Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/bcd2cef5-7ed5-3bea-a0f8-bbb189be95d6.roa
File:                     bcd2cef5-7ed5-3bea-a0f8-bbb189be95d6.roa (raw, json)
Hash identifier:          jqr7U4Q9rHr8HBYfyBpHUsyNtuuixCIIGvEnNLXnbdg=
Subject key identifier:   5B:69:44:96:5C:32:D5:20:EB:98:4B:81:73:34:5C:DB:B1:AB:1E:38
Certificate issuer:       /CN=a2ff7ccf-c138-4e25-b3bb-dc206512af3a
Certificate serial:       010D0C9F43285844474EDFCE57AD205C58322C00
Authority key identifier: DC:0F:FB:CA:DD:AE:2F:35:60:29:BF:BC:FD:B6:6F:2D:03:9F:E4:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/bcd2cef5-7ed5-3bea-a0f8-bbb189be95d6.roa
Signing time:             Wed 20 Dec 2023 14:00:21 +0000
ROA not before:           Wed 20 Dec 2023 14:00:21 +0000
ROA not after:            Tue 19 Mar 2024 13:00:21 +0000
asID:                     13713
IP address blocks:        144.49.62.0/24 maxlen: 24
                          144.49.60.0/24 maxlen: 24
                          144.49.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:47:4e:df:ce:57:ad:20:5c:58:32:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2ff7ccf-c138-4e25-b3bb-dc206512af3a
        Validity
            Not Before: Dec 20 14:00:21 2023 GMT
            Not After : Mar 19 13:00:21 2024 GMT
        Subject: CN=848e6df1-3857-4bdd-ad05-845c2638acbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5c:79:ad:12:a3:78:ff:6e:3b:f8:d3:b5:70:
                    77:eb:3b:5a:d0:37:09:fe:df:c3:a5:31:7b:ef:b5:
                    97:5b:99:49:a4:91:ca:cc:d7:46:b7:07:25:4b:70:
                    98:10:6e:32:b5:a1:8b:88:d1:db:a4:03:1f:78:f4:
                    d0:d8:f2:6b:ff:be:a8:13:c8:93:35:c6:bf:71:67:
                    0e:b8:0a:86:ca:b5:13:e5:c9:07:e5:ec:ee:b1:99:
                    ac:98:eb:19:f2:78:7c:e3:20:59:f6:3e:0d:0a:08:
                    7e:17:38:7a:14:f0:58:c9:fa:b9:09:b8:bf:1d:d1:
                    5f:ef:9a:57:a1:ee:55:c8:4a:31:4a:69:1a:91:7e:
                    c1:f0:87:82:7f:9d:89:44:4f:a4:37:dc:50:58:17:
                    2d:8b:98:9b:50:09:32:13:89:20:6a:97:2e:c9:7c:
                    9b:ca:f2:66:c1:10:2b:3d:2c:ca:db:fb:8a:39:f2:
                    33:4f:43:ce:ed:f1:f9:3c:bc:8d:c3:4e:0f:7f:33:
                    3e:d7:3c:cf:3b:e7:da:bc:01:dd:ad:56:ae:ac:8b:
                    5c:73:d6:d7:d7:b9:a7:db:41:7c:8a:04:3b:7b:cf:
                    ea:cd:0e:1e:fb:3f:0b:1c:d5:f1:c1:1e:c9:7c:f9:
                    2c:03:c7:35:f8:fa:c6:f0:0a:75:e9:bd:e2:ae:c2:
                    37:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:69:44:96:5C:32:D5:20:EB:98:4B:81:73:34:5C:DB:B1:AB:1E:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/bcd2cef5-7ed5-3bea-a0f8-bbb189be95d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.crl

            X509v3 Authority Key Identifier:
                keyid:DC:0F:FB:CA:DD:AE:2F:35:60:29:BF:BC:FD:B6:6F:2D:03:9F:E4:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.49.60.0-144.49.62.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:5a:e7:35:b6:b1:0f:d7:35:c0:6e:d2:7d:1a:b7:1e:a1:8e:
         54:1c:0f:c3:dc:8f:7b:b2:4c:0f:d6:70:db:97:f7:ca:43:0b:
         6f:5b:18:e0:2a:34:5a:77:cf:01:f7:79:b1:fa:d1:f2:28:1c:
         5c:47:30:93:de:4e:57:77:4c:5f:c2:aa:bf:1a:0c:9f:87:24:
         1d:8d:40:c4:bb:9a:34:b6:c7:e9:19:21:61:ec:56:09:f8:4e:
         c3:d3:e9:2a:89:83:9c:f9:de:6c:9c:7b:ba:6a:16:11:c5:9a:
         b4:2d:ee:ec:b0:32:9a:46:97:68:a2:95:5a:99:da:03:88:6a:
         75:57:45:70:62:05:f0:e6:77:22:a0:f9:f9:e3:58:c4:17:c5:
         42:42:58:b3:e2:06:4c:1b:98:2a:61:8e:9b:bb:eb:8e:58:af:
         a1:f6:cc:7f:86:ca:10:73:d7:98:de:1b:0e:32:fd:8d:0b:ca:
         9b:d7:fe:ab:89:c8:4f:77:92:4e:40:63:ca:4a:03:be:ff:12:
         6b:3c:5e:8c:88:e6:24:0f:69:b2:26:21:29:2d:43:81:a1:c5:
         9c:06:de:49:da:e9:19:1a:a3:c0:20:38:ca:5d:3d:d1:08:0e:
         21:0b:91:d6:e5:99:e3:2f:cc:ed:2a:f4:b5:44:5a:d8:26:a9:
         c8:55:40:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 20:17:00 2024 by rpki-client on console-fra.rpki-client.org