Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/ad6c5b22-bf6b-3b69-baf8-987df13f609b.roa
File:                     ad6c5b22-bf6b-3b69-baf8-987df13f609b.roa (raw, json)
Hash identifier:          3xGTJcoKH1GfhGHRQs+6c2ji5eDl9650eWbhmwiroDc=
Subject key identifier:   F2:44:2F:04:B7:07:97:82:52:38:67:3A:67:E2:87:20:5B:98:BC:F1
Certificate issuer:       /CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Certificate serial:       010D0C9F4328583D3DF35BC63A80E2603A966280
Authority key identifier: 00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/ad6c5b22-bf6b-3b69-baf8-987df13f609b.roa
Signing time:             Wed 16 Oct 2019 04:00:00 +0000
ROA not before:           Wed 16 Oct 2019 04:00:00 +0000
ROA not after:            Mon 17 Jun 2024 04:00:00 +0000
asID:                     63949
IP address blocks:        139.144.16.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:3d:f3:5b:c6:3a:80:e2:60:3a:96:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
        Validity
            Not Before: Oct 16 04:00:00 2019 GMT
            Not After : Jun 17 04:00:00 2024 GMT
        Subject: CN=026c4882-14ce-4627-a3b2-cbb0f2c9fea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1c:08:e9:58:5a:55:da:93:d1:73:82:1f:41:
                    3f:aa:3a:6b:84:c1:83:21:cb:1b:b3:75:35:fc:1b:
                    e2:aa:76:36:31:eb:95:e3:ea:ca:22:f2:5d:48:26:
                    25:29:06:9f:75:71:e1:07:21:19:b2:04:5b:f8:38:
                    f6:f7:0a:d7:be:42:2f:e9:1b:63:d0:8a:14:c0:bf:
                    77:84:f1:cd:a8:f1:36:23:3d:a1:23:d0:fa:cc:0e:
                    bd:36:c1:80:79:44:f7:92:9c:57:c0:12:20:60:41:
                    a7:8b:73:fd:9d:ac:66:98:90:67:7e:3d:a3:db:44:
                    94:c2:d5:24:43:7e:84:d3:da:c1:b3:1b:32:4b:05:
                    40:7d:19:c7:07:d2:cc:eb:ab:a2:4d:25:78:dc:68:
                    22:78:83:71:c8:98:cc:12:d4:08:90:e8:47:82:3d:
                    7b:d8:ca:d1:de:75:5f:7f:22:76:cb:42:77:38:8f:
                    57:5c:26:d5:bd:96:83:74:66:f0:41:cd:87:52:70:
                    c0:70:f3:cd:95:45:21:4d:7c:17:75:30:d8:14:e7:
                    9a:41:78:c0:ab:17:3e:f3:81:38:bb:57:ac:06:f2:
                    8e:a3:d6:26:89:65:eb:80:b9:9e:97:4d:c2:15:82:
                    09:a8:92:02:4c:2f:6f:f7:d7:48:aa:55:06:51:98:
                    6e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:44:2F:04:B7:07:97:82:52:38:67:3A:67:E2:87:20:5B:98:BC:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/ad6c5b22-bf6b-3b69-baf8-987df13f609b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.crl

            X509v3 Authority Key Identifier:
                keyid:00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.144.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:67:56:61:4e:53:b4:b1:94:8f:38:1a:20:22:22:8d:f9:a1:
         71:0c:03:f4:02:df:4b:fe:ce:16:80:4d:72:91:30:b7:3c:75:
         b7:7e:3c:bc:fc:9e:c8:c3:fc:7f:a5:9a:11:18:19:12:06:2b:
         58:a6:9c:24:31:bf:9d:1c:d3:dc:fc:15:02:6b:f0:7d:70:a3:
         20:2e:c6:3c:38:99:53:0a:5f:8a:a8:20:0c:49:d2:b5:eb:1f:
         f0:d3:2f:53:30:2c:bc:44:cc:d9:fd:a6:cf:80:6f:38:6e:3a:
         21:a6:ac:0e:63:29:b6:a4:99:f5:e1:32:70:2f:9d:85:48:a4:
         bd:d0:4b:9c:94:53:14:ad:9f:37:06:8c:78:a8:5b:67:94:62:
         2e:b1:93:d6:20:9a:66:22:23:09:67:d4:d6:dc:9c:e1:f9:20:
         57:66:58:1d:a4:40:96:98:38:e6:a9:58:c9:3b:06:23:14:99:
         6d:d7:ba:59:02:95:8d:73:a9:1b:57:b5:f7:63:f4:cf:83:50:
         32:ab:aa:9c:bd:18:79:c4:26:63:1d:28:52:13:5a:61:2c:df:
         84:41:13:da:60:77:4b:a2:1c:b1:72:3e:bf:2a:7f:b9:0b:47:
         84:3a:46:d8:78:31:37:da:f0:3d:ca:2c:3f:82:10:6f:8f:2a:
         5e:bb:39:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:15 2024 by rpki-client on console-fra.rpki-client.org