Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/d9d1b551-c936-3b88-833c-c3597948ad00.roa
File:                     d9d1b551-c936-3b88-833c-c3597948ad00.roa (raw, json)
Hash identifier:          ycnVDg1aQk6lTuMDq6UNjLkZvvHeRSu+SXp5Gi7V4z8=
Subject key identifier:   F1:D2:24:4F:B7:D9:73:81:2A:51:C5:95:16:7A:6B:F4:BC:E8:28:9E
Certificate issuer:       /CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
Certificate serial:       010D0C9F4328583FCC6B657D4E9EF1A0C27B1880
Authority key identifier: 00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/d9d1b551-c936-3b88-833c-c3597948ad00.roa
Signing time:             Wed 16 Oct 2019 21:03:01 +0000
ROA not before:           Wed 16 Oct 2019 21:03:01 +0000
ROA not after:            Thu 06 Feb 2025 05:00:00 +0000
asID:                     63949
IP address blocks:        170.187.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cc:6b:65:7d:4e:9e:f1:a0:c2:7b:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8
        Validity
            Not Before: Oct 16 21:03:01 2019 GMT
            Not After : Feb  6 05:00:00 2025 GMT
        Subject: CN=12dc3a98-824f-41d5-8f75-3ba2a8bc2c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8e:02:2c:87:14:e4:a4:e2:22:0a:67:14:f2:
                    0f:c2:78:63:8a:00:3a:e7:30:dc:ae:98:07:74:33:
                    1e:3e:d2:db:51:8d:d7:16:55:bf:59:f0:14:23:23:
                    79:ae:a0:4f:d3:77:5d:49:90:94:2b:fb:3e:ce:7f:
                    0b:eb:c3:44:53:5b:eb:0f:ac:9e:20:5c:48:51:92:
                    cf:66:7c:36:3c:4d:6f:a7:d2:c5:5c:09:09:19:71:
                    0b:fe:93:c7:b9:c7:8e:b9:a0:c8:a3:e7:de:b2:5a:
                    cb:4c:68:78:ed:bf:69:b0:63:ec:f7:42:36:29:92:
                    7e:1c:a0:72:ce:01:79:29:8a:78:a4:1b:63:a6:5c:
                    9a:db:e3:4f:6c:9a:f9:1d:ed:82:5f:b3:47:4d:31:
                    d3:8c:44:08:1c:b3:e1:cc:f9:02:fa:93:65:7d:73:
                    3c:ab:11:0c:04:e3:0b:26:f5:c0:69:88:d1:b7:eb:
                    d7:aa:7a:4a:5f:6e:bd:1c:9d:04:b7:ca:8a:76:d9:
                    1d:df:1e:db:4f:33:3d:03:31:f7:0b:61:9c:3e:31:
                    b1:01:a1:eb:ae:79:ee:e9:08:52:ed:de:d2:4b:17:
                    82:90:49:8a:ca:0f:de:aa:08:41:0d:9c:a2:a9:b5:
                    2c:7f:f9:7b:c4:66:4e:5c:93:fa:b9:fd:60:86:4b:
                    10:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D2:24:4F:B7:D9:73:81:2A:51:C5:95:16:7A:6B:F4:BC:E8:28:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/d9d1b551-c936-3b88-833c-c3597948ad00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.crl

            X509v3 Authority Key Identifier:
                keyid:00:AF:ED:25:2B:6E:D9:E4:19:CF:12:13:A9:29:ED:DD:E2:6E:7A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1ecebc9d-aaaf-4b6d-af4f-fa5c074925e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.187.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:66:52:7c:61:48:ce:b5:51:b3:34:fe:65:d8:bf:9b:a1:28:
         2c:a7:22:55:1c:82:06:f5:c9:c4:cc:66:1f:20:c1:75:da:20:
         4f:f2:63:55:c2:a4:a4:42:94:94:4a:a4:01:ec:f9:79:bb:00:
         f1:35:05:b7:4f:e9:6f:96:e4:cf:cd:ea:04:52:ba:10:4c:36:
         8a:9e:ac:22:5e:c5:b5:99:c4:c4:e8:6c:c6:c2:4b:28:69:b4:
         aa:47:0e:99:ab:a4:39:50:e3:37:80:28:1b:69:1c:b2:fc:55:
         4f:1e:9d:70:2c:2f:8f:8f:12:a6:99:be:bb:da:49:69:00:b5:
         9b:a6:00:91:81:d3:bf:71:4b:eb:28:e4:8b:40:a5:84:23:41:
         ef:6f:2c:c3:1d:4c:cf:a1:86:ea:58:3d:48:c9:50:b8:9e:4c:
         2c:9c:90:09:f8:76:d5:30:20:69:23:ca:b9:9b:b7:7c:55:f7:
         ba:0d:f9:37:dd:b0:08:c2:24:68:19:43:69:c7:f7:d0:e1:a4:
         af:f8:82:f2:9b:f5:b6:57:d0:d7:f2:f2:cb:15:b5:06:43:cb:
         d4:89:9a:79:11:6c:77:50:cf:8f:d7:1e:d4:6b:8a:08:47:6e:
         2f:e0:98:35:59:b1:38:2d:93:01:6b:0c:1c:b3:74:ff:56:75:
         39:47:fe:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:15 2024 by rpki-client on console-fra.rpki-client.org