Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/59e66056-68de-497c-8268-aaf99448f9e5/9696a1a0-fee5-3961-9064-fe427fecfbc2.roa
File:                     9696a1a0-fee5-3961-9064-fe427fecfbc2.roa (raw, json)
Hash identifier:          nhPbkoJt8YJEBmqpjH7E9n+BrHkwcCNRrS3iv2F2p+M=
Subject key identifier:   1F:62:27:4C:26:24:43:74:67:D3:39:39:CB:E0:D2:11:23:A3:66:93
Certificate issuer:       /CN=59e66056-68de-497c-8268-aaf99448f9e5
Certificate serial:       010D0C9F432858420FAA0B18790A574DB9DF1680
Authority key identifier: 8A:C8:DE:A0:F8:D3:88:89:C4:79:0F:6C:23:60:CF:C4:1C:A1:01:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/59e66056-68de-497c-8268-aaf99448f9e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/59e66056-68de-497c-8268-aaf99448f9e5/9696a1a0-fee5-3961-9064-fe427fecfbc2.roa
Signing time:             Wed 31 May 2023 06:05:00 +0000
ROA not before:           Wed 31 May 2023 06:05:00 +0000
ROA not after:            Tue 29 Aug 2023 06:05:00 +0000
asID:                     36454
IP address blocks:        65.181.112.0/24 maxlen: 24
                          65.181.113.0/24 maxlen: 24
                          65.181.116.0/24 maxlen: 24
                          65.181.123.0/24 maxlen: 24
                          65.181.124.0/24 maxlen: 24
                          65.181.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:0f:aa:0b:18:79:0a:57:4d:b9:df:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e66056-68de-497c-8268-aaf99448f9e5
        Validity
            Not Before: May 31 06:05:00 2023 GMT
            Not After : Aug 29 06:05:00 2023 GMT
        Subject: CN=71ede8b5-b2f3-41cb-9705-87513a057282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:09:87:25:0e:96:53:53:00:c5:1e:46:d9:5b:
                    cb:af:49:9e:06:7a:07:dd:a2:c7:4f:f8:6f:27:e3:
                    42:fe:20:59:d3:4a:97:4c:56:14:4e:6d:45:e0:20:
                    2b:64:ed:c0:f0:70:da:48:54:76:6f:de:a1:c9:2c:
                    61:46:13:b2:9a:23:11:b4:c5:9b:49:68:aa:92:9c:
                    c4:f8:f3:8d:e4:f9:03:e2:8b:14:25:c2:75:99:14:
                    7b:aa:01:57:55:23:a3:f0:a7:0e:1f:fd:58:11:ec:
                    aa:cf:57:52:c6:21:1c:3b:eb:eb:d4:2f:f2:51:e7:
                    ad:55:8c:4a:25:cb:db:9b:89:1b:bf:6c:3b:78:dc:
                    22:21:b0:db:8f:4b:fb:d5:a5:5f:55:e0:0f:8a:55:
                    f0:a1:e8:24:39:af:80:98:42:bd:3c:99:ae:2c:23:
                    7d:6a:0b:4a:ab:55:9c:39:46:56:56:11:ab:01:19:
                    78:a1:3e:82:38:8c:88:26:88:87:21:db:15:a3:c8:
                    b0:1e:29:e7:d5:51:68:93:d3:23:65:9d:cf:93:4c:
                    b4:79:23:42:69:4a:c0:09:d7:34:9a:5a:70:61:c1:
                    7f:99:fb:1d:a1:57:54:a9:31:23:fe:69:16:63:0d:
                    43:6c:2f:64:0c:00:b7:47:5f:da:c8:c7:d2:52:7d:
                    15:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:62:27:4C:26:24:43:74:67:D3:39:39:CB:E0:D2:11:23:A3:66:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/59e66056-68de-497c-8268-aaf99448f9e5/9696a1a0-fee5-3961-9064-fe427fecfbc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/59e66056-68de-497c-8268-aaf99448f9e5/59e66056-68de-497c-8268-aaf99448f9e5.crl

            X509v3 Authority Key Identifier:
                keyid:8A:C8:DE:A0:F8:D3:88:89:C4:79:0F:6C:23:60:CF:C4:1C:A1:01:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/59e66056-68de-497c-8268-aaf99448f9e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.181.112.0/23
                  65.181.116.0/24
                  65.181.123.0-65.181.125.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:db:6a:b6:ba:2f:40:a4:5d:ff:a2:2b:a8:6a:d3:99:ea:ce:
         c0:22:fd:6e:c6:3d:d5:4a:7d:2e:c4:b7:3e:0a:38:8c:47:ab:
         6c:9a:e7:8d:3d:17:47:8d:de:69:ab:2a:c1:00:71:f2:f0:3a:
         e5:47:b2:6b:54:44:a2:06:97:e1:d2:1f:2e:d9:e7:34:6a:54:
         ce:ca:61:03:31:ad:44:d5:05:39:bb:04:37:26:31:df:e2:12:
         d6:b8:20:d0:da:13:29:a7:2c:1a:8f:5e:3b:09:fa:0d:7b:39:
         a6:19:7e:32:07:46:9f:ee:4b:31:2d:19:35:62:e5:1a:a3:4e:
         d1:91:e5:ee:72:65:e4:eb:cc:6f:56:78:25:37:9e:f3:e8:7e:
         b2:d6:b7:dc:a0:50:2d:da:5d:43:31:2e:05:80:9d:cd:3b:c9:
         33:6d:30:58:2e:09:05:bc:d7:4d:cc:61:0b:26:b5:1e:6b:74:
         d5:84:70:7a:4f:61:32:63:43:cd:36:41:64:3e:6e:d5:0a:ba:
         48:91:29:96:71:75:99:d2:26:2c:d9:2b:88:42:42:86:23:d4:
         be:1a:af:7a:09:ed:91:6e:15:68:ff:c9:cc:c5:2a:12:95:39:
         6a:2b:42:3a:d0:c4:2f:ce:22:d2:19:a2:44:17:58:39:73:d5:
         57:22:1c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:49 2023 by rpki-client on console-fra.rpki-client.org