Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a/395e359a-8ba4-3a9d-916c-3b7d970dfe0c.roa
File:                     395e359a-8ba4-3a9d-916c-3b7d970dfe0c.roa (raw, json)
Hash identifier:          Ke5Zah0ebDvbfQVErEcUycPGYTtTmDOB29gIDcIjla0=
Subject key identifier:   56:32:97:F0:0D:BC:D9:51:45:C9:0F:7B:02:E7:A0:70:F1:14:51:B1
Certificate issuer:       /CN=46107a8c-29da-4914-8858-2b42aa4d8b4a
Certificate serial:       010D0C9F4328583B7BCFA7BA3A421DC1EF165A20
Authority key identifier: AA:4F:4F:E9:E2:28:28:6A:EC:B1:88:AA:98:ED:11:87:E9:E2:2F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a/395e359a-8ba4-3a9d-916c-3b7d970dfe0c.roa
Signing time:             Wed 31 Mar 2021 04:00:00 +0000
ROA not before:           Wed 31 Mar 2021 04:00:00 +0000
ROA not after:            Tue 07 Jan 2025 05:00:00 +0000
asID:                     31874
IP address blocks:        174.46.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:7b:cf:a7:ba:3a:42:1d:c1:ef:16:5a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46107a8c-29da-4914-8858-2b42aa4d8b4a
        Validity
            Not Before: Mar 31 04:00:00 2021 GMT
            Not After : Jan  7 05:00:00 2025 GMT
        Subject: CN=d636282f-2976-44f7-82cf-88ee5942f9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7c:dc:c5:1c:12:12:1e:3d:45:6e:5d:95:db:
                    5f:b3:82:89:1e:f6:83:bf:d7:8e:e3:01:5e:a9:23:
                    71:64:cf:29:7f:df:f9:42:19:90:ff:b0:9a:28:7d:
                    55:d1:c2:33:12:5a:c3:d1:ae:2e:49:fa:c7:2f:4d:
                    a0:40:e1:4c:f2:ad:f8:b9:b7:ac:d8:9d:c3:49:e7:
                    35:e2:00:98:52:bb:05:96:b9:64:cf:73:46:be:e7:
                    3c:78:dd:16:da:23:ae:c7:44:30:2a:55:a6:88:ef:
                    4e:25:d6:f5:bd:84:20:4c:74:43:ed:62:d7:22:67:
                    36:28:36:9e:06:1d:4c:cb:94:6d:0b:f3:6e:ac:e8:
                    50:19:ca:e5:d2:fc:d1:bf:8f:d3:9f:05:78:35:af:
                    a0:6d:ab:30:a4:a8:6e:1a:f7:a7:14:eb:e6:70:4e:
                    98:51:b1:7f:9c:49:08:7e:ec:8a:bd:75:90:2c:0d:
                    9d:34:10:0d:3f:92:fe:3a:dc:8f:35:9d:32:0d:53:
                    18:8f:d8:22:14:b5:9a:ab:44:1a:17:94:88:6f:c0:
                    da:7c:5c:c4:c5:27:b4:f7:87:36:22:d5:4c:4f:db:
                    4a:c2:e0:56:3c:14:d4:dd:e8:5c:f6:84:af:31:5d:
                    36:6a:4f:b0:e2:fb:70:ee:3e:eb:b8:e0:91:60:88:
                    8c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:32:97:F0:0D:BC:D9:51:45:C9:0F:7B:02:E7:A0:70:F1:14:51:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a/395e359a-8ba4-3a9d-916c-3b7d970dfe0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a/46107a8c-29da-4914-8858-2b42aa4d8b4a.crl

            X509v3 Authority Key Identifier:
                keyid:AA:4F:4F:E9:E2:28:28:6A:EC:B1:88:AA:98:ED:11:87:E9:E2:2F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.46.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:99:ce:de:4a:d1:a0:fe:78:72:5c:d9:d1:c4:4c:07:6c:61:
         d5:19:ed:74:56:98:34:e5:30:22:c2:f1:16:a5:29:bb:cb:22:
         e8:cf:e8:68:2f:55:36:26:5a:62:68:4b:ad:1c:63:8c:dd:05:
         28:9d:80:1a:34:3d:c3:20:5a:09:8e:cf:f5:8b:25:75:88:44:
         24:29:a7:19:1f:d7:6f:e2:17:71:7e:9f:40:f4:9c:89:6b:22:
         56:09:b4:af:cd:17:d9:43:b6:3f:bd:1d:8b:3f:a3:ea:7b:f7:
         3c:d3:82:66:f9:c8:aa:bf:85:d9:84:64:34:8a:46:25:ad:03:
         de:63:f4:f6:87:f0:38:7f:10:69:08:35:df:a9:a7:96:47:03:
         8c:99:0a:40:59:58:37:3e:f1:10:f1:ec:84:c7:c3:d7:23:fe:
         52:88:e1:f5:cd:b2:9c:85:85:7c:57:b4:53:01:05:56:ac:20:
         c6:2e:74:e8:31:d1:7e:fe:c5:1c:9c:55:f5:6f:bd:e9:1e:0c:
         ed:a8:51:4a:8d:3e:4b:c2:63:7e:3e:46:70:0d:1b:96:92:83:
         f8:d0:a9:ef:4c:7b:6d:20:c7:f1:ac:73:f9:93:ec:4c:db:64:
         b5:f0:54:49:35:90:d9:52:1f:9d:98:0f:de:6c:c6:49:22:b0:
         77:02:0e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:34 2023 by rpki-client on console-fra.rpki-client.org