Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/54f7e3b8-39aa-3072-a2c8-9560af655de4.roa
File:                     54f7e3b8-39aa-3072-a2c8-9560af655de4.roa (raw, json)
Hash identifier:          Amc2Oo3qNZe+qsjcjr70FYCulC9YsDVDKdT6KlZ7mtI=
Subject key identifier:   E5:6D:ED:A2:8E:99:F8:02:D2:67:D0:D1:0A:0C:D8:CB:12:1E:22:37
Certificate issuer:       /CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Certificate serial:       010D0C9F4328576D51CC73C042CFC16DF45A498A
Authority key identifier: 00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/54f7e3b8-39aa-3072-a2c8-9560af655de4.roa
Signing time:             Tue 22 Oct 2019 16:43:40 +0000
ROA not before:           Wed 16 Oct 2019 04:00:00 +0000
ROA not after:            Tue 16 Oct 2029 04:00:00 +0000
asID:                     63949
IP address blocks:        96.126.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:f4:5a:49:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
        Validity
            Not Before: Oct 16 04:00:00 2019 GMT
            Not After : Oct 16 04:00:00 2029 GMT
        Subject: CN=2adbe4cd-5262-4626-9726-c75989cef768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e8:eb:80:56:76:0d:48:75:ca:e0:d5:78:24:
                    e7:a3:47:34:a9:8d:fc:3e:77:66:88:a0:55:06:3c:
                    95:10:31:b3:9a:99:0b:66:0c:63:5f:98:b3:8e:0b:
                    6b:f0:aa:58:23:10:f0:c0:54:4b:eb:b8:ad:76:bf:
                    fd:66:35:1b:02:27:05:70:44:38:cf:b2:39:ee:fa:
                    fb:74:ba:74:84:95:5c:10:32:01:69:a0:6f:6e:7e:
                    50:53:88:38:09:f3:43:7b:a1:9d:4e:29:ad:20:d6:
                    e6:74:67:4a:23:e2:15:90:0b:dc:ba:1e:aa:28:ab:
                    3c:26:8d:3e:00:36:6a:a0:8e:0a:32:68:6d:20:bb:
                    79:30:f7:b2:01:b1:b4:ba:d1:95:c3:0c:15:7d:5c:
                    6c:3d:af:83:76:cd:5b:aa:6b:0d:66:6a:1f:79:2f:
                    1e:97:4d:2f:af:93:f3:a0:85:68:5e:8c:40:b4:b0:
                    16:fd:67:31:6e:8c:a1:57:e9:c6:d7:35:76:76:e5:
                    29:75:81:2c:58:2e:40:d4:53:46:1b:2f:fe:05:2e:
                    89:77:17:2f:5c:0e:49:4f:ad:33:17:b5:3a:72:c0:
                    80:ce:c5:9e:d3:52:72:87:d9:56:47:99:d8:d3:d4:
                    0d:b0:50:0f:35:3f:95:50:9b:38:d0:d6:be:6c:99:
                    6c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6D:ED:A2:8E:99:F8:02:D2:67:D0:D1:0A:0C:D8:CB:12:1E:22:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/54f7e3b8-39aa-3072-a2c8-9560af655de4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.crl

            X509v3 Authority Key Identifier:
                keyid:00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.126.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e7:23:22:5e:2c:49:7a:1e:da:31:27:fd:09:d7:5d:8b:5f:
         8d:d0:f0:89:87:b8:5d:c4:2c:ee:dd:b0:17:1e:ca:0c:f5:60:
         f9:88:43:03:48:41:0a:be:3a:9a:06:60:ea:ac:5b:51:c4:65:
         f0:d1:42:f9:a2:a8:fc:9d:00:55:b5:2f:58:bb:ca:36:30:f7:
         c4:61:68:3a:19:9c:9d:ff:01:bf:bc:cd:51:51:34:04:96:b6:
         95:2c:1d:f3:03:3e:0f:e6:b1:38:19:f8:bf:bd:f0:c9:d6:e3:
         90:cd:73:34:1c:cd:a8:ff:a9:eb:66:6f:55:08:90:c2:12:f9:
         e1:56:60:bd:aa:d8:d2:41:53:a7:f5:da:fe:da:58:cb:59:25:
         8d:1e:dd:d6:11:f3:52:a2:ef:27:3c:af:1d:28:be:2b:3b:04:
         9a:af:b1:43:65:15:fb:ae:0d:11:19:89:5a:b2:3b:c0:b1:08:
         8a:c4:b4:71:13:46:6d:e1:be:14:e0:43:e0:22:09:30:6b:a4:
         ec:a1:12:04:21:e8:37:ca:d5:56:38:0b:47:09:c2:40:21:f5:
         83:7a:bf:1b:2d:3f:8d:33:3f:bb:04:6b:7e:da:f0:53:44:60:
         b9:db:81:26:ee:97:48:18:84:66:c9:1c:5e:62:81:49:b7:50:
         02:2d:a5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:15 2024 by rpki-client on console-fra.rpki-client.org