Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a0638e12-ca52-466e-b33b-46058f96c411/dce6cbb4-1dbf-3f9d-af1a-ee3d19b4a166.roa
File:                     dce6cbb4-1dbf-3f9d-af1a-ee3d19b4a166.roa (raw, json)
Hash identifier:          SW2R9GSvJRt5AszqAxvA4/ZMa9ZChN1kRbpp5mimAGo=
Subject key identifier:   27:AD:C2:96:6C:84:64:89:BA:B7:1B:3E:18:D3:2E:D4:A3:33:85:E9
Certificate issuer:       /CN=a0638e12-ca52-466e-b33b-46058f96c411
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732F878210
Authority key identifier: FC:2D:7D:9A:33:E2:31:21:A4:52:58:1F:94:FE:CD:36:81:EA:71:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a0638e12-ca52-466e-b33b-46058f96c411.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a0638e12-ca52-466e-b33b-46058f96c411/dce6cbb4-1dbf-3f9d-af1a-ee3d19b4a166.roa
Signing time:             Wed 08 Jul 2020 17:44:36 +0000
ROA not before:           Tue 07 Jul 2020 04:00:00 +0000
ROA not after:            Tue 11 Oct 2022 04:00:00 +0000
asID:                     13465
IP address blocks:        23.158.240.0/24 maxlen: 24
                          134.195.188.0/22 maxlen: 24
                          2602:fd4e::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2f:87:82:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0638e12-ca52-466e-b33b-46058f96c411
        Validity
            Not Before: Jul  7 04:00:00 2020 GMT
            Not After : Oct 11 04:00:00 2022 GMT
        Subject: CN=605d821c-f7ce-43fe-8fa3-4bf0503a86fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:79:0d:f3:9c:4f:29:f1:35:79:4a:09:60:77:
                    ef:dd:31:fa:d0:e2:15:0d:a9:1a:a6:e1:5f:b9:fa:
                    37:eb:ae:f1:6e:2c:95:9f:7f:84:ac:07:dc:49:71:
                    cb:60:f9:1b:e1:d7:80:b8:03:d8:d2:9c:91:f0:07:
                    72:61:40:48:0c:c1:ad:80:28:eb:87:29:6d:68:91:
                    88:5e:0b:d4:c0:86:96:b8:ec:62:71:c9:f9:4c:2d:
                    94:7e:2b:ca:51:7a:2b:4b:c0:b8:94:cb:7f:ff:82:
                    12:c6:57:a9:79:64:ce:d9:03:a2:7f:ab:5e:5a:70:
                    05:99:b7:69:49:c1:65:b2:cd:7a:9e:2a:bb:3f:ad:
                    de:81:c4:a7:ec:8a:d8:03:7e:9e:0f:bf:e1:2b:1c:
                    43:69:f5:f3:8e:5d:4b:53:c2:e3:cd:df:76:b7:53:
                    90:34:8d:36:bd:06:b1:86:9e:05:86:4b:7c:ce:96:
                    f9:73:83:55:76:82:a0:8a:1d:a5:c3:22:1b:81:6d:
                    f2:72:c4:46:0f:16:cd:8e:58:51:3d:bb:0a:18:db:
                    6a:6a:f9:81:94:a2:65:7a:b0:d4:83:3d:89:8d:1e:
                    bd:87:18:8a:06:e3:e7:ef:58:8e:68:bb:5a:42:8e:
                    0f:f0:21:51:8d:c9:9d:6e:05:2e:70:0e:08:5d:34:
                    04:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AD:C2:96:6C:84:64:89:BA:B7:1B:3E:18:D3:2E:D4:A3:33:85:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a0638e12-ca52-466e-b33b-46058f96c411/dce6cbb4-1dbf-3f9d-af1a-ee3d19b4a166.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a0638e12-ca52-466e-b33b-46058f96c411/a0638e12-ca52-466e-b33b-46058f96c411.crl

            X509v3 Authority Key Identifier:
                keyid:FC:2D:7D:9A:33:E2:31:21:A4:52:58:1F:94:FE:CD:36:81:EA:71:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a0638e12-ca52-466e-b33b-46058f96c411.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.240.0/24
                  134.195.188.0/22
                IPv6:
                  2602:fd4e::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:fc:a9:57:23:e3:f7:fe:d6:a9:5f:e5:31:81:47:fb:e7:03:
         15:48:3a:7b:d5:14:92:92:c8:fb:89:3e:9f:47:0a:d0:f6:3e:
         df:10:2d:58:5f:20:60:77:ea:34:a3:11:03:29:a7:f6:f7:00:
         2c:43:3f:57:9d:fc:63:08:86:9b:cd:14:17:82:3f:3b:bd:05:
         63:58:d0:51:55:11:fd:e8:6f:db:9b:bd:ea:1b:0a:92:68:30:
         0b:42:2c:19:3d:cf:7e:34:79:94:b5:5b:a4:e7:0e:eb:b2:0f:
         79:d4:b2:1c:3f:11:cc:c9:8b:79:6b:77:22:26:5e:9c:82:a6:
         9b:9b:52:22:fa:99:2c:13:51:46:75:c4:7e:58:55:57:69:54:
         e0:fe:61:11:3d:74:da:ec:98:6f:c3:a1:63:2a:91:7d:65:9c:
         38:22:98:e8:d5:f9:53:fe:a6:58:38:40:aa:23:96:46:dc:1e:
         08:11:68:94:61:fd:9a:5c:80:8e:6e:88:c9:14:13:81:6b:cb:
         e1:4d:7c:57:f6:2d:b2:e4:e7:54:18:1c:48:ee:e8:04:e5:50:
         5d:e7:9a:26:0a:2d:13:fd:9f:41:36:d4:28:3c:71:c8:fc:56:
         ba:55:9c:2b:ba:8e:43:94:42:ba:2f:90:53:91:f4:9c:b5:a3:
         ae:f5:e4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:20 2023 by rpki-client on console-fra.rpki-client.org