Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a/9650e2c9-859a-3c35-a9dc-57ac21d0e9b4.roa
File:                     9650e2c9-859a-3c35-a9dc-57ac21d0e9b4.roa (raw, json)
Hash identifier:          oXmFiEZfkGCA81wSWBhUsKperkN782FOdC/RdjmQ5Mw=
Subject key identifier:   4D:AC:26:AC:AB:5C:F8:CE:A8:A8:D5:C2:1B:D0:46:9A:F3:1E:2F:62
Certificate issuer:       /CN=46107a8c-29da-4914-8858-2b42aa4d8b4a
Certificate serial:       010D0C9F4328583B7BD0CCBD4A4A2374D464F2C0
Authority key identifier: AA:4F:4F:E9:E2:28:28:6A:EC:B1:88:AA:98:ED:11:87:E9:E2:2F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a/9650e2c9-859a-3c35-a9dc-57ac21d0e9b4.roa
Signing time:             Wed 31 Mar 2021 04:00:00 +0000
ROA not before:           Wed 31 Mar 2021 04:00:00 +0000
ROA not after:            Tue 07 Jan 2025 05:00:00 +0000
asID:                     31874
IP address blocks:        207.250.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:7b:d0:cc:bd:4a:4a:23:74:d4:64:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46107a8c-29da-4914-8858-2b42aa4d8b4a
        Validity
            Not Before: Mar 31 04:00:00 2021 GMT
            Not After : Jan  7 05:00:00 2025 GMT
        Subject: CN=023c599a-6e2e-4d48-a6a3-4642187de407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1e:9a:57:80:42:71:e5:0f:56:8d:f3:be:76:
                    a2:aa:ec:f9:17:ce:42:20:22:67:8e:c1:55:e9:68:
                    96:09:15:e9:24:25:22:8e:91:54:7e:6e:34:93:8a:
                    ab:bc:f2:b2:ce:cc:50:e3:1f:fe:ed:6d:f8:53:ab:
                    e7:2c:cb:2c:a6:ff:11:06:61:94:dc:9a:b2:91:2c:
                    69:2e:0f:0d:5b:66:64:4a:7e:b6:45:fe:27:51:9d:
                    00:a3:5f:03:c9:e9:44:77:1d:43:9b:a4:6a:51:73:
                    cd:1a:bf:6d:f6:4f:d7:e8:f1:47:f2:a5:e5:ba:c4:
                    c3:9f:55:51:e9:2e:23:ae:4c:86:02:7a:77:c3:c4:
                    61:65:39:e5:34:9a:35:d4:ab:7d:d9:0f:c5:d2:50:
                    3b:92:59:9c:e4:80:cb:25:f7:df:72:c9:e6:c1:85:
                    e7:90:c3:73:1d:cf:b3:5a:a9:ff:ae:b7:07:28:bc:
                    27:63:ac:58:96:db:4c:0a:e8:6c:da:84:40:ca:8c:
                    b7:03:a0:0b:59:ec:bb:e5:45:60:8d:0b:22:b6:3d:
                    13:03:5c:07:56:11:d9:23:51:93:ae:0a:b6:2e:fa:
                    d9:39:e8:05:d0:a8:23:4f:ca:eb:a1:79:f2:67:16:
                    22:75:c8:26:23:fe:8c:4f:31:3f:10:1d:1d:5e:90:
                    b9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AC:26:AC:AB:5C:F8:CE:A8:A8:D5:C2:1B:D0:46:9A:F3:1E:2F:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a/9650e2c9-859a-3c35-a9dc-57ac21d0e9b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a/46107a8c-29da-4914-8858-2b42aa4d8b4a.crl

            X509v3 Authority Key Identifier:
                keyid:AA:4F:4F:E9:E2:28:28:6A:EC:B1:88:AA:98:ED:11:87:E9:E2:2F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.250.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:ec:22:c6:7d:76:bf:41:70:ff:cb:b0:c8:a9:f9:7c:87:5f:
         9b:0a:e2:e5:f8:b5:eb:d0:58:b7:05:fd:32:4f:86:5b:0a:ff:
         0b:c4:90:37:2a:33:db:ea:4f:e8:a0:29:f1:a4:95:51:82:90:
         47:a8:d7:e9:4c:58:a0:0a:d0:76:05:5f:ff:76:ee:fb:48:4a:
         fd:93:78:34:cc:6a:e3:da:7b:87:f2:43:03:c1:19:4f:83:cb:
         b7:f1:94:29:7e:8c:1d:dc:d1:09:77:31:ee:79:e9:2e:e1:3c:
         df:72:51:ff:d1:44:54:6e:fe:33:82:a2:45:89:52:dc:85:df:
         b6:52:1e:2d:52:c2:42:bc:54:6f:c7:48:8d:3c:93:90:be:fb:
         fb:70:0c:09:4f:b7:a2:8c:ea:5c:db:97:ea:32:2b:c8:bb:2d:
         69:f9:26:3e:d6:fb:d3:10:de:ed:cb:47:1d:d7:92:08:d8:1d:
         cf:1d:cc:43:b3:b0:5c:91:97:a3:5b:34:ee:e0:9b:03:5a:94:
         9c:2a:f3:34:8e:8a:7f:52:e9:80:30:56:99:b3:af:08:e6:89:
         2b:ea:c3:f2:f1:ad:bf:03:4c:d5:a1:8a:6a:60:cd:59:de:21:
         80:4e:7d:d8:c4:25:13:d2:12:8e:b1:2b:d5:7b:4f:73:cb:06:
         39:c0:59:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:06 2024 by rpki-client on console-fra.rpki-client.org