Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/098a29ef-4764-3794-aaa1-e221bd743744.roa
File:                     098a29ef-4764-3794-aaa1-e221bd743744.roa (raw, json)
Hash identifier:          EiNOZrxyRpiKTwOUViC6zzb8oqa3KRM09/2I2CTLVEo=
Subject key identifier:   79:0A:F2:F5:C3:17:25:AD:47:A4:3F:7C:D1:D2:10:5E:A1:8E:61:DC
Certificate issuer:       /CN=5054a223-c485-46b0-b02c-2fdc3bfe26bc
Certificate serial:       010D0C9F4328583EFFF9D9A4FDF05625C7C05940
Authority key identifier: 8B:F7:51:E2:E3:D2:43:13:56:DE:2E:5A:0B:B4:F8:A0:BA:4D:40:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/098a29ef-4764-3794-aaa1-e221bd743744.roa
Signing time:             Fri 24 Jun 2022 17:36:07 +0000
ROA not before:           Fri 24 Jun 2022 17:36:07 +0000
ROA not after:            Mon 25 Nov 2030 05:00:00 +0000
asID:                     924
IP address blocks:        2602:fba1:64d::/48 maxlen: 48
                          2602:fba1::/40 maxlen: 48
                          2602:fba1:100::/40 maxlen: 48
                          2602:fba1:200::/40 maxlen: 48
                          2602:fba1:a00::/40 maxlen: 48
                          2602:fba1:b00::/40 maxlen: 48
                          2602:fba1:d64::/48 maxlen: 48
                          2602:fba1:999::/48 maxlen: 48
                          2602:fba1:666::/48 maxlen: 48
                          2602:fba1:c00::/40 maxlen: 48
                          2602:fba1:e00::/40 maxlen: 48
                          2602:fba1:f00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:ff:f9:d9:a4:fd:f0:56:25:c7:c0:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5054a223-c485-46b0-b02c-2fdc3bfe26bc
        Validity
            Not Before: Jun 24 17:36:07 2022 GMT
            Not After : Nov 25 05:00:00 2030 GMT
        Subject: CN=1166292f-33fe-49cb-9113-6e854d01f70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:db:91:3b:03:e0:5c:70:be:2e:55:4b:d6:81:
                    85:ee:e1:36:3b:91:56:81:98:f9:c3:94:f0:4f:c9:
                    89:0a:29:76:85:d6:6c:bc:3b:b9:ab:5f:cd:55:df:
                    47:5d:d0:11:40:99:7a:4d:3a:45:e4:eb:b6:eb:ef:
                    d6:c8:f8:e2:c6:36:fa:1a:3c:8d:3b:b0:d2:a5:ca:
                    40:98:72:07:98:76:59:74:1d:8e:33:c5:f8:e9:b5:
                    2c:76:13:5c:35:f9:64:c7:4c:59:03:b8:c2:f5:6f:
                    d7:cc:58:7d:16:78:5c:1b:8f:27:6e:82:a5:27:a7:
                    51:7a:a9:16:5d:fa:70:45:1e:fd:10:16:4e:d7:1f:
                    fe:79:b2:dc:73:1a:45:23:df:a8:24:62:54:cd:d2:
                    f1:53:11:2a:08:1a:fd:12:73:51:46:f6:bd:e5:d8:
                    01:16:be:5d:be:a8:b5:82:92:50:2b:18:a6:3e:2b:
                    45:b8:21:c3:7c:02:ad:ae:ac:80:62:f2:dc:df:bd:
                    7c:84:a7:f3:54:cf:63:63:e6:8f:c4:ed:e7:f4:aa:
                    95:cb:0d:cd:a2:2e:ab:c4:35:8f:12:e4:af:6d:29:
                    a3:01:f2:67:e1:3b:e5:0b:9e:65:58:87:11:da:fa:
                    3a:fb:80:98:8d:a8:f2:1c:ae:2b:60:a6:1f:98:29:
                    56:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0A:F2:F5:C3:17:25:AD:47:A4:3F:7C:D1:D2:10:5E:A1:8E:61:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/098a29ef-4764-3794-aaa1-e221bd743744.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/5054a223-c485-46b0-b02c-2fdc3bfe26bc.crl

            X509v3 Authority Key Identifier:
                keyid:8B:F7:51:E2:E3:D2:43:13:56:DE:2E:5A:0B:B4:F8:A0:BA:4D:40:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba1::-2602:fba1:2ff:ffff:ffff:ffff:ffff:ffff
                  2602:fba1:64d::/48
                  2602:fba1:666::/48
                  2602:fba1:999::/48
                  2602:fba1:a00::-2602:fba1:cff:ffff:ffff:ffff:ffff:ffff
                  2602:fba1:d64::/48
                  2602:fba1:e00::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:58:46:0c:28:db:c7:20:46:44:d0:ad:45:e3:86:90:c1:b3:
         fc:6d:68:53:53:55:c7:9e:df:a8:8a:8a:43:94:8e:12:28:fe:
         7b:80:c4:09:0d:ea:b8:7c:9e:98:e6:8f:94:e2:4d:55:2b:5f:
         10:ba:c6:a4:4e:e5:6c:de:33:f8:ee:21:49:e4:96:67:af:e0:
         74:bd:b6:6b:5d:60:68:05:92:8d:78:94:df:05:a8:15:87:f3:
         8b:26:d3:a8:2e:0f:b7:85:d4:0e:ad:38:15:f0:da:22:31:c2:
         03:0e:3a:13:97:2c:a7:4e:6e:b6:61:23:bd:c5:c4:59:4d:26:
         5b:bb:6b:83:44:3d:c6:b9:45:1d:10:0c:f8:e8:7d:14:c3:ca:
         43:14:be:ba:28:82:db:f3:11:2d:27:04:25:b5:f6:96:40:56:
         f5:23:b9:0f:a5:2e:53:ba:94:60:82:33:69:95:7c:9b:52:51:
         13:6f:fb:16:92:d1:4a:27:3e:df:6a:f3:60:07:9f:25:d1:a0:
         93:23:d5:21:70:a1:76:f2:80:6e:27:88:69:e6:df:04:e0:79:
         e8:d6:a4:ea:2d:16:e3:fd:1c:42:d8:1d:50:2d:05:74:aa:66:
         eb:5f:83:1c:2a:d6:13:d8:fb:1a:2d:f5:79:a2:2a:6d:84:c8:
         83:08:c9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:10 2023 by rpki-client on console-fra.rpki-client.org