Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01f47c46-30d2-4d97-adb6-04702f65d33c/fdd55aa2-0528-3e67-9425-f1802808eb4d.roa
File:                     fdd55aa2-0528-3e67-9425-f1802808eb4d.roa (raw, json)
Hash identifier:          R2epjviopVV5ngtXcmvhjg9f4+u+BUGv7O3Q1OJiSzc=
Subject key identifier:   41:C3:B0:F3:76:58:1A:6E:49:B2:3C:7A:C9:1B:D0:8B:38:53:76:CD
Certificate issuer:       /CN=01f47c46-30d2-4d97-adb6-04702f65d33c
Certificate serial:       010D0C9F4328576D51CC73C042CFC16F1F23939B
Authority key identifier: 8B:FB:3D:AB:03:D2:84:1B:03:E2:88:2D:BA:D5:8C:0F:A5:5D:A0:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01f47c46-30d2-4d97-adb6-04702f65d33c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01f47c46-30d2-4d97-adb6-04702f65d33c/fdd55aa2-0528-3e67-9425-f1802808eb4d.roa
Signing time:             Thu 19 Dec 2019 17:10:22 +0000
ROA not before:           Tue 26 Nov 2019 05:00:00 +0000
ROA not after:            Mon 26 Nov 2029 05:00:00 +0000
asID:                     14618
IP address blocks:        199.91.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:1f:23:93:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01f47c46-30d2-4d97-adb6-04702f65d33c
        Validity
            Not Before: Nov 26 05:00:00 2019 GMT
            Not After : Nov 26 05:00:00 2029 GMT
        Subject: CN=3684d944-bb01-4913-857a-3e43b9a64d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3c:80:8c:98:0a:dc:0e:ef:67:40:ab:10:56:
                    72:27:20:88:fd:1a:28:6e:9e:07:f7:d7:d0:df:d9:
                    e3:c6:0b:1a:ca:48:d0:70:cc:35:ee:cf:a6:cb:90:
                    e6:04:c9:da:37:53:8a:03:af:36:a1:d0:2a:fb:b8:
                    57:97:98:d9:f1:6e:b3:4b:29:16:55:ea:be:21:47:
                    c9:2e:18:60:99:12:90:73:07:b2:61:ef:68:9e:39:
                    e3:b5:09:49:f5:28:4f:a8:2c:ea:f7:31:c7:42:22:
                    04:a4:72:29:5e:78:17:78:3d:5b:e6:06:ba:17:72:
                    b7:b8:2c:6e:a5:85:eb:8b:e4:1d:5a:71:29:37:20:
                    3d:ef:6b:bd:68:f1:9f:f3:16:96:3b:fc:94:b2:f1:
                    9d:d1:36:2d:18:d8:82:02:ef:e2:38:fa:87:c9:c1:
                    d1:3a:09:c3:e8:f0:3d:57:4c:dd:45:c1:26:9c:a8:
                    2a:68:c9:3d:32:49:f2:9f:53:d6:ae:3a:5f:27:7d:
                    f3:9f:cd:2c:f2:77:6e:29:cb:6d:2a:a1:67:75:73:
                    c2:f1:e9:e9:d5:61:15:16:f6:ad:8c:51:19:58:f9:
                    83:d5:c3:7f:8c:c1:e3:e0:16:28:d1:5b:c7:80:31:
                    51:6c:e1:4d:03:81:66:e9:de:0f:ce:7f:cd:74:3b:
                    a2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C3:B0:F3:76:58:1A:6E:49:B2:3C:7A:C9:1B:D0:8B:38:53:76:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01f47c46-30d2-4d97-adb6-04702f65d33c/fdd55aa2-0528-3e67-9425-f1802808eb4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01f47c46-30d2-4d97-adb6-04702f65d33c/01f47c46-30d2-4d97-adb6-04702f65d33c.crl

            X509v3 Authority Key Identifier:
                keyid:8B:FB:3D:AB:03:D2:84:1B:03:E2:88:2D:BA:D5:8C:0F:A5:5D:A0:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01f47c46-30d2-4d97-adb6-04702f65d33c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:68:ff:49:ec:f7:b0:54:40:08:94:d9:cb:b1:5e:06:f8:81:
         3f:18:68:ad:64:ff:0b:b7:a9:18:3a:cc:e7:27:86:cb:c0:e0:
         6a:9b:a6:58:61:f8:d1:99:d3:e4:67:5f:0c:23:c6:de:5e:f7:
         a6:33:5d:a1:33:1b:f9:af:b1:1b:01:01:c9:a2:ac:03:4e:77:
         08:d4:5f:a5:01:e7:18:0b:0b:ed:dc:72:df:bb:c9:8b:81:bc:
         79:a7:5e:78:53:80:85:0e:7b:2d:d3:a3:6c:4f:ad:7d:74:b4:
         8b:82:1c:69:ac:d4:b0:cb:c4:2d:d9:63:0b:d5:a6:33:67:2b:
         70:e7:9d:6d:c6:e9:d6:e4:7a:07:86:4d:9b:65:0f:e7:de:2e:
         85:f1:b1:7b:38:a1:8a:c0:79:e1:3a:f9:96:60:e4:7f:fc:26:
         b6:4a:e3:2d:72:83:aa:33:ad:b9:6a:c5:f1:93:c6:28:05:74:
         3c:a3:6b:73:f5:ca:eb:7f:b9:39:2d:e8:af:f0:f9:15:3a:cf:
         69:e6:03:eb:48:ae:2e:95:d8:be:f3:d2:0a:15:26:25:b6:be:
         26:bd:03:0f:f2:2a:86:89:41:eb:a6:0a:54:4b:6d:4d:35:ce:
         05:32:7b:0e:3b:83:54:2b:f9:27:54:70:a0:1b:e5:8f:4d:0b:
         da:9c:fb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:52 2023 by rpki-client on console-fra.rpki-client.org