Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b21c7e7-a2a4-4cdf-947f-270873eadba1/649cc5e2-0972-32b5-b9cc-5ee71f747949.roa
File:                     649cc5e2-0972-32b5-b9cc-5ee71f747949.roa (raw, json)
Hash identifier:          xiPw/O9Wg7vN3DIf0gRutmU6/lFYyJyzTxLFPMje0P0=
Subject key identifier:   96:89:56:C1:0D:92:57:8F:27:C8:5C:23:46:37:B0:F3:C1:1E:B6:54
Certificate issuer:       /CN=9b21c7e7-a2a4-4cdf-947f-270873eadba1
Certificate serial:       010D0C9F4328576D51CC73C042CFC17334A6342F
Authority key identifier: 06:E6:93:C4:B1:EA:13:82:9B:31:A9:A6:22:E4:84:A7:35:8F:8F:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b21c7e7-a2a4-4cdf-947f-270873eadba1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b21c7e7-a2a4-4cdf-947f-270873eadba1/649cc5e2-0972-32b5-b9cc-5ee71f747949.roa
Signing time:             Thu 09 Jul 2020 17:36:14 +0000
ROA not before:           Thu 09 Jul 2020 04:00:00 +0000
ROA not after:            Fri 12 Oct 2029 04:00:00 +0000
asID:                     17054
IP address blocks:        67.220.48.0/24 maxlen: 24
                          67.220.50.0/24 maxlen: 24
                          67.220.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:34:a6:34:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b21c7e7-a2a4-4cdf-947f-270873eadba1
        Validity
            Not Before: Jul  9 04:00:00 2020 GMT
            Not After : Oct 12 04:00:00 2029 GMT
        Subject: CN=26765382-1158-4b0c-b48e-3f87c38744a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:91:45:57:b4:1e:13:26:ba:4a:4c:fe:2b:6b:
                    94:d3:62:11:3d:9e:a8:d7:1a:e8:86:f7:cf:a8:4a:
                    5e:d3:5d:0d:a6:00:e2:df:34:6e:53:f8:60:38:fc:
                    7f:57:80:e5:03:33:6f:b1:90:b3:10:1d:0b:eb:1b:
                    4b:fe:a2:3d:28:20:b6:1a:52:eb:ac:5c:d3:68:ad:
                    cf:c8:cf:a6:f2:88:31:78:ea:c2:6d:0e:f7:25:a6:
                    96:98:4f:cc:d9:11:99:2f:c2:e1:93:c4:07:70:42:
                    1c:5f:fc:bf:28:b1:ae:cc:d3:7b:f4:49:2a:ae:15:
                    7d:03:81:ad:9d:ef:8b:72:b2:8f:1a:68:f5:08:f2:
                    30:a6:17:d5:66:c6:9b:3f:14:b6:6c:a7:b9:27:66:
                    8e:96:00:a3:a9:d5:be:f7:00:95:fa:06:ff:61:b6:
                    eb:2b:6a:bf:c9:0c:f7:c6:f5:80:3c:65:ea:68:37:
                    27:64:a2:00:90:c6:52:0b:d8:72:6e:a4:b9:2a:54:
                    98:8f:1a:91:a5:1a:1a:2b:7a:9b:d3:86:6c:c4:f5:
                    98:a0:f1:38:36:e6:8a:13:5d:51:0a:9f:e2:3c:5a:
                    be:4e:15:83:8f:90:af:25:71:6d:47:44:39:c7:22:
                    fe:db:13:86:ba:26:58:e1:82:22:b8:7b:1a:88:5c:
                    9a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:89:56:C1:0D:92:57:8F:27:C8:5C:23:46:37:B0:F3:C1:1E:B6:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b21c7e7-a2a4-4cdf-947f-270873eadba1/649cc5e2-0972-32b5-b9cc-5ee71f747949.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b21c7e7-a2a4-4cdf-947f-270873eadba1/9b21c7e7-a2a4-4cdf-947f-270873eadba1.crl

            X509v3 Authority Key Identifier:
                keyid:06:E6:93:C4:B1:EA:13:82:9B:31:A9:A6:22:E4:84:A7:35:8F:8F:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b21c7e7-a2a4-4cdf-947f-270873eadba1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.220.48.0/24
                  67.220.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:69:a7:0c:f3:d5:7d:ab:15:61:1e:b1:d5:59:3e:05:05:95:
         19:5d:23:ad:79:38:7b:fb:71:8b:7e:b1:a4:06:c3:e7:c2:8f:
         63:b6:05:7c:bd:65:a1:66:50:15:56:a5:7f:e5:24:f5:87:8f:
         68:4f:51:1d:53:db:ab:62:09:78:ad:df:a2:d6:f2:7c:df:d5:
         39:fa:42:c4:ae:47:c1:f7:db:7c:60:5c:bb:8c:19:e2:d7:8c:
         58:95:e3:df:34:d7:92:a9:49:73:06:af:84:a3:86:30:0e:b6:
         37:72:ad:14:43:fe:39:3d:b5:01:76:1d:50:24:48:38:67:29:
         e5:cd:3f:aa:7d:b2:37:cd:5d:15:92:db:b3:af:88:9a:32:ac:
         9c:0a:61:f1:27:98:b4:ec:92:0f:95:a4:01:bf:6d:44:32:ce:
         ad:29:74:5e:af:ca:3c:f9:cc:a3:09:d3:10:a1:2d:7f:5c:99:
         98:b7:e8:0e:18:7c:86:7c:59:88:c7:97:58:60:81:5e:f8:f6:
         a2:51:27:8d:b8:7f:10:a5:f2:9e:82:52:71:4f:0b:a5:17:aa:
         af:57:94:b7:fd:05:b9:79:23:8a:e4:be:6c:44:a2:38:58:9b:
         6b:57:49:82:cb:8a:3b:9d:b7:11:32:5a:b5:f8:82:d2:0f:6e:
         4f:9b:c0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:22 2023 by rpki-client on console-ams.rpki-client.org