Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5/c9ce4790-c271-3b4c-8daf-33d4f45a176b.roa
File:                     c9ce4790-c271-3b4c-8daf-33d4f45a176b.roa (raw, json)
Hash identifier:          5LXZ+GufpurNCLCGmpfYU3oCv9khLoOEJ+hXTlKHVyM=
Subject key identifier:   1D:AC:25:92:17:90:92:99:BE:BA:70:13:F4:1C:DB:75:02:CB:2D:DD
Certificate issuer:       /CN=99d7c699-190f-4fad-a37d-bd259bb116b5
Certificate serial:       010D0C9F4328583FAD5057382D2CF0FB65BBE600
Authority key identifier: 50:C5:AC:07:70:3F:38:98:35:3F:3C:A2:42:48:86:19:AB:0B:75:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5/c9ce4790-c271-3b4c-8daf-33d4f45a176b.roa
Signing time:             Sun 23 Oct 2022 12:00:00 +0000
ROA not before:           Sun 23 Oct 2022 12:00:00 +0000
ROA not after:            Mon 29 Jul 2024 04:00:00 +0000
asID:                     7018
IP address blocks:        173.249.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ad:50:57:38:2d:2c:f0:fb:65:bb:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99d7c699-190f-4fad-a37d-bd259bb116b5
        Validity
            Not Before: Oct 23 12:00:00 2022 GMT
            Not After : Jul 29 04:00:00 2024 GMT
        Subject: CN=5d3c34a2-4b76-471e-b591-60baa7abba27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9b:8b:23:b3:90:62:1b:c1:78:32:00:04:28:
                    23:86:35:6f:e7:75:b6:64:2b:bd:24:9f:c4:86:48:
                    64:f2:07:65:38:2b:4f:9f:d6:2f:58:4f:a1:f2:26:
                    22:82:44:7b:f7:42:a7:f1:36:0d:99:d7:06:d3:fc:
                    05:68:59:7b:59:8e:8c:62:ab:65:75:5e:47:2b:1c:
                    2e:0a:15:0c:42:dc:e7:14:90:8c:e7:57:ed:ad:a6:
                    af:28:d0:7e:92:ff:f2:53:03:4f:9c:ff:a6:d4:b9:
                    b3:6b:da:b3:81:a9:1b:e4:f5:26:fa:13:64:64:d6:
                    8a:ea:73:ee:62:74:76:b6:cd:b9:0d:4d:85:c2:a8:
                    d1:1c:d1:42:df:28:db:7f:6a:61:68:23:00:6a:61:
                    73:0a:e9:b8:76:d0:a1:f1:65:b5:c7:59:90:da:a1:
                    2d:c1:44:09:37:32:18:bd:c4:52:50:ae:ff:0e:86:
                    ea:42:d6:e1:04:d7:31:ba:6e:e6:4b:69:67:e4:f3:
                    25:ab:4a:46:93:29:c1:00:4e:7a:69:d6:57:3b:ee:
                    48:34:38:1d:0c:fa:63:31:b2:4e:71:a6:e2:4f:70:
                    42:50:7c:ea:1d:ff:bd:d5:6d:0e:8e:dc:a7:1a:ef:
                    d1:6a:20:44:bd:4a:30:1c:88:21:60:83:d5:d0:62:
                    b9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AC:25:92:17:90:92:99:BE:BA:70:13:F4:1C:DB:75:02:CB:2D:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5/c9ce4790-c271-3b4c-8daf-33d4f45a176b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5/99d7c699-190f-4fad-a37d-bd259bb116b5.crl

            X509v3 Authority Key Identifier:
                keyid:50:C5:AC:07:70:3F:38:98:35:3F:3C:A2:42:48:86:19:AB:0B:75:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:2a:5c:ad:35:50:49:da:fb:a1:8e:7a:89:b0:e4:1f:e9:88:
         b3:81:9a:f1:c5:a0:fc:d0:f1:0c:99:a7:c1:c5:31:85:bc:31:
         74:6c:d5:d9:f1:09:d6:b9:03:8d:1e:13:a6:06:23:a0:9c:0d:
         95:19:a9:e9:dc:bf:27:9a:7c:ba:7d:79:95:21:44:e9:7f:11:
         16:bb:d1:14:43:dd:a2:7f:3e:e0:b8:11:8d:e1:ab:43:b8:77:
         1f:43:7a:1d:93:e8:52:8f:45:bf:c4:be:14:c9:16:5c:32:9e:
         6e:f4:6f:a1:85:2c:1e:20:93:ec:4c:b4:30:a6:00:2c:80:21:
         c1:f1:da:64:9d:0a:91:01:ab:ae:e4:87:77:b3:c6:c5:b4:86:
         11:31:c2:fe:33:be:81:29:d0:07:29:9b:47:7c:9d:65:3a:4a:
         e4:ea:63:44:04:f9:e6:38:b9:b3:0a:ef:d5:b5:d9:c4:e4:3e:
         7c:a6:a7:fc:a7:54:72:f4:32:58:4e:06:fb:f5:b3:6a:31:da:
         fa:6d:1d:91:9e:c5:ce:94:43:ac:23:f8:a3:9e:9d:bc:fd:00:
         f3:05:d1:3f:39:cc:ff:43:ec:80:16:22:3f:1f:c9:9a:b7:9e:
         ea:44:e5:cc:28:0f:29:1c:70:a5:fa:fd:42:ad:9c:af:3a:62:
         8f:27:c4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:08 2024 by rpki-client on console-fra.rpki-client.org