Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/099fe9c6-aec2-329e-bcfb-6c9cf4178904.roa
File:                     099fe9c6-aec2-329e-bcfb-6c9cf4178904.roa (raw, json)
Hash identifier:          rbrd/kQqeSs1+ibN8bbfZQmm79+VmudY847I+wt6F00=
Subject key identifier:   AA:F8:A3:5E:7F:D4:80:15:32:AF:BC:20:62:98:B5:D2:93:99:92:A2
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F43285840677C113C1EB765FF766FD300
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/099fe9c6-aec2-329e-bcfb-6c9cf4178904.roa
Signing time:             Thu 29 Dec 2022 12:00:00 +0000
ROA not before:           Thu 29 Dec 2022 12:00:00 +0000
ROA not after:            Fri 03 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        23.251.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:67:7c:11:3c:1e:b7:65:ff:76:6f:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Dec 29 12:00:00 2022 GMT
            Not After : Feb  3 05:00:00 2023 GMT
        Subject: CN=23e89d30-e7ba-4eeb-9d5b-b7e35293ff2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:15:4b:18:da:9f:05:52:e8:2f:ab:ac:5a:94:
                    09:99:d7:2d:8e:57:ef:3b:15:ef:4d:b2:4d:fb:08:
                    80:c1:0b:51:f7:80:4a:08:f2:fd:f0:8c:89:7c:69:
                    02:77:f1:64:4c:bd:23:c1:a7:4b:63:e5:39:9b:ca:
                    6d:76:d8:f2:bd:ca:a1:b8:bc:b9:4e:fe:e2:6f:4d:
                    b1:1d:6b:4d:1f:dd:0f:dd:45:77:75:ef:83:f0:91:
                    52:78:93:ef:16:ca:eb:bf:0d:29:9d:54:56:8f:a2:
                    d1:7b:46:a5:83:25:e2:f8:bd:47:f8:68:57:07:fc:
                    05:9d:d7:46:48:fe:16:63:69:1d:97:65:69:f0:92:
                    a8:bf:88:55:8b:5a:92:81:1d:87:74:fd:8e:a1:e8:
                    35:3e:e7:97:54:06:e3:78:06:99:30:1b:9a:4d:46:
                    fd:c9:e1:df:1e:27:5f:08:c6:47:d1:b5:22:82:39:
                    5c:06:3d:a3:53:08:4f:ee:c3:ac:87:53:61:64:42:
                    38:c7:e1:e0:9b:78:84:a8:e2:6a:6c:a2:ba:cd:46:
                    f3:af:0d:93:69:0a:f6:08:c8:1a:2a:99:da:bb:f2:
                    85:f0:d7:55:c7:be:1f:98:c0:ca:93:bc:cb:40:a1:
                    53:35:74:4a:0c:3c:fc:cd:90:f5:c9:8e:df:44:58:
                    ec:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F8:A3:5E:7F:D4:80:15:32:AF:BC:20:62:98:B5:D2:93:99:92:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/099fe9c6-aec2-329e-bcfb-6c9cf4178904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:54:d9:07:df:86:8a:aa:a1:83:29:66:3c:7b:cb:8c:41:cd:
         c3:57:46:64:1e:b3:5e:c8:36:9e:4a:9d:ce:f0:59:79:b2:ff:
         89:7f:fb:15:bb:7d:61:4a:9a:5c:78:31:8e:1a:47:ab:32:80:
         00:83:15:c1:10:57:0a:e4:9b:48:22:9d:35:83:89:01:8c:1a:
         bd:79:75:88:71:c9:c1:1d:72:4f:0d:cb:af:6e:22:62:88:20:
         b0:f5:ad:83:00:0c:63:0b:4a:29:a8:fb:f3:95:f6:82:81:7a:
         31:49:14:17:65:58:16:e5:67:9b:a1:38:8b:98:cb:4f:24:6d:
         e3:33:c7:2e:ed:61:23:39:a1:a7:84:a0:b2:38:9f:80:f9:60:
         e7:89:1a:79:5a:e5:ff:e9:1b:21:1f:1e:0b:4a:92:60:b8:59:
         9b:3e:d5:a7:a0:97:4e:bb:30:be:25:7b:cd:0b:d2:61:34:12:
         e3:ca:95:87:f2:15:47:49:ca:2d:1b:67:d2:64:24:b9:5c:05:
         a9:dd:da:6e:34:10:c7:47:64:65:57:33:87:12:66:0a:b6:8f:
         d2:31:42:67:23:ee:b2:ad:4a:5a:8b:4b:f7:0f:89:74:cc:49:
         c4:17:96:98:21:f0:2c:7a:25:d3:84:12:fa:10:77:8c:54:5f:
         4c:79:ba:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:33 2023 by rpki-client on console-fra.rpki-client.org