Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/a8088e23-cb51-33cf-b74b-5363e28fb1f5.roa
File:                     a8088e23-cb51-33cf-b74b-5363e28fb1f5.roa (raw, json)
Hash identifier:          5Y6GJV0Rf0FWnsoqVhIe11IdO2DFm07CBtSp/zOu4BI=
Subject key identifier:   7A:C7:3A:17:98:C3:AA:72:A2:3C:29:A2:76:CA:AF:F4:2F:CD:BB:B9
Certificate issuer:       /CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Certificate serial:       010D0C9F4328583EB563E545ACD4BF73D9CAF000
Authority key identifier: 00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/a8088e23-cb51-33cf-b74b-5363e28fb1f5.roa
Signing time:             Wed 16 Oct 2019 21:03:01 +0000
ROA not before:           Wed 16 Oct 2019 21:03:01 +0000
ROA not after:            Tue 29 Oct 2024 04:00:00 +0000
asID:                     63949
IP address blocks:        170.187.168.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b5:63:e5:45:ac:d4:bf:73:d9:ca:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
        Validity
            Not Before: Oct 16 21:03:01 2019 GMT
            Not After : Oct 29 04:00:00 2024 GMT
        Subject: CN=ea3f49bb-9dad-40b3-8e89-b228b52ea437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1e:a9:55:39:ef:9c:71:ce:8b:67:d8:6d:0e:
                    39:3a:eb:26:48:3d:17:75:9c:ee:54:e2:54:47:98:
                    08:ad:70:19:69:28:18:9d:4d:c1:44:83:52:01:e3:
                    d3:ac:be:51:a0:73:7b:8b:2e:24:96:2c:1b:a6:78:
                    fe:83:9a:20:ab:a9:cc:42:90:7b:3c:00:65:21:45:
                    f4:1e:12:82:e1:2e:05:8e:72:e5:0a:cd:16:99:09:
                    6b:06:50:64:41:7c:24:b7:88:f6:18:0c:83:7d:c2:
                    8f:ca:28:2e:15:1a:67:4c:35:37:0a:1d:57:90:34:
                    23:e6:16:bf:9e:cd:01:d4:d8:9c:2a:ed:45:f0:cc:
                    0b:45:2c:14:10:c8:09:fc:7a:56:75:fa:a4:97:eb:
                    26:ba:d6:13:f6:d2:a3:ec:0f:70:44:e3:ff:cb:dc:
                    db:01:e8:8a:58:59:5c:48:dc:bc:8f:6c:f7:45:8c:
                    a1:15:28:06:8a:19:f4:01:0f:44:05:5e:96:1e:49:
                    6f:a5:8b:74:2d:15:8b:7d:e8:c3:df:3f:97:c4:ad:
                    e2:82:5a:50:37:07:fd:17:cd:ff:66:ea:01:7d:14:
                    a6:58:e4:ba:27:4c:d4:9a:81:e4:6d:a6:0d:37:c1:
                    96:3f:95:01:ae:1e:15:15:12:71:b4:4e:c7:fc:11:
                    d4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C7:3A:17:98:C3:AA:72:A2:3C:29:A2:76:CA:AF:F4:2F:CD:BB:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/a8088e23-cb51-33cf-b74b-5363e28fb1f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.crl

            X509v3 Authority Key Identifier:
                keyid:00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.187.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:7c:5e:ff:24:39:31:05:a3:b4:c8:10:1c:f3:63:d3:aa:70:
