Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31/1bf06ecf-8012-3a31-ad30-03f1a2700e08.roa
File:                     1bf06ecf-8012-3a31-ad30-03f1a2700e08.roa (raw, json)
Hash identifier:          UF8Vcx89MjMjpyEeZEcOGtr97VGp1HsgEUOLOHDpBtU=
Subject key identifier:   21:00:91:AB:35:D0:4F:A2:44:F8:AD:C6:4A:22:55:F5:B0:84:A1:4C
Certificate issuer:       /CN=6174d0f9-bf09-485e-8ae7-67987caa5c31
Certificate serial:       010D0C9F4328583C4278519FFDADC30C6F8F4100
Authority key identifier: E9:42:23:2E:46:59:C4:1D:2B:4D:9D:2C:D1:0A:0F:45:2F:C4:DD:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31/1bf06ecf-8012-3a31-ad30-03f1a2700e08.roa
Signing time:             Wed 15 Dec 2021 05:00:00 +0000
ROA not before:           Wed 15 Dec 2021 05:00:00 +0000
ROA not after:            Sun 15 Dec 2030 05:00:00 +0000
asID:                     19720
IP address blocks:        167.206.119.0/24 maxlen: 24
                          167.206.120.0/24 maxlen: 24
                          167.206.122.0/24 maxlen: 24
                          167.206.123.0/24 maxlen: 24
                          167.206.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:42:78:51:9f:fd:ad:c3:0c:6f:8f:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6174d0f9-bf09-485e-8ae7-67987caa5c31
        Validity
            Not Before: Dec 15 05:00:00 2021 GMT
            Not After : Dec 15 05:00:00 2030 GMT
        Subject: CN=fcfe5748-d7a8-4376-a57d-ca9dc15093d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:78:05:84:5a:00:e0:9e:6c:b3:7a:9a:62:ad:
                    66:a6:1d:b7:1b:e3:44:04:78:d9:71:9d:52:19:3d:
                    03:89:3e:48:6c:d7:db:95:f8:a4:4e:23:db:ab:f6:
                    9c:9a:b3:95:f1:07:2d:67:35:b0:68:38:f3:a2:f6:
                    4d:e8:af:57:bb:83:ff:fa:da:55:fe:0f:50:8d:58:
                    fd:ed:7f:1f:ca:c8:94:87:e3:c1:b5:8c:b9:34:92:
                    c4:43:92:61:e5:6f:ae:8e:74:3f:6e:05:d5:8d:cc:
                    de:2f:83:5f:49:f6:56:69:ed:f6:35:a6:fe:3e:0f:
                    9c:e6:86:9b:ae:b2:0e:aa:c8:00:51:53:d8:7e:26:
                    3b:c5:5c:1c:88:96:58:10:fc:0f:d9:95:17:3e:bc:
                    10:a9:b6:d3:5a:b5:e6:d9:40:b6:2c:6e:f3:3c:29:
                    2c:d0:da:0d:d0:f5:5a:29:e0:bf:f3:7c:4c:fd:f0:
                    75:f4:01:0d:bb:c5:89:17:db:3e:87:fa:ea:71:12:
                    4c:50:b2:d1:63:66:be:86:a8:0d:3b:44:ca:0d:16:
                    b3:fb:6f:b6:f0:02:90:f9:e5:49:4e:5f:d3:b5:80:
                    45:ec:1b:f2:0f:af:bb:e2:6f:c9:4e:80:2b:e8:b7:
                    a9:dd:02:48:c5:75:25:31:0e:fe:dd:ff:27:38:b9:
                    c2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:00:91:AB:35:D0:4F:A2:44:F8:AD:C6:4A:22:55:F5:B0:84:A1:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31/1bf06ecf-8012-3a31-ad30-03f1a2700e08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31/6174d0f9-bf09-485e-8ae7-67987caa5c31.crl

            X509v3 Authority Key Identifier:
                keyid:E9:42:23:2E:46:59:C4:1D:2B:4D:9D:2C:D1:0A:0F:45:2F:C4:DD:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.206.44.0/24
                  167.206.119.0-167.206.120.255
                  167.206.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:f8:23:48:f2:e9:3f:92:4c:bb:02:5e:08:62:66:48:e2:a1:
         fe:4c:f2:f1:5a:d5:2d:cb:47:c5:35:74:82:4b:1f:2f:69:43:
         39:08:d5:7b:26:fb:26:a4:5e:b0:7b:3d:b0:59:df:91:e2:77:
         ca:f2:8e:7d:72:ec:78:b9:b8:3a:1c:37:1c:40:5b:5e:93:57:
         1a:a4:b4:c2:24:b4:cd:b2:cd:92:c6:f1:6e:87:be:e3:c5:96:
         17:f1:ac:8e:2c:e4:6d:92:6f:d1:b5:5d:2f:c6:01:82:58:bd:
         5d:c8:82:2e:12:e6:64:a8:74:94:76:61:d8:93:7c:9a:58:4b:
         41:3d:fc:8f:88:33:59:2a:ad:a7:14:ca:8e:a1:07:0b:18:7b:
         83:40:cb:62:0e:16:62:6a:c2:12:4c:d5:cf:49:6c:45:c7:92:
         93:8a:0b:dc:12:26:d3:85:be:20:d9:2c:34:28:77:ed:fd:cf:
         f5:5c:b9:2f:1c:a8:05:24:6b:e3:27:3a:c6:01:38:ac:98:36:
         2b:55:51:59:34:e1:6f:31:8d:d8:a2:6f:ff:3e:f1:10:cf:3d:
         42:65:e8:63:85:28:dc:00:b3:82:9b:f7:e0:c5:61:27:cf:e9:
         31:44:4c:91:f7:a9:3a:3f:60:42:c1:04:19:a2:e5:de:78:09:
         ed:36:e0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:11 2023 by rpki-client on console-fra.rpki-client.org