Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/cdbfc67e-259a-31b9-b0d0-cee212058511.roa
File:                     cdbfc67e-259a-31b9-b0d0-cee212058511.roa (raw, json)
Hash identifier:          1BoD5b1yMKeIRmmnSB0W8Fn8M4EdVLSx38AjeDMqKtw=
Subject key identifier:   FB:13:47:98:D4:BD:97:90:00:18:DB:79:53:E2:F6:99:C8:B9:9B:EE
Certificate issuer:       /CN=872ab566-07c0-4d6b-ab98-45aed75350ff
Certificate serial:       010D0C9F4328583CBE1AFB01834C1FF3E8C4EE40
Authority key identifier: BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/cdbfc67e-259a-31b9-b0d0-cee212058511.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        184.169.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:be:1a:fb:01:83:4c:1f:f3:e8:c4:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=872ab566-07c0-4d6b-ab98-45aed75350ff
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=ef37005c-5ec8-448f-913c-996c6fe020c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:47:17:24:f2:b7:6f:10:83:05:58:01:bb:50:
                    a6:28:7b:8d:ff:4e:43:43:d9:1e:a4:aa:2f:8f:ba:
                    70:a1:b5:56:b3:6a:14:72:f4:17:bb:5c:08:92:5b:
                    a6:67:6f:c9:d9:72:da:0d:ea:0d:9c:71:60:90:4f:
                    fb:26:35:93:d3:ae:a8:e2:67:1b:bb:20:48:21:17:
                    24:3d:d3:bb:2f:72:1e:fd:14:8a:fc:75:ef:5b:1f:
                    f8:7a:4a:c3:ba:88:8b:5e:2c:c4:04:c0:2b:ca:dd:
                    15:92:62:e7:c0:e6:b3:9a:64:f9:1b:dd:15:5a:d8:
                    f0:6a:98:57:c5:01:e8:f0:d4:f0:9e:b5:54:8a:d4:
                    ed:48:c5:02:f7:6b:c6:43:89:11:e4:a0:01:06:49:
                    9d:ef:39:a9:5a:c4:47:db:b9:0f:e2:b4:0e:a4:46:
                    88:ca:a0:df:52:32:09:67:b4:cc:ee:0a:c7:1d:cf:
                    f6:92:5e:de:fa:37:da:d4:7b:d0:b2:17:92:1f:50:
                    46:65:1f:06:40:99:d7:7a:d0:12:78:66:08:cc:b9:
                    df:a3:4f:79:35:80:3d:9d:63:3a:fa:2c:e0:bc:6d:
                    d7:73:23:96:46:da:89:bd:ef:9e:af:24:77:91:86:
                    6d:7f:f6:d4:05:9b:b8:db:45:57:0e:07:71:40:d5:
                    c9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:13:47:98:D4:BD:97:90:00:18:DB:79:53:E2:F6:99:C8:B9:9B:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/cdbfc67e-259a-31b9-b0d0-cee212058511.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/872ab566-07c0-4d6b-ab98-45aed75350ff.crl

            X509v3 Authority Key Identifier:
                keyid:BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:5c:3c:61:49:59:18:44:a5:3f:cb:04:f6:81:d7:9c:05:1d:
         2d:b9:2e:59:b5:2b:bf:c0:4f:74:28:5b:ad:48:1a:ed:1f:86:
         53:4f:71:2e:07:d6:b7:96:ba:57:d6:0e:cd:b2:ee:fc:6c:90:
         ef:cb:03:98:1e:59:17:f7:02:30:fc:c2:50:23:53:b4:8d:2c:
         65:1f:ea:f8:27:88:b4:50:f9:63:da:39:c0:97:e9:c6:06:0e:
         2d:02:1e:32:ee:b9:64:b4:e4:ae:79:73:24:b4:8d:da:0c:70:
         52:02:f0:88:78:ca:78:a9:a4:41:eb:20:b8:8a:51:03:93:44:
         cf:ac:cc:41:67:99:5f:50:2a:18:f2:7d:48:f9:ff:f2:11:90:
         0c:ff:53:1b:d2:2e:23:e0:22:26:ce:4b:96:f5:ad:a5:d2:66:
         59:af:1a:aa:a5:e5:98:00:33:68:af:1a:e1:da:35:e5:9e:f3:
         7a:90:61:cf:70:12:a3:49:25:f4:b8:c9:a4:f9:8e:ff:b1:0c:
         3c:25:5e:6f:23:6c:3f:e2:36:6b:eb:97:f3:19:ab:30:82:24:
         cc:07:e8:18:33:bd:c3:55:9e:84:53:1e:b0:22:4e:05:2a:bc:
         ca:e4:99:bc:be:56:f3:df:7c:85:4b:9f:04:e4:bf:4e:82:55:
         a8:78:24:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:21 2023 by rpki-client on console-ams.rpki-client.org