Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60824550-6618-45ad-9639-bbacb2e0f174/78dfa93a-0468-3d14-aceb-967c61c70a12.roa
File:                     78dfa93a-0468-3d14-aceb-967c61c70a12.roa (raw, json)
Hash identifier:          BA03EgwPJkQkcPJ9Lz6vAr3LJR7dgZG9J0wue74qh4M=
Subject key identifier:   E7:EA:37:D9:A2:2C:7B:1F:E0:1A:02:7B:A7:49:27:F7:F2:9E:A0:FB
Certificate issuer:       /CN=60824550-6618-45ad-9639-bbacb2e0f174
Certificate serial:       010D0C9F4328583AE103B947B355586B9597EFC0
Authority key identifier: F5:49:CD:E1:F7:E8:50:D6:27:70:65:65:CC:A5:86:34:02:5A:85:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60824550-6618-45ad-9639-bbacb2e0f174.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60824550-6618-45ad-9639-bbacb2e0f174/78dfa93a-0468-3d14-aceb-967c61c70a12.roa
Signing time:             Fri 19 Mar 2021 04:00:00 +0000
ROA not before:           Fri 19 Mar 2021 04:00:00 +0000
ROA not after:            Wed 19 Mar 2031 04:00:00 +0000
asID:                     14618
IP address blocks:        63.140.36.0/23 maxlen: 23
                          63.140.32.0/23 maxlen: 23
                          63.140.34.0/24 maxlen: 24
                          63.140.35.0/24 maxlen: 24
                          63.140.38.0/23 maxlen: 23
                          63.140.54.0/24 maxlen: 24
                          63.140.55.0/24 maxlen: 24
                          63.140.56.0/23 maxlen: 23
                          63.140.61.0/24 maxlen: 24
                          63.140.62.0/23 maxlen: 23
                          66.117.20.0/24 maxlen: 24
                          66.117.22.0/23 maxlen: 23
                          66.235.151.0/24 maxlen: 24
                          66.235.152.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:e1:03:b9:47:b3:55:58:6b:95:97:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60824550-6618-45ad-9639-bbacb2e0f174
        Validity
            Not Before: Mar 19 04:00:00 2021 GMT
            Not After : Mar 19 04:00:00 2031 GMT
        Subject: CN=7fa92b58-f52e-47e9-a089-4a1c92fe80af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ad:1b:e9:cd:d6:8c:d8:17:37:7d:25:6e:a3:
                    0a:08:26:9d:87:68:79:29:37:53:37:18:60:5c:fc:
                    f9:7b:a4:29:75:82:19:cb:00:76:15:62:2a:29:3f:
                    f8:e8:ec:13:f3:54:4b:f2:f2:83:d9:d9:5d:8b:97:
                    37:aa:4d:bc:d6:39:b2:96:a1:83:e8:49:a9:84:3b:
                    ea:3d:a1:79:e4:a8:9f:b0:83:8c:69:ea:ac:78:71:
                    62:07:3b:41:68:2c:17:a7:0d:a9:0f:30:2c:02:07:
                    91:b7:25:f7:96:c5:c3:2a:b5:c6:95:dd:1a:b5:2d:
                    ea:0c:6c:b7:70:6b:50:e6:32:7e:b5:e8:8f:ac:5a:
                    dd:f7:74:0f:64:37:33:38:ff:2b:4c:d9:43:bd:d4:
                    91:b7:9c:92:fb:b5:1e:ab:bf:92:82:f9:88:70:8e:
                    91:96:ca:35:4d:8d:b7:6c:8f:9a:00:fc:ec:3d:74:
                    dd:f3:e8:f4:e9:45:76:27:dc:06:a8:ba:1b:df:05:
                    b6:46:9c:8a:92:7b:1f:40:cb:ac:0c:98:f3:b7:e1:
                    2f:62:7d:c2:a4:94:33:30:e6:c3:8f:1e:c2:6a:17:
                    c2:5c:26:6d:29:a2:93:95:3d:79:50:19:f2:71:f3:
                    d3:59:69:40:ac:87:86:bb:bd:2f:09:4b:6a:6b:79:
                    ad:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EA:37:D9:A2:2C:7B:1F:E0:1A:02:7B:A7:49:27:F7:F2:9E:A0:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60824550-6618-45ad-9639-bbacb2e0f174/78dfa93a-0468-3d14-aceb-967c61c70a12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60824550-6618-45ad-9639-bbacb2e0f174/60824550-6618-45ad-9639-bbacb2e0f174.crl

            X509v3 Authority Key Identifier:
                keyid:F5:49:CD:E1:F7:E8:50:D6:27:70:65:65:CC:A5:86:34:02:5A:85:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60824550-6618-45ad-9639-bbacb2e0f174.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.140.32.0/21
                  63.140.54.0-63.140.57.255
                  63.140.61.0-63.140.63.255
                  66.117.20.0/24
                  66.117.22.0/23
                  66.235.151.0-66.235.153.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:2c:de:45:3d:68:72:df:23:1c:d9:0e:9c:2b:44:44:9c:e3:
         96:8f:82:6d:2e:e0:a6:af:c6:2b:df:f4:c7:8d:f0:7f:57:00:
         80:75:59:47:94:2f:03:99:95:58:4e:ba:ff:0e:5e:99:84:e5:
         2e:aa:59:30:b0:1a:46:26:74:a9:cf:5f:a1:8a:e3:16:02:7b:
         d6:10:d1:d2:0e:f2:ef:c5:ed:1f:57:ad:3e:ed:63:16:55:f0:
         57:31:0a:9b:ba:e1:ad:14:d8:91:bd:db:41:6b:47:7d:4c:e4:
         b7:f9:a1:22:ff:42:36:42:d7:51:bb:d5:36:cb:06:f3:7d:86:
         16:2d:0f:05:0d:cf:fb:fe:42:88:94:7d:8e:8a:4c:6e:c1:d9:
         c7:d9:a8:d1:4e:0a:3e:db:93:b9:54:f7:bf:5c:09:7e:51:78:
         46:c3:67:f5:b3:57:d1:80:d1:c2:f7:a0:aa:1b:37:bc:9c:ed:
         c7:26:e8:90:07:7c:ca:71:a1:26:eb:b6:5d:56:63:17:11:25:
         ad:a6:66:e9:e2:9d:b4:97:f1:36:0d:a6:08:78:c5:96:cf:c8:
         88:c6:25:80:61:a6:58:20:83:7e:3a:37:ee:a2:01:a7:6e:06:
         82:c9:fd:10:71:40:1d:32:30:6e:f9:df:29:e1:09:6d:04:5b:
         fc:28:0d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:35 2023 by rpki-client on console-fra.rpki-client.org