Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1636ee97-d995-4465-ba75-af0a5ca0562b/17c972c9-e723-3304-803a-53c5fe049a63.roa
File:                     17c972c9-e723-3304-803a-53c5fe049a63.roa (raw, json)
Hash identifier:          It99vl/y/mKS6FSfRLLdFEYAtuT+pm7boegWg2CQ5SY=
Subject key identifier:   9B:C9:34:BF:67:B6:6A:4A:22:91:1B:CD:6E:93:49:BB:1C:9B:06:2B
Certificate issuer:       /CN=1636ee97-d995-4465-ba75-af0a5ca0562b
Certificate serial:       010D0C9F4328576D51CC73C042CFC171F8D16F35
Authority key identifier: 09:75:4C:1D:B6:A8:7D:EF:20:EB:19:94:C6:EC:2A:2C:15:86:3B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1636ee97-d995-4465-ba75-af0a5ca0562b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1636ee97-d995-4465-ba75-af0a5ca0562b/17c972c9-e723-3304-803a-53c5fe049a63.roa
Signing time:             Sat 09 May 2020 09:43:27 +0000
ROA not before:           Tue 25 Jun 2019 04:00:00 +0000
ROA not after:            Mon 25 Jun 2029 04:00:00 +0000
asID:                     62685
IP address blocks:        64.4.168.0/22 maxlen: 24
                          208.91.188.0/22 maxlen: 24
                          2604:7c0::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:f8:d1:6f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1636ee97-d995-4465-ba75-af0a5ca0562b
        Validity
            Not Before: Jun 25 04:00:00 2019 GMT
            Not After : Jun 25 04:00:00 2029 GMT
        Subject: CN=b99968d3-ca54-47b3-aa7b-ee97e32ccc88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c0:3c:2b:18:22:ba:a7:fc:57:22:e8:e5:ec:
                    a3:88:01:29:1f:61:63:b0:54:6c:04:be:fa:1f:e6:
                    90:40:54:ed:7a:db:70:12:b5:4e:a6:63:00:00:a3:
                    42:df:6a:d4:57:ca:10:f8:55:19:5f:69:76:30:c8:
                    ed:e8:21:e3:49:5e:52:a8:96:90:a5:c5:10:87:1b:
                    b3:09:8f:b3:bb:55:9b:5d:ae:c4:ba:e4:1e:2c:19:
                    22:ed:d3:fe:41:c0:c9:ca:70:4b:7a:4c:52:d3:d3:
                    dd:c2:4c:c7:ce:03:4a:ec:6c:dc:c9:94:61:0d:aa:
                    3c:bb:cd:d5:31:d7:80:50:2f:19:91:04:ab:1a:70:
                    a5:01:63:8d:72:a9:db:2f:68:65:55:84:1a:8a:2e:
                    c2:3d:d8:76:9d:98:00:ba:a1:af:f3:5b:88:95:cd:
                    cf:9d:aa:84:fe:02:f3:61:89:92:c7:98:64:c8:aa:
                    12:01:c1:16:9b:48:f8:02:97:f6:f5:57:f3:d1:3b:
                    84:6c:b1:5e:4d:5b:7f:78:d3:c4:b0:ef:a5:1e:47:
                    09:f7:b2:06:2f:35:05:ed:50:ee:c0:da:37:a3:dd:
                    8a:81:06:8c:ba:5e:86:6f:90:ba:0f:98:04:d8:cb:
                    54:d7:9f:da:85:c2:b5:c6:bf:a0:69:94:62:7d:bf:
                    87:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C9:34:BF:67:B6:6A:4A:22:91:1B:CD:6E:93:49:BB:1C:9B:06:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1636ee97-d995-4465-ba75-af0a5ca0562b/17c972c9-e723-3304-803a-53c5fe049a63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1636ee97-d995-4465-ba75-af0a5ca0562b/1636ee97-d995-4465-ba75-af0a5ca0562b.crl

            X509v3 Authority Key Identifier:
