Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f6955ae6-7518-4f31-adab-b1ae8009cd70/c0d8c86a-c5d0-3164-a931-b7ca56ef2780.roa
File:                     c0d8c86a-c5d0-3164-a931-b7ca56ef2780.roa (raw, json)
Hash identifier:          Vu2yj5UAzOR7ev/dQxVANd7liXDJYRJ2WFxd6ySqIVw=
Subject key identifier:   52:D0:90:00:69:AD:24:8F:1F:B9:25:01:D6:2C:47:31:AE:BD:3A:0D
Certificate issuer:       /CN=f6955ae6-7518-4f31-adab-b1ae8009cd70
Certificate serial:       010D0C9F4328584484A3490BCBB55AA8936D4E00
Authority key identifier: 53:44:72:19:D5:28:60:AF:97:85:FA:D5:3A:11:AA:BB:A7:04:A4:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f6955ae6-7518-4f31-adab-b1ae8009cd70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f6955ae6-7518-4f31-adab-b1ae8009cd70/c0d8c86a-c5d0-3164-a931-b7ca56ef2780.roa
Signing time:             Thu 11 Jan 2024 13:14:50 +0000
ROA not before:           Thu 11 Jan 2024 13:14:50 +0000
ROA not after:            Wed 10 Apr 2024 12:14:50 +0000
asID:                     55154
IP address blocks:        204.52.113.0/24 maxlen: 24
                          204.52.114.0/24 maxlen: 24
                          204.52.115.0/24 maxlen: 24
                          204.52.116.0/24 maxlen: 24
                          204.52.117.0/24 maxlen: 24
                          204.52.118.0/24 maxlen: 24
                          204.52.119.0/24 maxlen: 24
                          204.52.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:84:a3:49:0b:cb:b5:5a:a8:93:6d:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6955ae6-7518-4f31-adab-b1ae8009cd70
        Validity
            Not Before: Jan 11 13:14:50 2024 GMT
            Not After : Apr 10 12:14:50 2024 GMT
        Subject: CN=aee3d5e9-a65a-4d38-a954-dd9dd66f98aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ff:63:4d:af:57:70:b6:42:d1:f2:33:94:f9:
                    21:0a:fb:40:13:26:38:d0:cc:79:d6:27:1c:c4:47:
                    b8:6b:02:e6:d2:97:37:91:bc:98:67:c6:4c:fd:c2:
                    30:53:19:09:76:12:e6:fa:e4:3b:70:fb:c4:48:8f:
                    be:e7:04:d1:3e:e0:44:ca:a6:dc:4c:3a:cc:4b:3f:
                    d8:e4:cd:b4:32:a3:c0:a7:de:ee:93:27:d6:71:f1:
                    74:29:8b:15:54:81:6f:f8:6b:e2:0c:30:0f:75:18:
                    22:17:66:85:d7:48:8e:76:2c:c6:73:4b:5a:37:72:
                    de:13:fb:35:ed:36:1f:b9:56:f8:74:92:30:71:78:
                    07:ff:97:7a:62:8c:9d:65:10:e9:0a:74:cf:0a:bd:
                    18:cf:88:fe:52:e0:ae:69:f8:12:e7:c6:2b:96:7b:
                    0f:d0:52:a8:e0:cd:d4:03:b6:7a:bd:8f:74:9a:c0:
                    ba:09:12:f5:01:52:9c:32:72:27:f5:ef:35:f4:42:
                    06:23:6a:64:85:d6:11:8c:cf:b3:b4:20:fe:05:40:
                    6d:ac:5f:97:bd:c8:26:4e:b0:53:b8:99:d4:8d:82:
                    b6:84:a5:a5:cf:5a:1e:41:eb:0a:a3:df:ca:c4:73:
                    06:95:3c:fa:b7:d7:9c:24:31:5e:92:8a:3b:cc:2f:
                    7c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D0:90:00:69:AD:24:8F:1F:B9:25:01:D6:2C:47:31:AE:BD:3A:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f6955ae6-7518-4f31-adab-b1ae8009cd70/c0d8c86a-c5d0-3164-a931-b7ca56ef2780.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f6955ae6-7518-4f31-adab-b1ae8009cd70/f6955ae6-7518-4f31-adab-b1ae8009cd70.crl

            X509v3 Authority Key Identifier:
                keyid:53:44:72:19:D5:28:60:AF:97:85:FA:D5:3A:11:AA:BB:A7:04:A4:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f6955ae6-7518-4f31-adab-b1ae8009cd70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.52.113.0-204.52.120.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:ab:cb:4a:84:60:de:96:49:e1:96:50:a0:99:7c:01:63:82:
         9b:a8:76:61:ac:24:c8:66:fc:0d:70:f6:c7:52:00:f8:64:dd:
         d8:3e:db:87:c1:2e:75:f1:2a:6b:ed:25:86:b6:35:d9:8c:5a:
         42:12:0d:2e:b8:b2:ab:27:22:e8:a5:bd:00:86:d1:55:2e:f4:
         77:7c:a3:00:a8:b8:46:d9:6f:e6:07:57:62:91:cc:33:5e:72:
         66:1e:64:50:83:a8:b7:21:94:17:f8:97:5d:9d:d2:af:1a:12:
         e6:6d:64:ba:6b:1a:d9:b8:7d:b0:c4:41:92:94:6b:3e:52:d2:
         37:7c:06:04:fc:79:dd:0b:73:f7:e4:30:3a:58:0d:a6:a9:62:
         e2:86:7d:a4:59:1c:d9:57:67:fd:b5:72:15:38:78:4a:94:06:
         07:f5:3e:f4:4c:d9:51:a4:dc:cc:72:1b:c5:82:78:dd:ab:0e:
         2b:36:02:1a:56:13:7b:90:ec:4e:5a:ae:7e:af:69:02:24:22:
         7e:21:31:87:6d:56:89:ce:be:b6:48:32:d4:19:ed:d0:0e:23:
         ff:c8:f2:1e:0a:5d:7d:c9:54:4c:80:ae:9c:70:f9:95:4f:17:
         14:99:2a:20:a2:6c:c6:63:23:17:ec:6f:c8:2e:33:27:73:5e:
         35:43:b2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:52:06 2024 by rpki-client on console-fra.rpki-client.org