Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/15d53434-e064-331c-8b99-725c6d4b5b1c.roa
File:                     15d53434-e064-331c-8b99-725c6d4b5b1c.roa (raw, json)
Hash identifier:          C4p7F6yCOOTu2/dnZllmeKvrx8VgSdBWJqtTuelLelI=
Subject key identifier:   0E:E3:A0:D0:1E:8D:65:95:69:40:10:BD:7A:9C:08:ED:29:46:2A:AD
Certificate issuer:       /CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
Certificate serial:       010D0C9F4328583F030A834215D22C7262F4CD00
Authority key identifier: 24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/15d53434-e064-331c-8b99-725c6d4b5b1c.roa
Signing time:             Wed 29 Sep 2021 20:03:54 +0000
ROA not before:           Wed 29 Sep 2021 20:03:54 +0000
ROA not after:            Tue 26 Nov 2024 05:00:00 +0000
asID:                     207459
IP address blocks:        157.254.171.0/24 maxlen: 24
                          157.254.172.0/24 maxlen: 24
                          157.254.173.0/24 maxlen: 24
                          157.254.219.0/24 maxlen: 24
                          157.254.223.0/24 maxlen: 24
                          157.254.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:03:0a:83:42:15:d2:2c:72:62:f4:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
        Validity
            Not Before: Sep 29 20:03:54 2021 GMT
            Not After : Nov 26 05:00:00 2024 GMT
        Subject: CN=3e674d5d-6cbb-41a3-b61b-ae5dcdde8300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9d:41:88:d4:8e:4e:92:ff:a6:8f:06:2b:09:
                    be:0b:fe:b4:cf:7e:53:ae:97:48:88:dd:5c:ec:f2:
                    1a:a0:73:7a:16:72:94:c1:25:b5:c1:c7:f1:c5:78:
                    49:72:d8:8e:df:2b:22:45:a4:68:77:1f:00:75:44:
                    73:35:21:39:a2:08:93:bb:45:68:3c:db:80:04:c2:
                    3b:1e:a9:a2:20:f8:1e:48:52:5a:55:d4:75:0c:71:
                    a2:b9:78:3f:93:c0:f3:29:2c:9f:e3:91:0c:2b:20:
                    35:ba:d9:1b:d0:ef:2c:19:76:0f:a5:96:82:01:73:
                    bd:14:1b:1c:a3:8a:5f:08:e5:c8:8c:63:1e:ed:18:
                    0a:80:60:c3:46:4d:2c:80:cd:c9:0a:4d:8d:72:14:
                    8e:31:54:9f:d8:73:06:84:93:f4:a3:a5:1b:ea:00:
                    70:45:9b:10:cc:b5:25:3f:ff:39:8e:3b:33:ff:77:
                    a3:5c:84:a5:89:d3:78:4c:f7:99:98:e3:2a:00:fa:
                    00:50:dd:f3:ec:96:d0:6f:df:9c:d2:53:2f:23:b7:
                    1f:a2:7f:0e:c9:f8:5c:bb:3f:d6:68:e5:2e:23:40:
                    4b:30:0e:2c:76:25:b4:76:c9:7d:55:6d:b6:a4:78:
                    33:d7:de:8b:56:be:cf:af:cd:c0:b2:8b:82:2d:01:
                    79:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E3:A0:D0:1E:8D:65:95:69:40:10:BD:7A:9C:08:ED:29:46:2A:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/15d53434-e064-331c-8b99-725c6d4b5b1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/c097bbd1-dde1-4ee5-a727-5ee45da69052.crl

            X509v3 Authority Key Identifier:
                keyid:24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.171.0-157.254.173.255
                  157.254.219.0/24
                  157.254.223.0/24
                  157.254.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:7f:f8:ca:00:ac:af:6f:52:f0:f9:a8:40:97:56:e2:98:8f:
         39:60:67:40:31:88:94:68:68:09:9b:39:bb:8f:03:75:37:04:
         58:d6:2d:bc:52:f8:19:83:ba:a5:bd:01:8c:23:d3:98:1e:0f:
         49:99:c6:4a:94:e7:fc:fe:d3:4b:04:3e:57:2d:f1:bb:58:a1:
         62:4f:c3:90:a0:1b:af:0d:1b:c5:ff:f6:6e:8f:6d:38:ce:42:
         e1:a2:94:fa:85:7b:52:90:d1:a8:ec:04:08:b3:f4:fa:b3:94:
         c7:00:fd:23:0c:31:5b:23:fb:fc:65:27:0e:1f:d8:88:8c:dc:
         7a:42:5d:26:e8:99:83:c6:12:2c:94:a9:20:ae:cc:f2:12:c8:
         12:17:92:d8:23:14:74:ab:f5:4b:f6:93:8a:02:a6:ef:c0:c7:
         56:0a:de:2f:33:4c:30:46:c0:88:a9:ff:ab:5d:fc:a7:36:ce:
         f7:7c:45:8e:f2:61:19:36:de:7f:26:ea:21:32:5d:4d:b2:9e:
         92:01:10:d3:3b:08:18:24:bb:6b:a0:b8:81:6f:02:3f:f0:7f:
         0e:ed:b0:7e:a7:21:4c:cc:0a:92:37:90:7c:b6:ae:3a:f0:56:
         f0:ea:0e:45:f6:b7:b9:67:bf:de:21:59:56:39:55:a1:08:d1:
         b1:24:3c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:51 2024 by rpki-client on console-ams.rpki-client.org