                keyid:09:75:4C:1D:B6:A8:7D:EF:20:EB:19:94:C6:EC:2A:2C:15:86:3B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1636ee97-d995-4465-ba75-af0a5ca0562b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.168.0/22
                  208.91.188.0/22
                IPv6:
                  2604:7c0::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:db:49:07:95:d8:dc:2f:3b:7c:f8:c2:9c:24:06:c5:40:fa:
         11:b6:4a:d7:e5:2a:c4:dd:e7:2b:ff:53:6d:5f:b2:c9:31:1f:
         ff:54:41:91:50:35:d5:85:ec:7f:2c:c4:80:6e:35:51:2e:8b:
         71:6c:08:d5:3d:cf:7c:5d:fc:ac:e1:74:b8:a4:d0:15:fe:a8:
         43:0b:bd:57:0a:28:b9:4d:16:df:98:12:e8:9a:de:a6:3c:6f:
         d1:25:b6:0d:86:da:83:b5:40:7a:31:ee:43:9d:8f:0e:a6:38:
         e0:b4:d6:76:64:a5:88:10:d5:ac:29:26:da:1e:17:5a:a4:e5:
         7e:74:02:1f:a4:02:d8:92:61:a8:49:19:5a:a0:86:00:8c:fb:
         d8:e7:7f:79:6d:13:19:bb:29:03:e3:2e:3f:5e:5e:d3:ea:da:
         aa:96:1e:be:c4:72:3d:b9:9b:8f:41:93:b0:97:3c:3f:74:13:
         65:cc:6d:5a:27:72:0c:99:6a:66:9e:54:11:fd:f5:0c:9f:81:
         d1:55:0e:ee:07:96:ee:55:38:7a:55:1e:ec:5f:7a:8c:2e:b2:
         22:7d:ed:e8:d5:3b:30:a4:41:c1:36:42:f7:aa:66:6c:4f:ef:
         1d:fe:47:44:e1:88:68:b7:b8:ab:f8:bf:87:51:ab:56:95:83:
         1d:c6:04:47
-----BEGIN CERTIFICATE-----
MIIGVTCCBT+gAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcfjRbzUwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDE2MzZlZTk3LWQ5OTUtNDQ2NS1iYTc1LWFmMGE1Y2EwNTYy
YjAeFw0xOTA2MjUwNDAwMDBaFw0yOTA2MjUwNDAwMDBaMC8xLTArBgNVBAMTJGI5
OTk2OGQzLWNhNTQtNDdiMy1hYTdiLWVlOTdlMzJjY2M4ODCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOTAPCsYIrqn/Fci6OXso4gBKR9hY7BUbAS++h/m
kEBU7XrbcBK1TqZjAACjQt9q1FfKEPhVGV9pdjDI7egh40leUqiWkKXFEIcbswmP
s7tVm12uxLrkHiwZIu3T/kHAycpwS3pMUtPT3cJMx84DSuxs3MmUYQ2qPLvN1THX
gFAvGZEEqxpwpQFjjXKp2y9oZVWEGoouwj3Ydp2YALqhr/NbiJXNz52qhP4C82GJ
kseYZMiqEgHBFptI+AKX9vVX89E7hGyxXk1bf3jTxLDvpR5HCfeyBi81Be1Q7sDa
N6PdioEGjLpehm+Qug+YBNjLVNef2oXCtca/oGmUYn2/h/sCAwEAAaOCA2swggNn
MB0GA1UdDgQWBBSbyTS/Z7ZqSiKRG81uk0m7HJsGKzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTYzNmVl
OTctZDk5NS00NDY1LWJhNzUtYWYwYTVjYTA1NjJiLzE3Yzk3MmM5LWU3MjMtMzMw
NC04MDNhLTUzYzVmZTA0OWE2My5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzE2MzZlZTk3LWQ5OTUtNDQ2NS1iYTc1
LWFmMGE1Y2EwNTYyYi8xNjM2ZWU5Ny1kOTk1LTQ0NjUtYmE3NS1hZjBhNWNhMDU2
MmIuY3JsMB8GA1UdIwQYMBaAFAl1TB22qH3vIOsZlMbsKiwVhjvGMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvMTYzNmVlOTctZDk5NS00NDY1LWJhNzUtYWYwYTVj
YTA1NjJiLmNlcjA1BggrBgEFBQcBBwEB/wQmMCQwEgQCAAEwDAMEAkAEqAMEAtBb
vDAOBAIAAjAIAwYEJgQHwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDALBgkqhkiG9w0BAQsDggEBAB7bSQeV2NwvO3z4wpwkBsVA+hG2Stfl
KsTd5yv/U21fsskxH/9UQZFQNdWF7H8sxIBuNVEui3FsCNU9z3xd/KzhdLik0BX+
qEMLvVcKKLlNFt+YEuia3qY8b9Eltg2G2oO1QHox7kOdjw6mOOC01nZkpYgQ1awp
JtoeF1qk5X50Ah+kAtiSYahJGVqghgCM+9jnf3ltExm7KQPjLj9eXtPq2qqWHr7E
cj25m49Bk7CXPD90E2XMbVoncgyZamaeVBH99QyfgdFVDu4Hlu5VOHpVHuxfeowu
siJ97ejVOzCkQcE2QveqZmxP7x3+R0ThiGi3uKv4v4dRq1aVgx3GBEc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:15 2024 by rpki-client on console-fra.rpki-client.org