Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/90215a9a-0bb0-3289-a037-8e363fc5a545.roa
File:                     90215a9a-0bb0-3289-a037-8e363fc5a545.roa (raw, json)
Hash identifier:          e5JcIVO6UB3E31S+uJeSrSm9VGs3xDhF1JaJaIC8VPQ=
Subject key identifier:   6F:10:51:15:D9:F7:47:37:EC:41:62:C9:F0:B3:EF:AD:C9:2B:68:09
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583DD2EB9CF670434316E2527080
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/90215a9a-0bb0-3289-a037-8e363fc5a545.roa
Signing time:             Fri 06 May 2022 12:00:00 +0000
ROA not before:           Fri 06 May 2022 12:00:00 +0000
ROA not after:            Sat 11 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        23.249.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d2:eb:9c:f6:70:43:43:16:e2:52:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: May  6 12:00:00 2022 GMT
            Not After : Jun 11 04:00:00 2022 GMT
        Subject: CN=32272ade-7d22-419b-aa29-b51e4ffa85c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bb:34:c5:c5:ca:33:2c:59:a5:88:bf:f5:96:
                    e7:43:c3:51:d4:b5:35:8d:be:5e:35:57:b7:a0:2f:
                    9e:20:c5:d2:6c:31:e0:a9:fb:28:2f:09:74:c7:a8:
                    29:d2:a7:bd:1c:ce:d9:d4:4a:af:01:41:63:e9:6b:
                    56:c5:77:ad:70:54:d3:12:57:5f:4e:ff:57:96:e0:
                    df:a7:35:60:21:3c:5c:64:e8:97:54:8b:06:29:96:
                    8a:aa:10:a8:bd:43:e2:df:61:d6:59:04:3d:41:26:
                    e2:6d:89:bd:60:94:a9:cf:78:74:85:dc:e6:70:24:
                    ec:fd:a2:85:fd:15:79:4a:5f:4d:2e:8c:c0:eb:fc:
                    f6:5b:df:16:78:85:ac:53:54:47:5d:1b:fc:d1:ce:
                    17:bb:b1:09:3a:71:41:94:91:9c:f8:69:e5:70:85:
                    1a:d9:f9:c9:0f:0d:d1:f1:06:af:81:39:7f:33:ea:
                    06:34:0c:4d:f2:e2:f1:1d:99:c8:44:13:8f:c9:eb:
                    26:ed:dc:bc:54:7a:e2:f0:fc:38:43:e7:10:18:a7:
                    4d:cc:c2:36:1f:78:7d:ec:42:5a:0f:8b:8c:e6:93:
                    2e:13:fb:4e:9d:3c:07:26:44:5f:1a:5a:87:ed:cf:
                    59:47:5e:d7:12:83:f5:38:8f:2b:81:24:39:0b:7c:
                    e3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:10:51:15:D9:F7:47:37:EC:41:62:C9:F0:B3:EF:AD:C9:2B:68:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/90215a9a-0bb0-3289-a037-8e363fc5a545.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:c9:37:bf:70:81:de:c8:93:0a:bb:b2:a8:41:94:a5:11:23:
         aa:bf:64:3b:26:2a:bd:79:ed:bc:9e:a4:31:6f:f1:a8:9f:22:
         32:c0:99:eb:a5:31:3b:aa:04:f4:03:ef:4b:3b:1b:ef:6f:61:
         9e:21:2f:ab:84:8b:8c:d7:20:86:ee:34:1b:e8:cb:1b:d5:48:
         46:b8:bd:b0:a4:a6:a3:dc:36:cf:22:0f:d2:02:59:5c:9b:4f:
         a9:aa:94:96:18:36:92:39:16:d2:72:bf:3b:08:e7:45:82:8b:
         87:fd:1d:c4:70:81:59:81:8e:7a:04:1e:52:be:f2:79:7b:ec:
         07:c7:11:08:c4:71:2f:12:02:30:68:14:a1:35:71:78:63:c4:
         08:9c:a8:ec:d2:d4:f9:04:46:dc:b8:c8:81:57:f2:1f:b9:f9:
         fe:f8:ab:15:60:8e:6c:27:e0:5d:8e:7a:2f:4a:a6:aa:05:f7:
         7b:98:6e:f4:d5:6f:b3:c3:67:63:90:ff:61:fa:71:0e:71:a2:
         5c:2e:c9:71:6a:b3:dd:42:7a:8a:29:26:c0:f4:cb:ef:ba:88:
         db:e2:bd:6d:94:08:0d:db:0e:fc:64:37:b5:af:8d:ff:cc:7b:
         16:39:e2:57:e6:1f:6d:ca:0b:7f:aa:98:63:6d:06:45:f4:be:
         f0:c5:dd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:28 2023 by rpki-client on console-ams.rpki-client.org