Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/a21143f8-8cce-3f90-9789-35b6096cbd01.roa
File:                     a21143f8-8cce-3f90-9789-35b6096cbd01.roa (raw, json)
Hash identifier:          j0fKSoBvn4oJUyq30KcJ2r2k2ciuKZaVLgw6T4tOXJk=
Subject key identifier:   DF:88:2B:C3:CF:AE:AA:54:54:A4:15:17:06:3A:E9:59:53:23:B9:02
Certificate issuer:       /CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E46EF76C4
Authority key identifier: 00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/a21143f8-8cce-3f90-9789-35b6096cbd01.roa
Signing time:             Thu 07 Nov 2019 17:35:28 +0000
ROA not before:           Wed 16 Oct 2019 04:00:00 +0000
ROA not after:            Tue 16 Oct 2029 04:00:00 +0000
asID:                     63949
IP address blocks:        172.105.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:46:ef:76:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
        Validity
            Not Before: Oct 16 04:00:00 2019 GMT
            Not After : Oct 16 04:00:00 2029 GMT
        Subject: CN=852e856c-7475-4063-a835-a731ff6a671c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a0:bd:73:a5:e6:df:26:e3:db:04:11:e4:53:
                    81:33:87:c4:5f:bd:42:8c:db:3c:f8:3c:3c:dc:bb:
                    da:93:25:5b:1f:6f:ee:48:b3:c1:4f:6a:2f:bc:35:
                    b7:dc:e9:25:3b:81:5b:18:2a:ae:86:98:12:ed:12:
                    51:7e:6b:25:d4:11:ea:31:07:e0:aa:ba:5a:0c:70:
                    09:0b:77:2c:44:c5:a6:42:ce:12:bf:58:ee:57:f5:
                    d2:64:bd:9c:40:0b:75:58:5b:17:98:82:12:9c:2e:
                    17:6a:32:1a:f0:b3:59:17:e6:c9:45:32:0f:8c:e8:
                    de:76:af:9e:39:f6:d3:e5:8d:45:bf:c3:f3:fb:10:
                    d5:10:88:5d:62:9f:d1:9f:30:b4:20:e8:d6:af:98:
                    d9:73:eb:dc:0c:88:ed:26:5d:56:86:69:1d:83:a5:
                    be:d7:7e:7d:eb:dc:ee:ac:e2:21:e6:c4:62:68:92:
                    95:de:ad:37:85:57:3f:a4:bb:7b:91:9f:ec:8b:2c:
                    aa:f6:30:91:e1:e1:8f:ff:ac:8a:a1:53:0f:9c:23:
                    6b:a9:ca:eb:91:36:88:c7:7c:1a:57:1b:89:2a:87:
                    69:d4:06:85:28:a4:d4:0a:ba:05:4a:eb:b5:74:8a:
                    bd:71:da:05:2b:84:53:20:37:8e:d0:42:0c:f0:b9:
                    ed:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:88:2B:C3:CF:AE:AA:54:54:A4:15:17:06:3A:E9:59:53:23:B9:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/a21143f8-8cce-3f90-9789-35b6096cbd01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.crl

            X509v3 Authority Key Identifier:
                keyid:00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.105.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:18:d8:be:11:10:b2:01:aa:93:91:99:71:0e:e1:e3:48:d1:
         90:c8:37:21:c2:48:a9:a8:81:e3:de:b3:f9:82:56:b2:d4:9b:
         b4:73:51:bb:59:4a:7d:fe:00:c0:42:4b:73:62:e7:ae:09:04:
         95:7e:a5:ac:21:4c:aa:15:4c:03:a1:ae:ca:52:f3:35:c7:7c:
         01:2a:c7:48:f9:5f:80:33:c7:14:21:7a:50:25:a0:59:8e:61:
         c1:00:4b:e2:38:3a:f0:bb:9f:db:ce:32:49:56:db:e9:50:6a:
         a9:40:92:43:1c:64:eb:65:46:a0:0f:02:0f:3a:5f:53:38:e4:
         f6:7c:90:ef:65:9f:dd:f2:d8:04:ef:20:74:37:62:23:2c:64:
         bb:6e:76:68:d5:c4:1d:cd:97:d9:a2:08:c3:90:f3:ef:ae:74:
         16:cd:2e:c1:88:38:a6:8d:20:e0:ab:a2:51:ad:98:8b:c6:0d:
         29:e1:69:a2:d3:c1:cd:e9:44:6e:1e:29:55:60:4d:e9:60:df:
         d2:3f:74:03:65:77:2e:41:cc:53:4f:a9:c8:ad:8e:91:c6:e5:
         1b:77:67:aa:b7:25:2f:fb:10:90:c3:d2:ca:69:5e:2c:4a:3b:
         1c:d8:22:8b:91:a0:69:9f:ce:1d:49:1f:97:a4:03:b7:33:8f:
         3e:3c:ad:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:15 2024 by rpki-client on console-fra.rpki-client.org