Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/c0e43bab-dc4b-39a4-845b-f8eca499a140.roa
File:                     c0e43bab-dc4b-39a4-845b-f8eca499a140.roa (raw, json)
Hash identifier:          ISx0AB6gIQUBg/XpTiUp4SPlz5+bRL1q7Pn5vjhMHXk=
Subject key identifier:   28:1A:CC:54:D2:9E:F8:D4:BC:54:26:10:E9:1A:AC:1F:99:10:33:71
Certificate issuer:       /CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Certificate serial:       010D0C9F4328576D51CC73C042CFC16DF4615A79
Authority key identifier: 00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/c0e43bab-dc4b-39a4-845b-f8eca499a140.roa
Signing time:             Tue 22 Oct 2019 16:51:23 +0000
ROA not before:           Wed 16 Oct 2019 04:00:00 +0000
ROA not after:            Tue 16 Oct 2029 04:00:00 +0000
asID:                     63949
IP address blocks:        173.255.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:f4:61:5a:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
        Validity
            Not Before: Oct 16 04:00:00 2019 GMT
            Not After : Oct 16 04:00:00 2029 GMT
        Subject: CN=0234b3b9-f736-487a-a7d6-7d382b29023d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3e:51:76:61:5d:08:71:15:ab:48:7e:88:24:
                    e6:7f:02:de:2a:89:14:6c:ed:dc:fa:bb:25:9f:99:
                    02:63:20:e7:b0:ab:8c:b1:be:d8:5c:0a:ca:e7:40:
                    12:c4:a7:a3:88:28:67:a0:bd:ad:a6:36:16:20:55:
                    ea:a6:0b:9d:c4:f1:7b:fe:47:1c:06:68:7c:9a:5f:
                    ed:0d:f1:47:81:b9:69:03:11:fb:2d:c5:4f:54:2b:
                    40:8e:fe:22:a0:ef:48:ab:bd:33:2d:be:3a:ed:a1:
                    21:7f:6b:2e:ba:e4:15:ab:17:33:e0:8c:bf:2d:94:
                    55:23:b8:29:02:fe:5f:9a:0a:d4:97:eb:43:ad:7f:
                    97:91:45:bf:5f:0e:ac:1f:df:a3:2c:e4:fd:eb:ac:
                    7b:8c:58:e2:58:0f:08:50:f6:a2:bf:c6:f1:97:a3:
                    e5:46:55:03:99:cb:67:d1:5d:ce:13:f4:7c:e5:f2:
                    2c:e0:f1:20:c8:0b:5f:8a:37:fe:80:97:4d:d4:3e:
                    40:bf:94:0e:b0:df:33:4a:b6:a9:7a:ed:85:87:94:
                    a8:57:7f:84:67:ec:56:51:47:44:95:94:67:a3:ac:
                    5b:52:c5:18:76:28:2c:61:c1:1a:18:20:7a:84:bf:
                    2f:98:62:e6:a5:8c:1f:b9:74:0f:5c:db:bf:d2:50:
                    92:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1A:CC:54:D2:9E:F8:D4:BC:54:26:10:E9:1A:AC:1F:99:10:33:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/c0e43bab-dc4b-39a4-845b-f8eca499a140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.crl

            X509v3 Authority Key Identifier:
                keyid:00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.255.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:13:ff:20:11:e2:64:bc:10:8b:80:0d:3a:4c:e6:0e:bb:42:
         ee:80:05:9d:d0:41:31:4e:de:2f:39:2e:87:17:60:68:40:05:
         6f:33:25:89:d9:d6:c7:93:a9:6b:39:78:5c:08:13:b1:85:dd:
         98:2b:db:76:66:df:4f:7a:ce:d4:5b:e4:25:ab:e3:4b:ed:e4:
         31:5c:61:32:5b:c4:fa:42:94:f7:23:0c:d8:e7:da:a0:99:5f:
         b0:a1:09:bc:dc:0c:f4:e1:53:05:4d:b1:b3:42:c4:0d:e8:e7:
         a0:35:46:e8:37:9f:55:51:2e:a8:9d:0e:47:58:50:45:a3:db:
         d6:c8:09:21:5b:4e:b7:e8:72:ed:9a:d2:42:73:09:c3:11:eb:
         6e:d2:aa:bc:51:d2:8e:20:6d:4c:d3:1c:c7:ef:f0:e1:3e:c4:
         21:98:63:5c:69:9d:7b:ce:c2:49:25:85:ad:b2:79:51:ee:44:
         ad:a3:d8:3f:3b:a0:3f:39:8c:5a:68:cc:af:43:b4:72:e4:16:
         6f:76:b7:dc:cf:f8:fe:bd:d1:6f:41:93:e1:2a:e5:74:f3:23:
         ea:be:22:34:de:d4:79:5f:72:c1:85:0a:de:89:2d:5a:aa:ab:
         70:a2:34:29:89:6c:b4:93:3d:2e:07:ff:ea:d6:88:ab:46:2a:
         ff:0d:b7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:15 2024 by rpki-client on console-fra.rpki-client.org