33a9-9ce6-8e4904102a46.roa (raw, json)
Hash identifier:          PnHAx5uqEaPUocaTHoUm5N0FzL7Pe5oYbB12/JInhB8=
Subject key identifier:   7D:16:0A:17:D1:0E:5B:AC:9C:20:C8:DF:88:F4:5C:4B:0B:A5:D0:A0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328576D51CC73C042CFC166A33F54F1
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ed970e0-1f12-33a9-9ce6-8e4904102a46.roa
Signing time:             Tue 23 Oct 2018 23:25:28 +0000
ROA not before:           Tue 23 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        70.132.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:a3:3f:54:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 23 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=961f391e-e287-4a28-8521-f1fa2a624485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:63:6c:7b:1c:8b:17:f8:f8:62:d9:77:bf:6f:
                    5b:22:40:35:3f:e6:af:5b:df:20:05:87:c8:e1:85:
                    fd:b8:10:d1:ce:c6:fb:2f:dd:8a:b8:c0:87:27:a9:
                    14:e3:11:fa:bb:fd:78:9e:ba:40:73:8c:c5:51:d0:
                    71:46:d3:ab:c6:45:16:64:29:0c:f9:32:9a:de:68:
                    d5:48:42:71:54:a3:c2:9c:fc:90:ec:e6:5f:55:94:
                    72:a1:9c:be:3c:60:22:21:e1:13:6f:12:63:dd:17:
                    77:4a:dc:55:f5:b7:f0:2b:6d:21:15:88:12:6d:0a:
                    be:29:b8:67:5e:69:6d:2f:6c:1d:c6:b8:06:d2:76:
                    16:f8:e4:1f:b0:4e:e1:3e:d6:42:c2:11:1c:cc:8d:
                    5d:5b:24:21:05:fc:3e:1f:3a:3b:9e:01:a5:3f:ac:
                    27:d0:29:68:24:6b:c5:5b:0f:5c:97:65:03:ab:6c:
                    fd:40:4f:9e:b1:4b:24:cb:6a:bd:1a:3a:0a:f0:bf:
                    43:a1:1b:ae:14:d9:37:8b:7f:60:db:ed:03:60:93:
                    49:d5:e9:38:e1:ed:2d:cb:b9:d6:ab:1d:12:87:df:
                    7a:3e:70:ee:9b:e5:77:50:69:9b:a6:ab:a0:34:c7:
                    48:17:bf:7f:d6:cf:b2:61:2f:a7:c8:a8:17:e0:d8:
                    21:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:16:0A:17:D1:0E:5B:AC:9C:20:C8:DF:88:F4:5C:4B:0B:A5:D0:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ed970e0-1f12-33a9-9ce6-8e4904102a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.132.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:f7:7a:5d:1a:c3:ce:3c:87:91:0a:0e:24:3c:4c:27:a3:36:
         f4:6e:d3:62:28:ff:41:7c:d2:d8:91:11:0e:9e:a2:84:73:f5:
         ef:30:49:68:2c:4b:0a:64:b3:b1:36:50:b1:f6:c4:c0:21:06:
         87:e0:81:6c:24:bc:0e:90:9b:fc:b7:d8:c6:94:1a:2a:d1:98:
         ee:08:e7:64:f4:76:57:c0:51:d1:3c:59:e3:d4:9c:0b:ed:cb:
         30:80:dd:74:f9:2f:51:d0:8f:8b:3c:c0:ea:dd:8b:29:23:9e:
         e5:02:ca:c5:e9:b4:ca:fe:68:ab:f8:ec:9f:e0:67:59:9a:78:
         01:7a:b9:01:e3:67:9e:ea:af:f6:61:04:0c:88:d2:79:d2:9c:
         63:da:85:ff:b7:6b:49:6e:8b:03:37:f7:72:54:b8:94:9d:61:
         27:dd:34:7b:5d:bb:85:fd:6a:1f:2d:e4:21:67:2b:38:21:3d:
         ae:49:8c:6a:d7:2a:c8:86:2a:7a:55:5d:b9:89:c3:0b:0f:58:
         dc:df:f9:7b:4a:e2:4b:8d:86:6f:b3:39:1a:5b:99:7a:f8:c9:
         93:24:a4:59:9f:45:48:1c:b4:25:f9:90:18:59:23:73:91:c7:
         bc:70:82:e8:66:61:67:65:2c:8f:00:fe:96:47:56:50:d6:96:
         11:61:0a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:26:06 2023 by rpki-client on console-fra.rpki-client.org