Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/c79aaa19-c648-3e63-b87a-e5bb345d8546.roa
File:                     c79aaa19-c648-3e63-b87a-e5bb345d8546.roa (raw, json)
Hash identifier:          5kqyUfIKtX+nkN4QXtyqInAe11Wy+OR4UnyTpRrpmys=
Subject key identifier:   11:F2:E8:B9:69:F3:A6:2C:BF:4D:C8:41:04:E4:A4:B0:90:06:D7:7C
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F432858401CE4C6F63B368821D1C5CA00
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/c79aaa19-c648-3e63-b87a-e5bb345d8546.roa
Signing time:             Fri 02 Dec 2022 12:00:00 +0000
ROA not before:           Fri 02 Dec 2022 12:00:00 +0000
ROA not after:            Sat 07 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        76.223.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1c:e4:c6:f6:3b:36:88:21:d1:c5:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Dec  2 12:00:00 2022 GMT
            Not After : Jan  7 05:00:00 2023 GMT
        Subject: CN=75de5997-88ed-44a5-ae5c-e99d69a6c64e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:0a:b8:ad:d3:77:3d:1d:1c:3a:48:b1:bb:
                    40:56:30:60:db:7d:eb:e7:b4:8e:8f:63:da:17:d3:
                    ff:d4:9d:f2:2a:a3:23:7f:35:48:20:7e:cf:98:fe:
                    17:a4:6b:d8:e0:ed:df:b8:28:05:1d:07:5c:5e:d2:
                    22:ab:f0:b5:7f:6a:df:d4:cc:0f:47:4a:0d:8e:cb:
                    4f:82:2a:66:b6:7b:d3:4f:90:aa:72:1d:07:39:e7:
                    1c:8e:5f:2c:7d:73:a7:9d:0c:40:4e:90:5d:04:55:
                    ae:0e:27:5e:af:b4:a2:7b:9a:36:ad:0d:a0:8f:31:
                    24:9d:04:7e:ac:a9:66:b2:7d:16:14:6a:c1:80:3d:
                    9e:f4:13:72:0d:55:8a:05:56:71:cf:c4:39:8d:4d:
                    a4:18:8b:c0:e5:5b:d9:34:5a:bd:78:36:61:2c:5b:
                    c2:a1:5d:3b:0d:42:8a:8e:ac:70:cf:38:1b:5c:cb:
                    0d:1a:78:74:20:93:59:5f:c1:2d:15:a9:59:cf:47:
                    92:20:db:8a:b8:73:46:5d:a6:d1:f1:94:47:2c:14:
                    c0:2a:0c:61:7b:1f:2a:96:23:36:1b:0c:7e:61:be:
                    6b:67:91:0d:80:3f:66:11:aa:3e:95:0d:82:45:33:
                    a2:dd:17:81:27:7a:cd:ed:4e:23:41:c2:31:6a:ba:
                    ff:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F2:E8:B9:69:F3:A6:2C:BF:4D:C8:41:04:E4:A4:B0:90:06:D7:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/c79aaa19-c648-3e63-b87a-e5bb345d8546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:d8:98:28:fb:3b:24:7b:dd:43:ee:01:ba:ca:46:12:ed:d1:
         c0:fb:b0:9b:b0:68:fc:3f:ea:d1:8a:43:76:ef:f6:05:a8:19:
         9c:82:c5:cd:b1:d2:6f:08:18:ef:95:84:9d:3c:07:36:86:aa:
         c1:9f:82:f4:46:6f:37:0f:53:16:b5:6a:ff:a5:8a:f6:76:d8:
         97:c3:38:8e:7c:c6:37:d3:1c:16:30:8d:f4:9d:3a:a5:42:79:
         8f:5c:f7:2c:a6:5c:f2:b5:d1:dd:24:ff:29:0f:ca:1f:0e:69:
         94:30:64:2d:aa:1c:31:44:57:2c:40:13:86:e5:42:7e:61:d1:
         af:ef:e5:f9:a1:c0:a9:19:cd:a7:22:17:33:19:5e:f0:94:06:
         b3:cb:b9:be:72:f2:cf:0c:74:02:3f:39:80:c9:7e:d0:34:ef:
         e7:ea:dd:b8:a4:59:19:ad:d9:3e:3b:37:b4:90:e6:b8:9f:ef:
         5c:64:89:ff:b7:c9:b4:f2:22:93:14:1d:9d:ab:a6:84:44:c3:
         53:0e:1a:1e:16:ec:e0:1f:4b:02:c2:73:85:a5:6c:af:77:e9:
         8a:e1:8a:24:b3:96:de:d5:8a:00:1e:a7:06:a4:75:94:fa:14:
         78:7c:7f:6f:cc:f2:a3:9a:b0:13:32:dc:e2:62:5a:5c:bf:93:
         dc:49:72:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:29 2023 by rpki-client on console-ams.rpki-client.org