Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/7950e6be-0b39-3033-8f0b-6302d194db91.roa
File:                     7950e6be-0b39-3033-8f0b-6302d194db91.roa (raw, json)
Hash identifier:          pW+2mXiEzQDz++C3kovU6Fdbv2IWjB7+1cqlrF7AxtY=
Subject key identifier:   0A:E7:B8:4C:D7:A2:3A:90:11:24:52:0C:C2:65:03:C0:3E:27:C9:96
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583E1F506CDB42A5B08EC9D3B1FC
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/7950e6be-0b39-3033-8f0b-6302d194db91.roa
Signing time:             Fri 03 Jun 2022 12:00:00 +0000
ROA not before:           Fri 03 Jun 2022 12:00:00 +0000
ROA not after:            Sat 09 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        199.127.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1f:50:6c:db:42:a5:b0:8e:c9:d3:b1:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Jun  3 12:00:00 2022 GMT
            Not After : Jul  9 04:00:00 2022 GMT
        Subject: CN=1f43cc9e-4710-4686-ba00-50b33f19ed2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:26:76:09:26:7b:cc:b9:8b:b4:a6:97:6d:eb:
                    7c:38:6b:1f:a2:0d:84:8a:77:07:2a:18:1a:43:7b:
                    f5:4a:81:0e:58:30:23:a5:36:ef:79:9c:a3:ec:14:
                    a1:b4:c5:7f:2f:6b:3d:a3:d7:72:64:bf:15:55:d0:
                    d1:b9:5c:60:c6:cb:9e:de:b6:9d:e1:f4:b4:4f:05:
                    5a:dd:8b:32:2c:e3:8c:e6:10:64:d1:1e:b0:28:2e:
                    aa:21:9b:87:10:81:24:b4:67:a7:a5:39:30:c6:e0:
                    11:d1:e3:cd:63:56:af:a6:59:5e:2d:27:36:3a:02:
                    b9:f3:4f:9b:ad:cd:70:4c:59:38:6b:32:2b:d9:f6:
                    b6:c6:f9:e9:72:9a:bb:1d:8f:b2:04:9c:e5:dd:7a:
                    bb:d7:cb:36:ac:f8:86:ac:c7:8a:a5:45:65:f1:85:
                    0f:7d:95:c6:d7:a3:93:52:fb:4f:99:20:f4:52:ee:
                    1b:6d:fd:79:54:f7:6c:a7:90:b6:98:96:17:20:b5:
                    fe:66:6e:90:b6:ea:89:e4:47:bb:0d:d4:89:7b:fc:
                    f4:69:b1:53:c9:ac:ed:30:0d:c9:cb:81:db:d8:21:
                    4b:4d:12:51:82:cb:6f:aa:63:e4:43:45:70:5b:c8:
                    68:fa:ea:ac:83:df:e4:92:11:ab:9b:da:b6:1e:3c:
                    d2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E7:B8:4C:D7:A2:3A:90:11:24:52:0C:C2:65:03:C0:3E:27:C9:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/7950e6be-0b39-3033-8f0b-6302d194db91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.127.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:c8:42:e0:f5:d5:70:14:ca:e1:bf:fe:bf:ae:9b:a4:b1:de:
         60:94:05:c3:a9:4f:87:b6:84:20:47:24:4d:1d:d1:44:41:ea:
         d5:55:39:db:b3:19:4a:23:13:a0:50:b4:43:e1:a2:8d:94:b5:
         5c:03:ba:a2:f6:f0:8d:2a:ef:61:7b:a4:7b:2d:69:09:a7:94:
         9c:b9:32:f5:9e:f1:8b:03:a9:9c:74:c8:5c:4e:46:71:2d:d5:
         e2:db:e7:83:d3:9c:cd:4c:eb:b6:c5:49:12:8a:63:bd:79:ff:
         01:c9:72:da:18:ca:94:6c:e6:35:aa:9f:3f:9e:cf:25:12:cf:
         d6:3e:64:28:68:54:f9:ba:3a:9a:dc:4e:6b:36:a8:59:c0:23:
         ea:ed:0c:8c:c2:33:47:34:77:a3:9b:fe:f9:c7:96:48:66:3c:
         a6:b9:75:3b:f7:29:db:df:8b:a3:14:ac:11:57:a8:b1:eb:69:
         00:85:b2:a3:33:e8:e4:64:63:6a:60:67:9b:c0:a0:63:56:af:
         4b:ea:5e:c5:ed:4c:8d:6f:63:2f:12:b6:8a:86:82:86:9b:c9:
         15:d9:f2:a7:5c:56:64:3c:c1:56:02:6b:f7:77:67:ee:cd:e6:
         58:58:69:8a:2e:7b:32:77:aa:93:db:bf:07:25:a0:a1:5f:5e:
         40:80:d8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:34 2023 by rpki-client on console-fra.rpki-client.org