Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/245a7f0b-7dd5-3a0d-9199-010d58fc74dc.roa
File:                     245a7f0b-7dd5-3a0d-9199-010d58fc74dc.roa (raw, json)
Hash identifier:          mkaoTsPlmh9OjeB6SDlVmtZbhMt3sjDdytDPdYp+KiY=
Subject key identifier:   DF:BD:5E:06:B1:CB:0E:FD:75:AB:85:C3:77:B9:BC:75:B8:7A:1C:4C
Certificate issuer:       /CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
Certificate serial:       010D0C9F4328583BAC030F9975748B62D9F44F3C
Authority key identifier: 24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/245a7f0b-7dd5-3a0d-9199-010d58fc74dc.roa
Signing time:             Wed 29 Sep 2021 04:00:00 +0000
ROA not before:           Wed 29 Sep 2021 04:00:00 +0000
ROA not after:            Thu 25 Jan 2024 05:00:00 +0000
asID:                     1239
IP address blocks:        157.254.154.0/23 maxlen: 24
                          157.254.156.0/22 maxlen: 24
                          157.254.168.0/22 maxlen: 24
                          157.254.172.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:ac:03:0f:99:75:74:8b:62:d9:f4:4f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
        Validity
            Not Before: Sep 29 04:00:00 2021 GMT
            Not After : Jan 25 05:00:00 2024 GMT
        Subject: CN=9a094205-9386-4b4a-b7c3-5a92ca2a8b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2c:d7:ff:34:2f:ac:f2:6e:df:7a:d7:33:ff:
                    77:59:ed:5b:48:23:7a:7a:2e:f3:3f:50:d8:01:5b:
                    eb:f1:b7:ac:9e:6e:4e:64:e8:57:83:bb:1e:cb:ea:
                    b7:a4:b5:05:87:e9:3b:fd:13:86:22:b8:63:ea:ec:
                    12:1f:f5:f0:30:eb:e7:b7:da:08:9e:98:70:bc:a2:
                    49:b8:43:1e:96:cc:e6:fb:83:fb:b1:06:c1:5e:e1:
                    00:60:aa:e2:4d:0e:aa:ad:18:93:4c:3e:8f:9e:9f:
                    14:2d:76:fb:ab:5d:7f:c9:f1:d3:1f:9b:fc:53:14:
                    a7:d5:b8:2a:35:fd:62:41:90:43:47:a7:39:30:56:
                    95:39:c0:e5:50:2d:68:b4:96:b4:2e:1a:28:57:fb:
                    67:11:18:e7:c1:ea:1d:a4:df:14:e6:52:46:5a:b0:
                    11:60:09:00:27:e1:ba:a4:ab:61:e5:f8:bd:2b:93:
                    4e:9a:bc:e9:e9:83:07:d8:11:68:19:cf:10:81:ac:
                    e7:f9:fd:c4:52:7a:88:45:cb:3a:61:ef:5c:81:66:
                    95:9a:02:da:63:9d:5b:bf:6f:af:9a:ed:78:ae:f1:
                    05:3c:a6:79:e1:31:6b:f6:66:1e:2f:ec:62:fb:f7:
                    eb:74:a9:3e:45:66:28:97:de:12:57:ac:82:25:f5:
                    f2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BD:5E:06:B1:CB:0E:FD:75:AB:85:C3:77:B9:BC:75:B8:7A:1C:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/245a7f0b-7dd5-3a0d-9199-010d58fc74dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/c097bbd1-dde1-4ee5-a727-5ee45da69052.crl

            X509v3 Authority Key Identifier:
                keyid:24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.154.0-157.254.159.255
                  157.254.168.0-157.254.173.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:46:e6:d7:0a:4d:b5:ea:ec:d3:d7:4d:b4:15:a4:ff:ca:fb:
         15:d2:50:7f:c2:8f:1c:de:f8:f2:2d:a1:de:69:2a:b6:57:32:
         59:e8:ea:31:d2:5a:65:cb:76:25:5f:a3:2b:8f:74:21:0e:2f:
         3e:9f:6e:1e:99:8c:fe:9d:22:08:24:f3:da:6c:7d:ac:d8:9e:
         35:7f:a7:bb:d5:c3:f1:3d:ed:74:6e:1a:56:7c:27:2d:fd:8e:
         4f:50:91:47:1e:c9:46:48:86:e0:c7:f5:2b:74:bf:20:89:22:
         ed:9d:e6:4f:a3:10:6a:2c:62:d9:1c:62:be:9a:69:9b:bc:85:
         fc:87:6c:cf:34:65:b4:f4:c0:fd:7f:44:f4:06:74:c7:e9:f0:
         b6:f3:05:94:ff:94:85:df:e0:e6:30:cf:31:15:da:c8:fc:b7:
         10:78:38:ce:51:fd:c9:15:e1:f6:07:24:2a:31:80:d6:31:53:
         59:42:82:8c:ce:e9:4f:28:38:f4:81:24:73:29:b3:05:50:3b:
         4d:47:75:6e:9b:e4:c5:0d:90:59:e7:62:92:68:e8:2f:4a:ec:
         22:6c:40:2d:58:dc:88:82:d3:50:eb:a8:44:28:dd:56:ec:e7:
         4c:a5:67:4e:1d:b3:35:91:f4:7a:a6:5d:8c:a4:1e:fa:8d:6e:
         8b:fb:d9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:39 2023 by rpki-client on console-ams.rpki-client.org