Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e1760fc0-47b4-425d-8a71-8092d62044f9/475d17ad-1d14-3c99-85ef-66a74a96226f.roa
File:                     475d17ad-1d14-3c99-85ef-66a74a96226f.roa (raw, json)
Hash identifier:          8jo14+kluJ5P4EYfJqxUoUDW3J1j62B1DGWWGIbZ1NM=
Subject key identifier:   C3:42:E5:7B:C5:BA:4B:FC:AC:E9:2C:49:56:13:E0:2A:CC:4E:AF:72
Certificate issuer:       /CN=e1760fc0-47b4-425d-8a71-8092d62044f9
Certificate serial:       010D0C9F432858430789C6A2EA1F9986FF6B7F80
Authority key identifier: 44:3C:91:F0:43:7E:41:65:48:C3:B7:69:53:3B:42:D8:04:49:5E:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e1760fc0-47b4-425d-8a71-8092d62044f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e1760fc0-47b4-425d-8a71-8092d62044f9/475d17ad-1d14-3c99-85ef-66a74a96226f.roa
Signing time:             Mon 28 Aug 2023 01:00:22 +0000
ROA not before:           Mon 28 Aug 2023 01:00:22 +0000
ROA not after:            Sun 26 Nov 2023 02:00:22 +0000
asID:                     14618
IP address blocks:        173.249.168.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:07:89:c6:a2:ea:1f:99:86:ff:6b:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1760fc0-47b4-425d-8a71-8092d62044f9
        Validity
            Not Before: Aug 28 01:00:22 2023 GMT
            Not After : Nov 26 02:00:22 2023 GMT
        Subject: CN=cd7b9812-e331-4db6-bd27-47a39d58a247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e1:c5:bb:7a:eb:bb:53:a4:b4:f3:45:9d:bd:
                    2a:28:da:74:d1:71:4b:4f:59:41:6e:0d:66:c7:6e:
                    7c:78:06:61:d9:aa:dd:41:14:09:cc:9b:52:71:93:
                    30:15:75:6a:df:3e:f4:a3:5e:17:f3:d1:0e:ea:01:
                    41:09:50:9e:67:71:24:4e:c3:2c:1e:0c:00:35:0e:
                    04:57:e7:25:ca:c4:eb:51:1a:cc:73:2f:8f:ca:11:
                    94:b3:af:f5:2f:c2:68:68:3c:98:25:f9:29:99:b4:
                    3d:69:54:10:4a:26:0f:50:c1:0e:62:de:29:9d:64:
                    76:66:ca:4a:b1:13:38:5b:8d:0c:1e:f8:bd:8d:4d:
                    dc:f3:7b:ba:30:ad:e1:c7:05:58:9d:60:a8:3a:63:
                    29:d7:38:98:19:6a:af:64:fa:5b:15:84:f2:3a:60:
                    4c:5f:68:02:28:fa:40:c5:14:f1:8c:e1:c7:c8:92:
                    6f:0d:7e:5a:60:8e:42:8b:aa:19:2c:5b:08:93:90:
                    21:81:a5:40:ac:f2:cf:be:94:d7:35:e7:9a:a3:7b:
                    e8:f5:70:a9:9c:98:3a:38:97:e1:33:53:aa:b5:db:
                    25:8e:9c:cc:46:a8:37:c9:52:a6:91:83:e6:87:43:
                    99:93:1d:9a:bd:46:33:94:79:c2:91:31:e9:6a:be:
                    fa:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:42:E5:7B:C5:BA:4B:FC:AC:E9:2C:49:56:13:E0:2A:CC:4E:AF:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e1760fc0-47b4-425d-8a71-8092d62044f9/475d17ad-1d14-3c99-85ef-66a74a96226f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e1760fc0-47b4-425d-8a71-8092d62044f9/e1760fc0-47b4-425d-8a71-8092d62044f9.crl

            X509v3 Authority Key Identifier:
                keyid:44:3C:91:F0:43:7E:41:65:48:C3:B7:69:53:3B:42:D8:04:49:5E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e1760fc0-47b4-425d-8a71-8092d62044f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:d1:7f:f4:e6:78:49:55:53:cd:0b:46:34:5c:7c:2b:5d:af:
         97:63:f1:05:62:3a:2a:b1:26:c4:07:9e:95:62:7c:3d:0a:76:
         ff:41:be:b8:15:bb:ca:8c:6e:49:54:3b:49:5b:50:dc:68:27:
         36:7a:8e:ab:5f:67:1d:ba:49:29:54:cd:c9:43:6d:85:cc:29:
         81:8d:c4:ba:2d:c2:98:44:96:a2:df:ed:34:eb:37:12:1c:50:
         ac:24:76:a5:e5:5d:39:dd:ea:a4:98:b8:68:58:1e:43:b0:2c:
         b4:1e:3b:55:9d:39:da:97:fd:3b:bf:92:3d:01:4d:94:b6:5f:
         6b:d6:20:a4:c2:e4:b9:e4:af:54:05:37:de:ea:20:56:7b:6a:
         a9:40:bd:f7:b7:ae:ec:a6:e5:dd:14:4f:e3:63:e5:f2:03:bb:
         f3:41:1c:b5:7b:d6:88:19:f1:6c:5c:38:05:d8:2e:f7:da:c2:
         e0:0c:fa:d6:99:0c:8b:45:76:90:cf:2d:cc:de:a0:1e:80:d5:
         6e:37:79:0d:7f:95:d9:10:c6:b1:a3:99:bd:47:e0:da:ff:c8:
         e6:73:3f:68:14:e0:9b:24:ea:8d:e2:61:6d:fd:67:cb:41:be:
         5f:bd:df:e9:5f:9e:c6:b0:43:66:2d:35:2d:a9:9c:20:71:d1:
         5c:b9:44:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:02 2024 by rpki-client on console-ams.rpki-client.org