         6c:81:da:44:05:f8:cc:c5:07:0f:f1:46:96:b4:8e:79:1a:ce:
         42:40:6b:4d:ec:38:b5:59:eb:65:21:56:28:1d:f4:e8:38:83:
         04:1e:c2:7d:04:88:78:b1:5b:6b:24:f4:f7:cc:dc:1c:e5:1a:
         f7:61:ab:eb:96:c2:5e:98:aa:5b:23:8b:6c:57:b4:f7:5f:11:
         1d:10:a7:f8:39:68:8e:61:41:f0:19:4a:ab:34:21:b9:d4:a7:
         a5:72:c8:28:f5:e5:5b:f0:89:b7:9c:7c:e3:8a:be:8d:20:c3:
         21:52:9e:55:6d:7e:bc:c0:ee:d8:16:fb:79:bf:d2:bc:50:5f:
         9a:5e:32:56:26:9b:64:84:40:11:48:16:82:a7:cd:f0:b0:74:
         dd:42:ff:7c:63:50:18:ea:fa:a3:4e:c9:34:dc:84:dc:f0:2c:
         f7:a5:58:8c:7c:00:37:26:80:b7:a0:d4:93:df:f2:13:5d:1a:
         93:9d:e3:bb:79:77:da:4c:62:8b:b1:fc:4a:0b:eb:d8:24:51:
         24:4c:6e:62:54:af:61:9e:2a:4e:ca:7a:33:3c:f2:f8:f6:0f:
         aa:5c:14:aa:8c:9a:f6:94:8c:ac:ae:87:03:e8:7c:92:8e:f7:
         12:ba:50:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD61Y+VFrNS/c9nK8AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWVjZWJjOWQtYWFhZi00YjZkLWFmNGYtZmE1YzA3NDky
NWU4MB4XDTE5MTAxNjIxMDMwMVoXDTI0MTAyOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZWEzZjQ5YmItOWRhZC00MGIzLThlODktYjIyOGI1MmVhNDM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgx6pVTnvnHHOi2fYbQ45OusmSD0XdZzuVOJU
R5gIrXAZaSgYnU3BRINSAePTrL5RoHN7iy4kliwbpnj+g5ogq6nMQpB7PABlIUX0
HhKC4S4FjnLlCs0WmQlrBlBkQXwkt4j2GAyDfcKPyiguFRpnTDU3Ch1XkDQj5ha/
ns0B1NicKu1F8MwLRSwUEMgJ/HpWdfqkl+smutYT9tKj7A9wROP/y9zbAeiKWFlc
SNy8j2z3RYyhFSgGihn0AQ9EBV6WHklvpYt0LRWLfejD3z+XxK3iglpQNwf9F83/
ZuoBfRSmWOS6J0zUmoHkbaYNN8GWP5UBrh4VFRJxtE7H/BHU1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHrHOheYw6pyojwponbKr/Qvzbu5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZWNl
YmM5ZC1hYWFmLTRiNmQtYWY0Zi1mYTVjMDc0OTI1ZTgvYTgwODhlMjMtY2I1MS0z
M2NmLWI3NGItNTM2M2UyOGZiMWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWVjZWJjOWQtYWFhZi00YjZkLWFm
NGYtZmE1YzA3NDkyNWU4LzFlY2ViYzlkLWFhYWYtNGI2ZC1hZjRmLWZhNWMwNzQ5
MjVlOC5jcmwwHwYDVR0jBBgwFoAUAK/tJStu2eQZzxITqSnt3eJueiowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xZWNlYmM5ZC1hYWFmLTRiNmQtYWY0Zi1mYTVj
MDc0OTI1ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqruoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK18Xv8kOTEFo7TIEBzzY9OqcGyB2kQF+MzFBw/xRpa0jnkazkJAa03s
OLVZ62UhVigd9Og4gwQewn0EiHixW2sk9PfM3BzlGvdhq+uWwl6Yqlsji2xXtPdf
ER0Qp/g5aI5hQfAZSqs0IbnUp6VyyCj15VvwibecfOOKvo0gwyFSnlVtfrzA7tgW
+3m/0rxQX5peMlYmm2SEQBFIFoKnzfCwdN1C/3xjUBjq+qNOyTTchNzwLPelWIx8
ADcmgLeg1JPf8hNdGpOd47t5d9pMYoux/EoL69gkUSRMbmJUr2GeKk7KejM88vj2
D6pcFKqMmvaUjKyuhwPofJKO9xK6UBk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:47 2024 by rpki-client on console-ams.rpki-client.org