Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31/ec955bab-ccae-34a0-bcbd-2b45afcbfa46.roa
File:                     ec955bab-ccae-34a0-bcbd-2b45afcbfa46.roa (raw, json)
Hash identifier:          K5JUjP++jPUWx9TlyYzbp8+Ot10hR5L4g/LCBfmH9Oc=
Subject key identifier:   18:92:9C:27:BE:06:33:43:4E:D4:F8:86:57:5F:E4:2E:7D:4D:B0:94
Certificate issuer:       /CN=6174d0f9-bf09-485e-8ae7-67987caa5c31
Certificate serial:       010D0C9F4328583C546A28BE71156C671F170E00
Authority key identifier: E9:42:23:2E:46:59:C4:1D:2B:4D:9D:2C:D1:0A:0F:45:2F:C4:DD:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31/ec955bab-ccae-34a0-bcbd-2b45afcbfa46.roa
Signing time:             Tue 21 Dec 2021 05:00:00 +0000
ROA not before:           Tue 21 Dec 2021 05:00:00 +0000
ROA not after:            Fri 21 Dec 2029 05:00:00 +0000
asID:                     29867
IP address blocks:        167.206.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:54:6a:28:be:71:15:6c:67:1f:17:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6174d0f9-bf09-485e-8ae7-67987caa5c31
        Validity
            Not Before: Dec 21 05:00:00 2021 GMT
            Not After : Dec 21 05:00:00 2029 GMT
        Subject: CN=94ef6a9d-6773-4574-a4d0-76068fe923c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7c:82:90:f5:f6:42:45:31:d1:48:48:9f:0d:
                    8f:eb:e9:ef:4f:83:c3:aa:7c:ac:34:5d:49:a8:84:
                    6b:ff:bb:36:fd:43:f9:9d:a0:71:a5:cc:bc:1d:d1:
                    c3:98:b9:e5:3a:5c:b1:f0:0f:e0:df:4c:8d:bc:81:
                    60:e4:9e:b4:03:66:5d:d3:8e:14:f5:89:d3:b3:27:
                    dd:22:e9:eb:75:50:31:0b:d8:4f:41:73:69:b3:d1:
                    01:35:88:8d:dd:47:99:1a:8b:26:53:99:18:08:c0:
                    f5:a9:e0:bd:82:e2:df:16:be:e4:29:e7:a2:74:c4:
                    d5:28:70:7b:50:cc:88:e4:3d:62:fd:22:12:8d:9e:
                    85:7f:de:fc:3e:a9:10:c9:af:41:37:bb:6f:f0:0f:
                    81:af:ec:e2:71:bf:ca:7a:4c:ea:46:5a:f2:8e:b4:
                    36:96:7e:61:63:9f:7f:f9:bd:d3:0c:55:b7:0a:5f:
                    a5:c2:61:b8:b9:d9:7b:c3:1c:ec:5c:43:21:ce:ad:
                    81:bf:f4:23:26:4e:d5:c8:b4:18:ee:77:d7:1f:87:
                    89:78:51:e6:f2:a4:88:ef:f6:bd:4d:6f:d3:47:3f:
                    88:53:e5:78:6b:14:d2:64:ba:2c:8e:49:3b:16:56:
                    06:12:00:e6:88:2a:72:3f:f5:0a:48:81:f2:a7:3e:
                    13:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:92:9C:27:BE:06:33:43:4E:D4:F8:86:57:5F:E4:2E:7D:4D:B0:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31/ec955bab-ccae-34a0-bcbd-2b45afcbfa46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31/6174d0f9-bf09-485e-8ae7-67987caa5c31.crl

            X509v3 Authority Key Identifier:
                keyid:E9:42:23:2E:46:59:C4:1D:2B:4D:9D:2C:D1:0A:0F:45:2F:C4:DD:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.206.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:c1:6a:47:b6:88:21:f4:3e:e5:1d:e4:34:75:9e:7d:af:b0:
         d2:fd:1a:d9:dd:29:85:71:ca:96:38:15:6e:1a:bd:4b:f2:8b:
         95:4a:08:4a:57:79:99:8d:60:05:dc:24:02:b2:42:d8:b0:8d:
         55:6f:93:d1:68:a5:93:42:10:8e:ef:f2:ff:b0:14:0a:d0:62:
         61:5e:de:b1:6b:7a:30:00:79:1a:44:2e:13:3f:7f:73:9f:36:
         e5:b9:84:19:2a:9b:f7:a2:a5:ca:4a:15:b3:47:ac:d6:fa:01:
         27:81:89:a3:fd:47:9b:8b:98:ad:5e:ca:d5:ce:f6:2c:00:33:
         1f:8c:5f:85:ae:d1:79:d4:3e:3f:70:ba:de:39:14:c4:89:0c:
         93:f4:f4:66:72:31:ed:c6:f4:5c:69:e6:b2:34:ef:bc:b5:17:
         7a:38:39:79:4a:08:e2:58:46:0f:21:1d:e8:e8:c2:17:5a:ac:
         98:ba:47:bd:ce:99:8b:83:79:43:4e:78:99:eb:89:b5:3a:a2:
         e8:cc:2a:40:aa:0f:e8:ad:5b:05:45:48:fb:0e:cd:85:0d:e4:
         e0:90:f8:bb:fa:1a:42:2a:73:00:ec:57:7d:38:93:44:07:8f:
         bb:2e:e8:46:86:35:7d:bd:ed:bf:ed:01:11:a5:ae:0a:5f:bf:
         d5:44:74:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:11 2023 by rpki-client on console-fra.rpki-client.org