Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/c4b60f30-a19e-3b95-a21c-6e8b1aee8bb0.roa
File:                     c4b60f30-a19e-3b95-a21c-6e8b1aee8bb0.roa (raw, json)
Hash identifier:          rRQhrgJMNf2+uE8hxO6IOQB8Kkg8ScmFNlQtZuEUwBw=
Subject key identifier:   59:66:6C:F0:0F:76:8F:10:ED:05:58:BC:7E:04:05:B1:F7:A6:5F:9D
Certificate issuer:       /CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
Certificate serial:       010D0C9F432858405FCA4F0280A0D476C8F8935C
Authority key identifier: 24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/c4b60f30-a19e-3b95-a21c-6e8b1aee8bb0.roa
Signing time:             Wed 29 Sep 2021 20:03:54 +0000
ROA not before:           Wed 29 Sep 2021 20:03:54 +0000
ROA not after:            Mon 31 Mar 2025 04:00:00 +0000
asID:                     26548
IP address blocks:        157.254.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:5f:ca:4f:02:80:a0:d4:76:c8:f8:93:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c097bbd1-dde1-4ee5-a727-5ee45da69052
        Validity
            Not Before: Sep 29 20:03:54 2021 GMT
            Not After : Mar 31 04:00:00 2025 GMT
        Subject: CN=e4a2c648-1ccc-47a2-9406-88f8da6d59a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:84:c6:00:1f:cd:01:3e:2f:68:07:51:b2:bf:
                    ac:c6:93:4c:41:ee:5a:ab:e4:08:8e:c8:9d:17:32:
                    58:94:ab:86:a6:70:f2:ca:31:3d:30:d7:7a:39:4a:
                    41:3e:2d:f9:95:87:cb:80:99:72:75:6d:01:e5:21:
                    0d:b1:b8:2d:17:28:ce:1e:e2:e6:d3:f1:15:a5:88:
                    c6:ae:ad:95:1b:88:81:f1:8d:cd:a5:70:4b:1e:c3:
                    02:fc:5d:a4:2c:80:a4:12:90:12:29:67:bb:86:e6:
                    96:47:fa:1e:53:c0:a1:b0:07:14:58:c7:68:cb:f7:
                    f4:da:67:bc:b0:87:ee:ca:de:de:7c:06:3d:39:22:
                    74:63:a5:13:ed:d5:8f:3c:46:0b:97:93:ce:39:04:
                    48:55:9f:aa:ba:7f:00:c4:46:da:0a:a7:96:0a:c3:
                    ef:6c:fb:b7:5d:b5:58:54:1c:c7:88:1b:e8:f3:26:
                    ff:ed:c3:6c:9e:b7:75:de:29:b2:28:89:58:3a:92:
                    75:8a:50:61:c4:29:eb:7b:f4:57:43:18:3a:ab:9f:
                    03:ff:69:40:f2:c9:58:f8:df:89:35:52:e7:0a:b2:
                    3e:ff:db:54:22:d3:b1:74:01:29:8b:f1:28:1b:76:
                    3b:9b:fa:d7:9e:a6:3a:38:23:a0:53:cc:be:c2:4b:
                    23:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:66:6C:F0:0F:76:8F:10:ED:05:58:BC:7E:04:05:B1:F7:A6:5F:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/c4b60f30-a19e-3b95-a21c-6e8b1aee8bb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052/c097bbd1-dde1-4ee5-a727-5ee45da69052.crl

            X509v3 Authority Key Identifier:
                keyid:24:F8:BB:AC:63:CE:02:44:6B:B7:93:03:07:57:FA:97:D3:78:24:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c097bbd1-dde1-4ee5-a727-5ee45da69052.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:48:11:00:2e:b9:02:c0:6c:48:57:bb:a2:67:a7:6c:ce:b0:
         fb:b1:d4:2f:af:33:ce:e1:da:b1:a3:8d:fb:ce:69:40:30:a2:
         eb:a5:5c:33:9a:0e:5c:95:27:7a:01:11:30:37:2f:0b:c1:bb:
         c3:c8:95:8d:46:3d:83:3f:39:c4:e0:52:1c:0f:2d:48:f2:77:
         23:7b:36:6a:73:24:28:af:73:ad:2f:c6:11:db:c5:52:e7:cf:
         01:fd:95:8c:7d:6b:31:89:b5:fc:87:c1:a7:17:eb:86:36:39:
         b3:5f:1a:a9:40:1b:7f:0b:93:fa:64:3d:35:d4:ce:84:c4:e4:
         17:54:0f:0b:21:f9:5e:2d:ec:d6:3b:45:ce:3e:b5:78:94:c2:
         5f:bc:71:0d:31:82:84:ec:1c:56:90:e1:15:64:74:a2:b6:61:
         af:bb:06:d3:c2:d0:65:96:b4:93:a4:7e:fc:c3:26:0b:8b:91:
         9b:f8:bf:27:36:0c:d0:90:15:b9:a2:b2:98:a1:47:0b:6d:5d:
         f4:32:6b:7e:c3:b2:e9:18:7a:3f:54:2c:ab:1d:a4:39:0a:6d:
         96:d0:b7:ab:61:a5:c9:e2:02:9b:7f:a9:88:31:c4:f6:69:e6:
         ef:98:a6:96:02:08:23:ae:a5:e4:2d:a3:9e:8d:45:0a:1b:5f:
         a6:b8:37:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:04 2024 by rpki-client on console-fra.rpki-client.org