Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8fd2c6e-ced3-4794-8ce7-a370fe480610/a7466276-215e-342d-9338-18c077d6fa8c.roa
File:                     a7466276-215e-342d-9338-18c077d6fa8c.roa (raw, json)
Hash identifier:          RGsj+exPQ1d+XTBMC5LH0Cno4u1J9olSFE8vSEOL+uc=
Subject key identifier:   AA:6C:C0:86:D6:FC:46:48:A7:53:07:B7:A8:9C:DB:62:8C:A4:5B:B3
Certificate issuer:       /CN=a8fd2c6e-ced3-4794-8ce7-a370fe480610
Certificate serial:       010D0C9F4328583E1589504DF102591A22869500
Authority key identifier: 79:0D:4F:8D:60:FE:DE:7D:DD:70:ED:3E:46:34:D7:45:BF:0F:90:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8fd2c6e-ced3-4794-8ce7-a370fe480610.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8fd2c6e-ced3-4794-8ce7-a370fe480610/a7466276-215e-342d-9338-18c077d6fa8c.roa
Signing time:             Mon 30 May 2022 12:00:00 +0000
ROA not before:           Mon 30 May 2022 12:00:00 +0000
ROA not after:            Wed 31 May 2023 04:00:00 +0000
asID:                     1239
IP address blocks:        69.166.205.0/24 maxlen: 24
                          69.166.226.0/23 maxlen: 24
                          69.166.229.0/24 maxlen: 24
                          69.166.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:15:89:50:4d:f1:02:59:1a:22:86:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8fd2c6e-ced3-4794-8ce7-a370fe480610
        Validity
            Not Before: May 30 12:00:00 2022 GMT
            Not After : May 31 04:00:00 2023 GMT
        Subject: CN=9fb1d8a0-175a-465f-b1fe-a193f5ce397c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9e:6d:b3:d8:a6:82:81:42:0b:35:e9:6f:79:
                    53:de:73:c7:0e:ec:2f:4a:1f:13:1e:ac:7f:80:cf:
                    28:20:31:aa:a3:d4:38:15:8d:35:a3:f3:8a:d3:6c:
                    c9:b0:b8:ba:d0:c0:47:c3:2d:a3:ca:8a:b0:c5:43:
                    0b:96:2b:c5:58:5d:d0:ed:ce:b4:bd:3c:10:a2:4c:
                    e2:8a:80:49:36:b0:88:a8:fb:51:56:46:38:67:4a:
                    80:dc:81:57:30:b1:53:7b:cf:0a:0c:bd:d0:49:fe:
                    76:db:5d:b8:f7:bb:0f:e0:46:47:a8:fc:81:ce:ea:
                    f1:11:b2:20:fd:c9:3f:b9:92:31:b2:49:18:49:d2:
                    3f:d5:0c:8d:ef:b8:9b:4a:f3:0e:c8:68:3d:33:0f:
                    05:e2:ae:55:bb:4c:fd:fb:f5:6e:ef:06:09:84:aa:
                    29:ad:97:62:71:31:0e:67:52:ba:4a:ca:f6:5f:5a:
                    38:57:0a:ad:6b:30:e0:3b:64:b2:9e:0f:47:7e:6c:
                    51:85:66:89:02:b0:b5:7b:af:07:81:a7:15:f7:83:
                    b0:04:c6:71:48:54:dd:bc:b0:b3:0e:61:23:df:24:
                    8d:da:d9:a9:1f:39:c2:e3:fa:90:b3:50:01:ab:98:
                    5c:f4:4b:c1:f8:a6:b2:91:f4:00:fc:ce:c3:2d:75:
                    e0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6C:C0:86:D6:FC:46:48:A7:53:07:B7:A8:9C:DB:62:8C:A4:5B:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8fd2c6e-ced3-4794-8ce7-a370fe480610/a7466276-215e-342d-9338-18c077d6fa8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8fd2c6e-ced3-4794-8ce7-a370fe480610/a8fd2c6e-ced3-4794-8ce7-a370fe480610.crl

            X509v3 Authority Key Identifier:
                keyid:79:0D:4F:8D:60:FE:DE:7D:DD:70:ED:3E:46:34:D7:45:BF:0F:90:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8fd2c6e-ced3-4794-8ce7-a370fe480610.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.205.0/24
                  69.166.226.0/23
                  69.166.229.0-69.166.230.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:7b:d9:fe:4a:9d:f1:7a:96:3e:5d:61:b4:4a:1a:52:7e:7e:
         a6:74:53:a9:4f:cb:fc:5f:9d:94:4e:e2:4b:f5:8f:73:14:dc:
         55:27:61:b4:84:5a:aa:28:5e:76:dc:fc:46:77:b6:6d:2b:c3:
         d0:76:0f:c9:d9:8a:d5:a8:65:45:e6:e5:24:6a:cd:e7:a0:50:
         2b:94:08:b6:ee:ca:17:a8:0e:df:01:7c:b8:1c:c5:ca:23:c3:
         b1:86:13:62:9a:8f:73:22:38:b7:e1:d8:97:de:39:e3:a0:87:
         7a:f3:a8:10:34:53:b9:e0:e8:9b:6d:1f:64:0d:60:c6:60:60:
         b0:9b:b7:46:39:e8:f1:6b:06:99:ed:bc:b3:08:12:f9:ac:17:
         91:cb:b6:2e:de:5e:45:f5:f7:e4:00:d0:d8:11:27:78:c3:12:
         76:3b:71:75:4b:71:ab:f2:c7:ae:83:5e:1a:d6:d1:20:cf:6d:
         45:35:3b:ed:8b:89:46:95:a5:37:84:38:e4:40:26:3c:42:79:
         04:7a:fe:87:ff:f3:d1:22:34:9a:53:58:2c:2a:83:7c:08:33:
         c9:c4:ae:bf:7c:41:97:0e:82:19:6c:7f:11:12:08:9a:c1:8e:
         eb:e8:b3:04:fe:dd:e4:d0:dd:15:1c:14:f3:c4:d8:30:6f:c3:
         d5:2a:ae:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:43 2023 by rpki-client on console-fra.rpki-client.org