Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b21c7e7-a2a4-4cdf-947f-270873eadba1/eea617f6-b7bb-3ce5-93f2-43db3603e461.roa
File:                     eea617f6-b7bb-3ce5-93f2-43db3603e461.roa (raw, json)
Hash identifier:          8xy99U1Bzg7tdOZ2X3hRl/2/uJMy6/dEo90hxNxEGmk=
Subject key identifier:   A1:DF:6A:1C:E1:20:13:6C:A8:66:DE:3C:DC:36:00:F3:8A:C2:33:74
Certificate issuer:       /CN=9b21c7e7-a2a4-4cdf-947f-270873eadba1
Certificate serial:       010D0C9F4328576D51CC73C042CFC17334A50541
Authority key identifier: 06:E6:93:C4:B1:EA:13:82:9B:31:A9:A6:22:E4:84:A7:35:8F:8F:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b21c7e7-a2a4-4cdf-947f-270873eadba1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b21c7e7-a2a4-4cdf-947f-270873eadba1/eea617f6-b7bb-3ce5-93f2-43db3603e461.roa
Signing time:             Thu 09 Jul 2020 17:34:56 +0000
ROA not before:           Thu 09 Jul 2020 04:00:00 +0000
ROA not after:            Wed 12 Oct 2022 04:00:00 +0000
asID:                     16715
IP address blocks:        67.220.48.0/20 maxlen: 24
                          67.220.52.0/24 maxlen: 24
                          67.220.56.0/21 maxlen: 24
                          67.220.54.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:34:a5:05:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b21c7e7-a2a4-4cdf-947f-270873eadba1
        Validity
            Not Before: Jul  9 04:00:00 2020 GMT
            Not After : Oct 12 04:00:00 2022 GMT
        Subject: CN=c21f45d5-9af2-458f-9112-34abff4ef25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2f:ed:68:0c:ec:cd:1e:d1:85:61:61:ad:91:
                    fe:44:39:ff:b9:54:7b:cb:3e:82:d1:13:42:1f:02:
                    47:48:28:de:10:b9:dc:98:ac:aa:e1:21:d1:18:a9:
                    0b:f2:d3:0a:28:a8:90:33:d7:38:7d:01:e3:c4:61:
                    a8:4f:a8:ad:b1:0d:ae:f7:51:d2:bb:19:c5:56:5e:
                    18:24:33:1c:c4:e0:33:d8:72:09:0b:95:10:7b:0d:
                    c3:4e:b5:25:14:34:f8:9b:e8:f5:14:c7:4e:72:f2:
                    f2:c5:dc:e4:6d:b3:24:a0:e8:fe:a7:6b:97:bc:0f:
                    d6:d6:c4:fb:0f:4e:8b:23:f0:d1:b6:2d:e2:94:f1:
                    42:70:92:ef:20:0c:b9:52:2b:55:2f:cd:bd:ec:97:
                    c1:ae:fc:ff:c2:d2:b3:79:46:88:a1:2c:9c:e7:4f:
                    54:b9:e3:17:12:8b:04:a7:b2:67:2a:de:88:36:70:
                    60:f1:d4:62:4e:4c:fe:58:3e:83:0d:1b:7d:44:ff:
                    b7:f6:ca:d4:7c:3d:78:48:63:75:43:60:fd:82:3c:
                    36:12:d4:20:84:8a:e1:60:89:6e:b9:90:f4:2f:7c:
                    a2:27:5f:ea:ec:45:42:f5:cc:00:93:2b:bf:b8:85:
                    47:7b:a4:ea:1e:57:ec:34:f8:c7:44:ff:59:28:ea:
                    a1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DF:6A:1C:E1:20:13:6C:A8:66:DE:3C:DC:36:00:F3:8A:C2:33:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b21c7e7-a2a4-4cdf-947f-270873eadba1/eea617f6-b7bb-3ce5-93f2-43db3603e461.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b21c7e7-a2a4-4cdf-947f-270873eadba1/9b21c7e7-a2a4-4cdf-947f-270873eadba1.crl

            X509v3 Authority Key Identifier:
                keyid:06:E6:93:C4:B1:EA:13:82:9B:31:A9:A6:22:E4:84:A7:35:8F:8F:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b21c7e7-a2a4-4cdf-947f-270873eadba1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.220.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:e0:0c:0a:8d:b4:5c:a9:5b:43:df:a6:e8:c7:a1:f3:62:e6:
         76:f1:58:64:46:6f:59:a5:8c:e8:4b:05:52:46:1e:98:92:d0:
         1f:c6:8e:15:9e:70:0f:bc:ef:b9:fa:81:14:ef:86:34:88:f7:
         ff:a0:ff:5a:19:ed:24:ac:14:69:d8:f2:9d:3f:0d:4b:7d:25:
         30:07:cd:74:45:4c:fd:b9:2d:2d:75:41:b2:b8:35:3e:28:a2:
         a5:6c:49:23:26:1c:63:00:9e:15:ea:61:dd:99:5a:44:b7:2a:
         44:ae:51:4f:d0:b9:e6:3c:5e:f1:3b:e0:fb:19:68:96:ab:6f:
         5a:bd:a5:a4:72:2d:1d:50:d5:45:67:27:6d:92:2e:d0:c0:5b:
         31:a7:7d:b4:fe:bc:80:85:50:56:29:9e:6a:8b:f0:24:15:d6:
         fb:91:c1:ae:40:33:cc:5a:8c:03:97:c5:02:c3:9e:84:27:56:
         90:fe:50:37:6f:9c:06:d9:f2:c7:5b:ad:0d:0e:d3:c7:53:0b:
         92:1e:14:57:f9:66:61:67:7b:87:c5:5d:11:4d:6d:9c:cb:45:
         7e:cf:11:5e:25:bf:be:57:43:e5:a0:c2:8e:15:8b:81:62:9b:
         88:f5:b4:a7:d3:3f:6b:bd:4f:51:ba:72:06:f5:f3:67:31:59:
         93:e7:ec:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:22 2023 by rpki-client on console-ams.rpki-client.org