Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c/63fc0c9b-92c8-392e-8c49-b654966af9de.roa
File:                     63fc0c9b-92c8-392e-8c49-b654966af9de.roa (raw, json)
Hash identifier:          FNhVz2TsngldPaJtATDM/RC1H13/57kykTjUNcgJUR4=
Subject key identifier:   66:69:18:93:82:D4:AF:1D:AE:0E:CC:F1:20:C5:EB:66:2D:EF:7E:8F
Certificate issuer:       /CN=e010b509-aedf-4da5-bbd8-8c6507d3a31c
Certificate serial:       010D0C9F4328584726D07E98603CFD0293D3F500
Authority key identifier: 9F:DA:FC:C7:36:0D:5E:E3:8D:7A:74:40:41:5E:0C:7D:F1:78:CE:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c/63fc0c9b-92c8-392e-8c49-b654966af9de.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        173.195.209.0/24 maxlen: 24
                          173.195.210.0/24 maxlen: 24
                          173.195.211.0/24 maxlen: 24
                          173.195.215.0/24 maxlen: 24
                          173.195.216.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:7e:98:60:3c:fd:02:93:d3:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e010b509-aedf-4da5-bbd8-8c6507d3a31c
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=3adb60eb-6b47-48e7-8fdd-cfdeb1fca21e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c8:3b:89:c8:61:cc:a7:41:5a:9a:90:2f:84:
                    3f:20:cb:8e:bf:5c:bf:ec:30:ce:56:e0:57:a6:71:
                    a5:7c:c1:a5:42:23:97:e9:0d:4d:05:a5:1c:91:6d:
                    60:b1:e8:de:f6:09:2e:5c:2a:88:7b:67:c5:25:30:
                    07:f2:7f:9d:83:fb:a8:9e:ab:86:ba:db:fe:96:18:
                    de:80:1c:5c:a9:0e:02:23:8b:f8:64:45:03:12:58:
                    8b:7a:e9:2e:35:ad:6c:9e:a7:01:5b:9b:77:5f:93:
                    34:4a:55:e7:52:7c:da:92:57:54:50:b0:26:28:1b:
                    6f:49:3a:b1:d6:af:f4:44:84:46:8a:20:95:6c:40:
                    1a:b2:d7:f5:11:b8:45:b1:b9:3e:4b:ba:63:df:15:
                    88:6f:96:d7:24:0a:67:ec:fa:e5:e9:a3:ea:05:f0:
                    d3:e9:33:93:10:e0:98:01:18:19:60:ed:46:ef:7d:
                    1d:f4:6c:7b:ed:16:0e:b8:2a:25:5a:19:7b:bd:b8:
                    bf:dc:3e:fb:88:d5:9d:dd:66:f6:03:04:0c:eb:96:
                    d4:d6:30:52:1c:6b:ef:e6:18:2d:76:0c:ab:b5:2e:
                    d0:24:85:b1:a2:28:f8:d3:b0:fe:32:bb:4b:24:f5:
                    1f:cd:6f:21:f3:19:3e:5f:8f:62:b0:25:26:15:f8:
                    01:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:69:18:93:82:D4:AF:1D:AE:0E:CC:F1:20:C5:EB:66:2D:EF:7E:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c/63fc0c9b-92c8-392e-8c49-b654966af9de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c/e010b509-aedf-4da5-bbd8-8c6507d3a31c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:DA:FC:C7:36:0D:5E:E3:8D:7A:74:40:41:5E:0C:7D:F1:78:CE:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e010b509-aedf-4da5-bbd8-8c6507d3a31c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.209.0-173.195.211.255
                  173.195.215.0-173.195.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:73:83:7c:ef:fb:0b:ed:55:e5:e1:f5:52:8d:a3:8c:d7:04:
         d0:63:5e:65:9f:0c:bc:65:1f:0c:9b:2d:f1:cb:b8:35:a4:30:
         fd:2d:9a:a7:7e:62:81:05:e9:f8:7a:2f:26:6d:7d:63:81:91:
         bb:ea:df:d2:a6:45:9d:f3:30:bb:46:d5:90:d9:1e:2f:df:d6:
         e2:ac:26:33:39:0a:2b:68:a5:01:1d:e1:79:05:b0:ab:ba:34:
         ca:42:c0:d1:7a:fd:b2:66:bd:66:2d:89:e8:c1:3b:f3:9e:32:
         8d:f9:4d:22:62:25:fd:69:1f:2e:e8:4f:30:c2:c9:61:e0:38:
         b1:c4:49:d6:36:45:2a:d2:aa:26:97:6d:f3:17:11:07:0b:58:
         92:0b:de:4a:6c:2f:24:66:68:e2:e0:d1:57:d2:51:10:36:2e:
         4d:7b:b5:32:91:85:d0:3a:d8:75:ee:3b:0c:fd:51:c1:28:7f:
         b2:13:29:c4:30:12:9e:cc:1d:06:75:94:51:fe:a0:05:d2:70:
         70:2b:cf:36:6c:1f:51:c3:4e:68:28:14:df:ce:3b:f4:34:5a:
         4c:be:ff:cb:93:a0:3f:a9:a9:90:23:3b:a5:b5:e8:88:24:ce:
         c3:db:b5:b2:23:fc:d7:38:8f:64:88:34:fc:68:0b:a1:64:b7:
         73:b6:10:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 15:30:06 2024 by rpki-client on console-ams.rpki-client.org