Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c6f66c2-aa5b-43a6-9b56-50db4b56285a/a2485c89-a36d-341e-acba-1b6c4153e0ca.roa
File:                     a2485c89-a36d-341e-acba-1b6c4153e0ca.roa (raw, json)
Hash identifier:          nVN8YAeedDeCTzWmtcysCPJMWnOLgBPwMZaS6+1L8s0=
Subject key identifier:   E1:F2:CE:D4:EE:4A:53:20:9C:21:4C:C4:88:28:B7:75:08:1F:CC:29
Certificate issuer:       /CN=3c6f66c2-aa5b-43a6-9b56-50db4b56285a
Certificate serial:       010D0C9F4328576D51CC73C042CFC16949E7C4DE
Authority key identifier: 4F:96:19:83:92:BE:0F:5E:A4:26:D3:1D:47:5B:F3:1C:97:5D:AF:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c6f66c2-aa5b-43a6-9b56-50db4b56285a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c6f66c2-aa5b-43a6-9b56-50db4b56285a/a2485c89-a36d-341e-acba-1b6c4153e0ca.roa
Signing time:             Mon 04 Mar 2019 18:11:59 +0000
ROA not before:           Mon 04 Mar 2019 05:00:00 +0000
ROA not after:            Sun 04 Mar 2029 05:00:00 +0000
asID:                     393299
IP address blocks:        104.192.200.0/22 maxlen: 24
                          148.59.162.0/23 maxlen: 24
                          2604:2540::/32 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:69:49:e7:c4:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c6f66c2-aa5b-43a6-9b56-50db4b56285a
        Validity
            Not Before: Mar  4 05:00:00 2019 GMT
            Not After : Mar  4 05:00:00 2029 GMT
        Subject: CN=046a29df-a343-4305-afb0-c2e16a5970f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f1:a5:cf:96:85:02:70:a0:9a:dc:61:6c:04:
                    44:6a:d9:dd:77:0f:e4:5f:6f:13:6a:ad:d5:33:5b:
                    28:92:da:14:5a:f3:5c:d8:45:4b:11:b6:23:ac:58:
                    77:b9:a0:57:5a:a0:5d:a7:31:41:2d:c0:6a:00:14:
                    6a:f4:59:f8:de:f7:20:01:77:5d:f9:02:da:4b:fe:
                    b3:03:73:27:4e:a6:8b:e4:99:3e:5a:e8:28:3e:c5:
                    51:16:26:f3:c9:0e:70:cb:47:32:4e:6e:fe:aa:ae:
                    38:ae:1a:0e:c3:1e:1e:56:20:84:56:35:67:21:dd:
                    a9:89:3e:c2:2b:1c:ab:a3:8d:30:ef:b2:55:da:4e:
                    4b:b4:5c:50:46:1f:73:d6:29:cb:9d:8b:94:f2:d2:
                    aa:01:18:30:31:eb:d9:88:a4:58:4d:f8:61:e9:49:
                    36:81:d9:49:23:dc:32:d8:cf:f7:7d:68:76:d5:c3:
                    c2:20:51:f7:4f:5c:4d:45:6f:7e:1f:83:25:de:17:
                    6a:a6:c7:18:42:a9:8e:a9:6a:a3:6d:d6:9a:d9:2c:
                    f7:c1:e5:aa:d1:6c:e5:bb:38:51:61:72:82:7e:55:
                    90:d8:1a:aa:47:f0:45:bc:7d:c7:de:00:cf:50:69:
                    35:1b:a2:e9:5b:76:c0:0c:80:37:37:c0:d1:ec:19:
                    83:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F2:CE:D4:EE:4A:53:20:9C:21:4C:C4:88:28:B7:75:08:1F:CC:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c6f66c2-aa5b-43a6-9b56-50db4b56285a/a2485c89-a36d-341e-acba-1b6c4153e0ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c6f66c2-aa5b-43a6-9b56-50db4b56285a/3c6f66c2-aa5b-43a6-9b56-50db4b56285a.crl

            X509v3 Authority Key Identifier:
                keyid:4F:96:19:83:92:BE:0F:5E:A4:26:D3:1D:47:5B:F3:1C:97:5D:AF:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c6f66c2-aa5b-43a6-9b56-50db4b56285a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.200.0/22
                  148.59.162.0/23
                IPv6:
                  2604:2540::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:54:f7:56:12:15:c7:99:1d:c7:6d:26:7e:95:41:b9:3b:d5:
         42:67:8c:21:3e:d5:42:2f:15:88:84:cb:da:34:2c:85:f1:b8:
         b9:d1:b8:8f:59:cc:dd:db:f6:dd:10:70:79:39:f9:e5:9a:9b:
         c4:09:8d:c9:57:90:94:c4:19:86:7a:b9:3f:ae:e4:bf:99:2f:
         f9:00:58:0f:01:1a:92:71:1e:ca:6f:b4:b0:5e:fa:70:a6:16:
         3c:d3:d9:00:38:ae:97:d5:32:36:b3:52:80:4c:a4:a6:73:b2:
         c1:72:c9:59:53:37:03:e3:01:10:65:1a:0a:81:5c:47:19:a7:
         d0:9f:e4:3d:1c:f4:26:47:48:ba:c0:74:04:3b:27:50:25:2b:
         89:29:cc:a5:d5:62:2d:29:82:50:c6:d4:87:c0:66:38:43:7b:
         b3:a1:d2:77:c9:2d:17:d3:91:21:8f:4d:1c:49:f4:42:56:b3:
         33:b1:49:42:aa:68:82:cf:18:75:d7:dd:14:0a:e0:93:e2:cb:
         f6:e4:30:36:62:28:a6:b5:b5:b2:75:3d:b3:89:f4:40:38:44:
         1d:ef:aa:86:7c:2a:99:b0:14:fc:f3:5d:24:15:01:10:60:09:
         04:36:7d:bf:65:d1:7f:9a:79:9e:95:b0:c5:22:c3:ad:61:47:
         b3:96:e5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:15 2024 by rpki-client on console-fra.rpki-client.org