Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c/122e59e7-6d2c-3eb7-9d26-c38624c37679.roa
File:                     122e59e7-6d2c-3eb7-9d26-c38624c37679.roa (raw, json)
Hash identifier:          pOBe5A93/WuVuq8DTopVcJUkD+kOWSeFF+H6fLPSNOQ=
Subject key identifier:   11:D1:41:FA:44:91:40:67:C1:8E:E5:F0:E2:2B:C5:86:19:F9:13:64
Certificate issuer:       /CN=e010b509-aedf-4da5-bbd8-8c6507d3a31c
Certificate serial:       010D0C9F432858472405C5788F8117146CB7FD80
Authority key identifier: 9F:DA:FC:C7:36:0D:5E:E3:8D:7A:74:40:41:5E:0C:7D:F1:78:CE:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c/122e59e7-6d2c-3eb7-9d26-c38624c37679.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     14618
IP address blocks:        173.195.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:c5:78:8f:81:17:14:6c:b7:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e010b509-aedf-4da5-bbd8-8c6507d3a31c
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=591d35ad-aed9-45e3-bf73-9d75f6ac7494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4f:dc:57:00:25:68:4f:db:90:ff:e0:de:9a:
                    59:aa:4a:bc:e2:c4:a6:e8:65:5f:6a:0d:51:7e:4a:
                    0b:3f:6e:d4:18:0e:ec:1d:03:d3:71:1c:58:5a:5a:
                    f5:c9:ca:df:55:f0:08:1f:5d:d8:45:a3:0f:87:e1:
                    03:cb:14:a1:27:86:03:95:41:a4:1b:74:5e:69:b2:
                    22:f3:d3:c1:fa:b6:56:11:1b:59:ac:65:5d:34:73:
                    38:2c:e3:46:2c:23:0e:de:01:b4:c5:29:63:4c:4e:
                    64:49:b1:64:9d:80:e0:03:27:66:d6:9e:bc:24:14:
                    7e:91:57:9a:a4:08:88:3a:d5:3b:42:06:cc:6a:96:
                    25:48:72:ca:53:5c:01:2c:36:f9:98:d7:00:15:1b:
                    e2:36:71:22:88:97:3d:96:f9:2a:dc:78:4c:1a:c9:
                    fe:a5:5d:a4:0d:9d:2c:07:5d:ac:4a:2a:1c:0c:36:
                    33:48:81:2a:4a:0d:38:c1:58:67:9d:d1:68:93:cc:
                    d2:c0:02:96:be:f8:d1:4c:1d:d1:16:7c:5a:b1:00:
                    ea:ca:4a:f0:cf:86:65:a8:fa:b6:81:27:19:5d:96:
                    db:16:74:8f:94:53:ae:44:f8:e5:00:2a:01:18:a3:
                    03:f4:08:2e:a9:1e:c1:3f:c8:00:07:d0:e3:46:81:
                    bc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D1:41:FA:44:91:40:67:C1:8E:E5:F0:E2:2B:C5:86:19:F9:13:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c/122e59e7-6d2c-3eb7-9d26-c38624c37679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c/e010b509-aedf-4da5-bbd8-8c6507d3a31c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:DA:FC:C7:36:0D:5E:E3:8D:7A:74:40:41:5E:0C:7D:F1:78:CE:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:9c:15:e1:da:ff:31:ba:21:e8:0d:fa:17:09:0f:4e:b9:0f:
         33:5b:42:9b:f9:f0:b3:60:37:54:70:83:d8:3f:4e:bb:e3:06:
         e5:ef:c4:29:0a:d9:59:9b:b1:82:59:b3:b0:b7:42:7c:03:44:
         f5:69:89:1d:cf:66:3e:f1:c7:10:df:99:d6:dc:36:52:16:64:
         2c:7f:ad:49:53:be:15:25:35:c3:9a:7c:58:f1:bf:2f:30:02:
         43:67:ce:00:02:4f:ce:d8:04:6b:38:b7:15:f8:4f:29:dc:fa:
         61:23:37:ad:25:d9:c1:b5:2d:00:4a:51:89:18:34:8c:59:9b:
         c3:55:17:c8:82:ee:f5:20:16:d6:43:17:9d:06:48:c0:5c:91:
         72:e9:40:b8:1f:03:33:5e:e9:a2:2b:43:ae:a9:16:4c:c1:8c:
         3f:0c:1b:7e:cc:f5:1b:c8:0d:27:d9:a6:7c:02:81:81:c2:1e:
         5b:d2:66:90:a4:a5:27:53:83:d5:8b:93:10:04:dc:47:ea:b4:
         d6:63:23:d8:4b:30:82:a1:2e:97:20:b7:95:fb:c4:e6:f6:ec:
         71:7f:6e:93:8a:a8:62:6a:9c:82:7e:ea:38:6f:e6:16:1c:1c:
         a7:56:59:ed:96:a6:9f:17:9b:93:ff:aa:87:4b:0e:c3:43:7b:
         9f:59:47:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 15:30:06 2024 by rpki-client on console-ams.rpki-client.org