Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c9940a6d-a30b-4b11-b771-aac487f6ab48/efb9fa38-a189-32c0-8be9-22f0c6a19675.roa
File:                     efb9fa38-a189-32c0-8be9-22f0c6a19675.roa (raw, json)
Hash identifier:          JcHaG1wPtevCBPIOLaSvp0NRlFSpQG/QYSS2n34+dO8=
Subject key identifier:   AA:22:4D:01:5C:CC:B0:D1:D3:F1:B4:5C:B0:FC:43:A4:46:82:CA:C0
Certificate issuer:       /CN=c9940a6d-a30b-4b11-b771-aac487f6ab48
Certificate serial:       010D0C9F4328583C9FC289A3662B7DD5F103D480
Authority key identifier: 4A:58:4D:D3:C8:9B:5B:BC:48:B1:FB:DB:EA:3A:84:AA:A9:4B:59:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c9940a6d-a30b-4b11-b771-aac487f6ab48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c9940a6d-a30b-4b11-b771-aac487f6ab48/efb9fa38-a189-32c0-8be9-22f0c6a19675.roa
Signing time:             Sat 01 Jan 2022 05:00:00 +0000
ROA not before:           Sat 01 Jan 2022 05:00:00 +0000
ROA not after:            Tue 31 Dec 2024 05:00:00 +0000
asID:                     396356
IP address blocks:        96.45.66.0/24 maxlen: 24
                          96.45.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:9f:c2:89:a3:66:2b:7d:d5:f1:03:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9940a6d-a30b-4b11-b771-aac487f6ab48
        Validity
            Not Before: Jan  1 05:00:00 2022 GMT
            Not After : Dec 31 05:00:00 2024 GMT
        Subject: CN=9ef480a4-b83f-43b1-b9ba-92f18ab05951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a4:78:b4:52:e3:ff:93:15:46:07:cb:87:9e:
                    fb:cf:50:f4:a4:d0:bf:e2:7f:32:fc:f6:35:41:af:
                    d7:93:db:19:f1:bf:0f:d2:29:30:66:e5:11:6c:2a:
                    23:0e:4a:8e:42:80:bd:e9:41:1e:f6:8e:2c:a8:9f:
                    5d:5c:68:07:2c:1a:4b:f3:40:8e:7f:04:45:32:56:
                    0c:47:04:ab:38:5f:06:d3:3c:13:ac:e3:42:31:77:
                    37:0a:32:03:11:19:64:0e:86:9b:96:09:2d:c2:c4:
                    3b:b0:1c:01:83:77:f0:ab:f5:2f:6d:61:e7:75:bc:
                    8b:22:e5:59:18:56:6e:5b:9d:e4:6d:a9:55:4a:a1:
                    df:03:d1:0c:1b:74:09:d4:da:95:46:98:86:09:e4:
                    c8:02:96:87:c8:ad:a8:ca:bf:6b:e1:47:cc:40:b2:
                    01:c2:7e:16:a3:79:16:69:61:48:95:88:10:d5:ae:
                    2b:73:3d:fa:b5:d8:43:e2:61:78:b4:21:f4:45:3b:
                    4a:b1:53:2e:df:76:be:bd:e7:93:ad:78:0d:5b:f5:
                    60:b3:30:9a:5f:d0:aa:05:af:eb:d0:83:cb:d8:07:
                    aa:6c:82:27:07:82:16:83:9f:9a:51:03:df:c6:6c:
                    43:17:81:fe:0f:94:ca:98:da:e4:ea:a0:c6:63:82:
                    74:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:22:4D:01:5C:CC:B0:D1:D3:F1:B4:5C:B0:FC:43:A4:46:82:CA:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c9940a6d-a30b-4b11-b771-aac487f6ab48/efb9fa38-a189-32c0-8be9-22f0c6a19675.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c9940a6d-a30b-4b11-b771-aac487f6ab48/c9940a6d-a30b-4b11-b771-aac487f6ab48.crl

            X509v3 Authority Key Identifier:
                keyid:4A:58:4D:D3:C8:9B:5B:BC:48:B1:FB:DB:EA:3A:84:AA:A9:4B:59:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c9940a6d-a30b-4b11-b771-aac487f6ab48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.45.66.0/24
                  96.45.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:80:b4:65:9f:b6:20:6b:79:b4:cd:03:58:12:4f:94:13:07:
         31:3b:86:31:b5:36:ca:26:da:4a:6f:c2:69:06:0a:0c:ac:4e:
         25:b5:39:2f:bf:f9:7d:b7:0b:41:3e:a7:81:7c:8e:83:b3:93:
         77:db:6c:9e:1b:39:50:3b:06:76:85:62:98:df:f4:a8:dd:c2:
         4a:49:97:91:f2:a5:fd:02:64:c1:e3:34:6c:ac:63:0e:3c:be:
         22:04:cf:e4:bc:9f:d2:cd:68:7d:24:c3:10:4f:b0:22:cb:8a:
         a9:ab:4c:a5:0e:9f:51:81:1d:ba:c0:09:3b:eb:f3:33:a1:97:
         7b:1d:6a:1c:e4:a0:84:19:97:c3:13:ff:f1:1d:8a:36:18:ef:
         02:b4:48:9c:6a:d8:17:47:0e:02:dc:4e:c5:5d:eb:1d:83:b6:
         e6:b8:45:cb:4c:6a:d7:9a:11:56:79:59:28:33:60:bf:1f:80:
         a8:65:e6:28:15:1c:82:a1:99:51:1b:54:75:8f:37:ca:5b:f5:
         66:e7:b3:38:ad:a9:30:9a:10:86:95:bc:ec:15:0e:94:7a:db:
         f3:96:15:ee:4f:83:01:7a:31:8d:f0:4f:3a:1d:77:77:7a:af:
         0b:f4:55:2d:2e:30:c5:ac:4c:51:78:30:78:e1:ec:26:6f:c7:
         a5:64:d3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:40 2023 by rpki-client on console-ams.rpki-client.org