Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/9f25c21c-bf92-31d7-9be5-13556271fa16.roa
File:                     9f25c21c-bf92-31d7-9be5-13556271fa16.roa (raw, json)
Hash identifier:          Wz8NtkPULOxyvRCL/I1wg+InAsxiTF3sBhzZuU2ld/I=
Subject key identifier:   CE:24:0D:B4:73:14:F2:65:A7:80:BB:79:C8:32:DB:19:40:AE:48:19
Certificate issuer:       /CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Certificate serial:       010D0C9F4328576D51CC73C042CFC16DF45634AD
Authority key identifier: 00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/9f25c21c-bf92-31d7-9be5-13556271fa16.roa
Signing time:             Tue 22 Oct 2019 16:39:13 +0000
ROA not before:           Wed 16 Oct 2019 04:00:00 +0000
ROA not after:            Tue 16 Oct 2029 04:00:00 +0000
asID:                     63949
IP address blocks:        69.164.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:f4:56:34:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
        Validity
            Not Before: Oct 16 04:00:00 2019 GMT
            Not After : Oct 16 04:00:00 2029 GMT
        Subject: CN=470eec71-edbd-42ab-9e93-3c42a7a851f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cd:bb:00:87:8e:5c:c3:cf:e9:0d:b0:da:39:
                    24:1a:93:40:98:91:d2:14:3c:51:95:75:6c:dd:27:
                    d5:48:4c:41:3a:92:2f:58:a8:da:d5:ac:dc:c3:7d:
                    93:64:9a:c3:12:59:21:39:80:de:3c:d4:38:37:34:
                    af:0a:a4:46:f1:6f:90:2f:6b:7b:a2:39:f0:28:4b:
                    5a:78:40:2b:d4:aa:bd:80:14:85:13:8e:d7:2c:55:
                    39:ad:aa:da:0e:8a:26:51:22:a7:18:05:52:9a:72:
                    13:b6:8d:09:af:84:0b:f8:98:de:b7:95:d9:99:81:
                    99:ef:ed:d1:cf:d6:04:ea:f2:f1:60:7b:af:02:92:
                    60:a8:d9:dc:f3:ed:da:da:39:23:0c:09:63:ad:03:
                    e1:6e:2c:d3:57:d9:cf:08:db:42:94:5e:5f:e7:5a:
                    81:51:60:e9:bb:1a:5f:f7:5c:84:59:5f:85:c8:5a:
                    86:6f:56:04:4f:ed:bc:c1:5a:5e:df:10:e6:c1:78:
                    7f:f0:7a:ca:14:e8:20:cb:40:f1:5e:ca:ec:7a:0e:
                    cc:eb:c2:45:09:24:e7:7d:aa:ca:92:97:52:26:6b:
                    94:1e:14:c5:2b:5c:a7:89:24:97:ee:61:3b:55:63:
                    53:51:23:33:19:a5:fc:5f:c1:a5:7e:f3:ca:e2:23:
                    b7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:24:0D:B4:73:14:F2:65:A7:80:BB:79:C8:32:DB:19:40:AE:48:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/9f25c21c-bf92-31d7-9be5-13556271fa16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.crl

            X509v3 Authority Key Identifier:
                keyid:00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.164.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:93:f2:41:24:c6:9e:72:10:a1:e7:50:96:4b:c3:6e:d0:3b:
         07:e4:fe:8c:81:7e:64:46:ac:31:58:37:6f:99:34:61:78:32:
         d6:e5:ca:59:f8:a4:bf:ec:ee:77:6d:16:d4:13:dc:4e:f3:e8:
         2a:41:d7:b3:1d:3e:3f:72:c1:48:ac:99:f0:c1:9b:b0:11:0c:
         a8:c7:bd:7c:a2:e8:36:b9:8b:52:70:3e:03:79:19:56:fe:18:
         07:7c:1f:66:b7:43:b2:46:9d:ea:5e:90:ed:be:d5:81:4e:47:
         e8:13:f9:5d:30:8d:29:56:82:b7:e6:24:6c:1b:51:5a:82:1d:
         45:b4:81:bc:7d:9c:cd:39:65:8a:f2:79:96:d0:61:9f:bd:dc:
         cc:15:d8:94:ba:44:c2:61:0d:44:ed:c0:1b:12:0a:e4:0c:65:
         14:bd:b2:3b:ba:c5:98:63:13:9c:9b:9e:a0:ae:d1:c0:e2:fb:
         6e:4b:1d:f9:f3:ac:09:de:a0:c8:fd:4f:1c:8b:5f:3e:98:3d:
         a1:29:9e:25:3a:7f:d0:8c:35:5e:a1:8d:02:ca:6d:54:d2:f8:
         a0:db:28:45:5e:df:03:63:33:f3:69:a2:d1:a2:86:8c:d9:33:
         90:58:45:00:55:7e:8f:a1:f3:db:0b:14:f9:56:96:13:1a:e5:
         a8:bb:c4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:15 2024 by rpki-client on console-fra.rpki-client.org