Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb/7816fdca-f6eb-3b67-9e48-0ca4be60e3b7.roa
File:                     7816fdca-f6eb-3b67-9e48-0ca4be60e3b7.roa (raw, json)
Hash identifier:          6y2wVZzZumvcJCBPCDD27psWjDUtp6YzTNnRfygEKL0=
Subject key identifier:   96:AF:36:F9:96:13:41:81:3B:AC:AA:DB:7E:AC:FB:32:79:3E:B9:ED
Certificate issuer:       /CN=53d3ef8c-8c56-4056-ba3f-9b8f638952cb
Certificate serial:       010D0C9F4328584324EC8674DB73AEDE0872F280
Authority key identifier: 38:11:5C:73:A8:6F:D6:66:4D:31:97:5D:5F:4A:40:F8:9B:90:6D:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb/7816fdca-f6eb-3b67-9e48-0ca4be60e3b7.roa
Signing time:             Thu 07 Sep 2023 13:37:52 +0000
ROA not before:           Thu 07 Sep 2023 13:37:52 +0000
ROA not after:            Wed 06 Dec 2023 14:37:52 +0000
asID:                     35913
IP address blocks:        66.59.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:24:ec:86:74:db:73:ae:de:08:72:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d3ef8c-8c56-4056-ba3f-9b8f638952cb
        Validity
            Not Before: Sep  7 13:37:52 2023 GMT
            Not After : Dec  6 14:37:52 2023 GMT
        Subject: CN=14c9fa1f-5331-43c2-9183-a65c18932f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5c:66:f4:cc:e2:d0:7d:26:ec:0d:fd:6a:6b:
                    13:0c:07:15:9e:24:80:a0:48:ac:01:68:db:a9:4e:
                    64:16:62:36:d5:70:e5:87:ee:c1:a1:ba:6a:e1:7f:
                    f6:e9:79:df:ab:52:0d:31:52:fd:c1:b3:94:85:21:
                    95:e0:89:4d:61:44:aa:d6:fb:00:e6:8a:68:14:34:
                    79:24:14:52:77:08:fc:13:25:ff:bd:b9:9b:14:95:
                    50:89:ee:8e:01:13:0a:ef:6e:bc:99:50:bd:23:31:
                    06:0c:da:8f:75:9b:45:ac:6a:db:db:16:8a:52:6f:
                    22:91:68:0d:5a:75:ee:19:80:11:87:ee:d0:7c:b9:
                    47:03:ca:6e:a1:7c:d0:8a:d2:a1:04:db:c5:4a:a1:
                    d0:2e:3e:7e:1d:4f:f0:72:f5:eb:e9:d4:ae:6b:41:
                    8f:51:6e:1e:a8:62:32:b9:22:07:84:12:11:18:69:
                    db:9c:21:56:d4:a5:31:a3:2a:95:a7:42:fc:6e:dc:
                    38:0a:76:62:bf:2a:8f:e6:4c:74:8a:5c:11:af:07:
                    b6:c7:db:ce:62:a5:6c:a8:62:0c:76:19:e9:e1:10:
                    02:d1:9d:a4:ea:a3:a4:d1:e3:e6:86:02:5e:a1:16:
                    f0:92:47:17:64:13:b2:05:a2:80:ba:34:55:83:1b:
                    5b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AF:36:F9:96:13:41:81:3B:AC:AA:DB:7E:AC:FB:32:79:3E:B9:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb/7816fdca-f6eb-3b67-9e48-0ca4be60e3b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb/53d3ef8c-8c56-4056-ba3f-9b8f638952cb.crl

            X509v3 Authority Key Identifier:
                keyid:38:11:5C:73:A8:6F:D6:66:4D:31:97:5D:5F:4A:40:F8:9B:90:6D:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.59.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:68:a4:48:9e:97:ce:8c:86:5b:2a:5a:57:79:b7:a7:28:4e:
         3b:8f:5f:2d:37:31:71:09:5f:55:1d:bc:63:7f:4f:83:30:1f:
         79:44:63:ff:da:1a:a2:2a:e1:41:22:c3:9b:60:2f:80:1e:d4:
         79:bd:55:b2:2b:73:9e:91:5a:eb:ca:ba:ec:7b:62:b4:e8:0b:
         07:d0:88:f4:25:1d:5d:80:ab:8b:7b:88:ea:b0:04:1b:01:2e:
         d2:ed:ee:29:fe:be:41:59:f0:a4:48:43:03:21:f7:42:0f:1f:
         11:56:72:04:41:57:f3:2c:90:78:b9:24:a6:bd:8a:f6:68:10:
         a0:f7:42:37:1e:1c:4c:65:22:e6:52:ca:7c:67:b6:3f:df:f5:
         fe:bb:a5:52:af:f6:4c:fd:aa:53:b5:8d:2c:fe:3e:33:bc:74:
         24:53:f2:dd:43:36:d5:7e:67:8e:7a:46:e8:02:66:19:ff:cd:
         84:cf:cc:b6:16:17:0d:eb:c7:05:53:dc:d3:81:4f:f7:34:e5:
         d2:13:e2:c9:a4:18:a2:20:47:69:5f:60:f7:b3:f5:40:35:82:
         95:c9:4c:4b:2f:71:7c:e2:89:23:d8:d4:23:ce:01:fe:a5:12:
         1d:0b:65:5e:72:13:f7:2e:10:14:8a:54:a1:57:66:db:e0:b1:
         b5:e7:4e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:06 2024 by rpki-client on console-fra.rpki-client.org