Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/36d1568d-38ef-495f-ba95-f4a68e5b1980/d39d9602-4bba-3c39-971e-26e8af70de01.roa
File:                     d39d9602-4bba-3c39-971e-26e8af70de01.roa (raw, json)
Hash identifier:          368bXSMzLSaxhrF3SM5d7sY5LfiylXwRnInE7kudbno=
Subject key identifier:   84:FD:C2:61:ED:B6:C5:48:64:F3:13:F7:82:9D:D3:ED:8E:41:47:EF
Certificate issuer:       /CN=36d1568d-38ef-495f-ba95-f4a68e5b1980
Certificate serial:       010D0C9F4328576D51CC73C042CFC15DBFCAD8DC
Authority key identifier: 6F:8C:EB:92:DD:38:A0:06:31:2C:66:B6:39:94:05:B4:64:61:EB:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/36d1568d-38ef-495f-ba95-f4a68e5b1980.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/36d1568d-38ef-495f-ba95-f4a68e5b1980/d39d9602-4bba-3c39-971e-26e8af70de01.roa
Signing time:             Tue 08 Aug 2017 03:02:08 +0000
ROA not before:           Wed 12 Jul 2017 04:00:00 +0000
ROA not after:            Mon 12 Jul 2027 04:00:00 +0000
asID:                     396291
IP address blocks:        209.94.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:5d:bf:ca:d8:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36d1568d-38ef-495f-ba95-f4a68e5b1980
        Validity
            Not Before: Jul 12 04:00:00 2017 GMT
            Not After : Jul 12 04:00:00 2027 GMT
        Subject: CN=17090d2e-4800-437c-b1fe-f4f1e2dd8787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:30:90:53:ac:4b:67:a1:df:76:16:3b:71:b3:
                    a7:01:bd:d9:90:5a:2c:bc:56:19:21:0f:4a:37:51:
                    e4:b7:ff:1e:79:6b:3d:88:9b:bd:4d:17:49:f9:10:
                    37:0b:5a:3e:c9:8f:1c:d1:04:0f:38:de:34:e7:ea:
                    71:1a:e0:bc:d6:f0:c2:8c:a1:4c:08:69:39:ed:7f:
                    75:ef:ac:54:60:57:0e:9a:b3:cf:42:cc:86:d1:61:
                    49:37:f1:20:74:9f:93:d7:aa:8d:e8:9e:8b:d7:55:
                    9b:69:c8:51:63:34:ab:e0:db:f8:f6:a5:fa:ed:a2:
                    c9:6b:76:a9:a9:ff:2a:9b:6e:6f:d2:f2:b3:24:8e:
                    2d:f0:d0:1f:95:95:c9:85:30:73:57:c0:ac:1c:f9:
                    40:5f:49:a7:48:bb:0b:da:1c:cc:b9:8b:cb:a1:c7:
                    f3:44:58:e1:99:04:f0:86:4e:4b:00:69:ba:ff:6c:
                    23:56:11:5d:cf:8b:77:c7:f8:9c:ae:7b:94:fb:46:
                    f7:86:28:6d:24:ae:f3:82:57:9d:01:be:fc:de:2f:
                    f0:38:d0:c0:c9:08:17:63:1e:3b:13:01:5b:98:1a:
                    87:8f:12:6f:aa:af:33:e3:5a:91:63:aa:36:56:8b:
                    35:d0:1e:29:b1:45:ee:7b:97:7a:23:af:19:ed:d4:
                    42:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:FD:C2:61:ED:B6:C5:48:64:F3:13:F7:82:9D:D3:ED:8E:41:47:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/36d1568d-38ef-495f-ba95-f4a68e5b1980/d39d9602-4bba-3c39-971e-26e8af70de01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/36d1568d-38ef-495f-ba95-f4a68e5b1980/36d1568d-38ef-495f-ba95-f4a68e5b1980.crl

            X509v3 Authority Key Identifier:
                keyid:6F:8C:EB:92:DD:38:A0:06:31:2C:66:B6:39:94:05:B4:64:61:EB:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/36d1568d-38ef-495f-ba95-f4a68e5b1980.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.94.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:1d:d7:ab:a4:9c:6c:ac:ff:ac:12:2b:f5:c3:b1:60:f0:40:
         6b:8a:08:39:bf:d7:26:4d:a0:ed:3f:a5:eb:9a:ab:3c:6c:ac:
         4e:0f:3c:79:0f:45:bc:5b:7c:13:91:01:ea:1a:e1:8b:91:02:
         36:42:37:ed:13:a5:32:f6:ba:bc:ed:3e:69:7b:b8:2a:53:b3:
         29:95:53:13:67:fa:ac:62:31:c7:1b:34:6f:a0:40:91:c9:41:
         15:0e:4d:a0:ee:47:3e:da:58:d0:0e:84:70:83:73:8a:bd:18:
         68:04:86:2b:f5:17:1d:4e:d1:0f:d6:00:b9:17:0d:0d:69:d2:
         a1:df:22:d3:aa:86:9a:ec:f3:03:94:4d:a1:0f:53:66:7d:df:
         f0:66:1a:0f:9f:32:c1:53:fe:c0:6b:08:03:e6:87:c7:ad:47:
         9f:2c:ba:9a:0d:50:1d:91:96:b1:84:65:39:93:aa:b4:84:db:
         e0:7f:b9:1b:57:05:5c:73:5a:16:60:37:85:7d:0c:4b:d3:db:
         5d:33:d4:c9:4d:54:b0:64:ec:69:6e:78:12:6d:60:d0:12:73:
         cb:10:67:6e:4d:80:32:e3:e0:a0:8f:63:2d:3e:85:ba:ee:31:
         63:45:6d:d7:23:ba:96:43:e6:9e:d0:f6:85:a1:d7:bf:a7:85:
         a7:2d:7e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:04 2023 by rpki-client on console-fra.rpki-client.org