Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59e1f397-f208-4e0a-b533-5d815cc15e83/43299171-c959-302a-8e37-15c7db7ba40d.roa
File:                     43299171-c959-302a-8e37-15c7db7ba40d.roa (raw, json)
Hash identifier:          Jg06dy104BB5oI5CMQmds9TZqJjixa2Gn2kAIW2qKM8=
Subject key identifier:   4B:B3:BE:1E:46:3F:7D:0A:05:71:86:02:8F:AA:84:D0:1A:C1:6F:59
Certificate issuer:       /CN=59e1f397-f208-4e0a-b533-5d815cc15e83
Certificate serial:       010D0C9F4328584499AA1A03E1F4DDF239276AC0
Authority key identifier: 35:FB:AC:C2:8A:EF:03:F7:69:23:09:DB:43:B8:D1:34:7E:E7:E4:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59e1f397-f208-4e0a-b533-5d815cc15e83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59e1f397-f208-4e0a-b533-5d815cc15e83/43299171-c959-302a-8e37-15c7db7ba40d.roa
Signing time:             Fri 19 Jan 2024 02:00:25 +0000
ROA not before:           Fri 19 Jan 2024 02:00:25 +0000
ROA not after:            Thu 18 Apr 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        50.115.214.0/24 maxlen: 24
                          50.115.215.0/24 maxlen: 24
                          50.115.213.0/24 maxlen: 24
                          50.115.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:99:aa:1a:03:e1:f4:dd:f2:39:27:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e1f397-f208-4e0a-b533-5d815cc15e83
        Validity
            Not Before: Jan 19 02:00:25 2024 GMT
            Not After : Apr 18 01:00:25 2024 GMT
        Subject: CN=521524ae-7266-4253-962b-fbed33243ddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ec:f1:35:dd:8f:67:b1:83:3b:80:7a:3d:ac:
                    03:da:06:77:7c:df:c3:70:43:d1:b8:d1:e5:a9:22:
                    bf:9b:81:b7:08:b6:11:5f:89:07:ed:ab:12:45:05:
                    e3:b3:02:be:a4:22:32:bc:9f:02:0d:59:d6:96:bf:
                    8a:80:f1:10:8a:06:35:ef:6c:78:de:bd:82:2b:2d:
                    d5:fa:fc:46:ba:fc:d4:49:c5:c1:ad:b2:86:d4:59:
                    82:a9:fc:d9:52:91:e9:77:1c:73:f7:85:dc:ee:c0:
                    58:a2:9c:a6:6f:fd:39:2e:56:b1:6d:4a:b5:25:aa:
                    ad:2f:32:f0:d9:80:ad:e8:0a:3c:20:56:78:05:b9:
                    c7:44:f6:ae:ee:ca:04:50:3a:2b:f6:d3:f8:c4:bd:
                    2d:9d:e8:e7:a3:e9:64:a9:36:17:d2:be:86:bf:53:
                    fd:68:f2:4f:ef:fa:1a:55:30:2b:bf:04:97:b0:4f:
                    4f:29:2e:05:e6:3e:fc:90:05:57:22:eb:3f:22:98:
                    8d:0a:2a:9f:2e:9d:1e:69:54:9b:bf:2a:d7:82:85:
                    ef:f2:47:8c:2a:ef:d0:b7:cd:16:5c:d7:91:50:7f:
                    f7:c8:8b:81:75:2b:a2:ff:7b:04:76:48:fe:41:38:
                    10:03:9a:82:ad:ec:65:a9:dd:57:fa:ce:31:68:36:
                    b9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B3:BE:1E:46:3F:7D:0A:05:71:86:02:8F:AA:84:D0:1A:C1:6F:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59e1f397-f208-4e0a-b533-5d815cc15e83/43299171-c959-302a-8e37-15c7db7ba40d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59e1f397-f208-4e0a-b533-5d815cc15e83/59e1f397-f208-4e0a-b533-5d815cc15e83.crl

            X509v3 Authority Key Identifier:
                keyid:35:FB:AC:C2:8A:EF:03:F7:69:23:09:DB:43:B8:D1:34:7E:E7:E4:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59e1f397-f208-4e0a-b533-5d815cc15e83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.115.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:87:62:cd:43:d8:26:34:58:a5:3a:80:63:7b:32:17:8a:01:
         54:1f:c7:ae:85:93:a1:1e:8a:66:45:5d:ab:2a:81:9e:95:54:
         85:0b:b0:8e:de:8c:8f:df:d3:8a:4a:17:4e:a7:b8:b6:b4:18:
         40:9e:93:1b:e0:c5:60:62:dc:4c:bb:a9:da:d2:a6:c8:fe:c6:
         7f:95:44:29:21:48:ed:fb:db:fe:5b:04:f8:f8:ee:79:89:1d:
         d0:b0:08:e0:e0:b6:6f:67:2d:93:85:9a:57:69:ba:d6:fe:2f:
         b7:f8:2c:f8:68:e8:99:c9:a5:dc:f8:04:64:2d:6d:48:47:32:
         c2:e1:b2:67:33:69:c8:d7:d6:3c:e3:c6:b3:7e:00:a6:fa:83:
         8b:26:c4:34:0c:7a:b9:5c:6b:04:df:d9:d4:7a:49:05:9b:ea:
         05:a8:9b:69:11:da:32:03:3e:2b:56:21:b9:68:08:e1:91:15:
         6a:eb:f5:56:cc:23:5a:34:dc:e5:27:f0:5d:74:e6:6e:1b:bb:
         29:2f:9e:e5:02:37:0a:b5:d1:d8:0f:32:3b:94:58:7c:df:b3:
         06:8e:9c:bb:2f:e2:82:74:19:bd:c1:c0:36:48:e7:b5:76:b1:
         8b:be:87:de:44:91:c9:e7:2c:09:26:55:e7:e1:ed:6b:0d:32:
         4f:9e:83:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 15:18:26 2024 by rpki-client on console-fra.rpki-client.org