Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4c96ceab-4c5d-4801-82cd-913921cb3c49/e5476bb5-f773-352c-b6df-529c82984886.roa
File:                     e5476bb5-f773-352c-b6df-529c82984886.roa (raw, json)
Hash identifier:          2qhlRPsNBwC7kPiVo0Ab5EWT8b6GDp0+cuEC8bzxnmU=
Subject key identifier:   8C:A1:E0:F1:1B:43:A5:2B:08:A7:F3:2F:C2:F1:4C:DD:46:DC:52:D5
Certificate issuer:       /CN=4c96ceab-4c5d-4801-82cd-913921cb3c49
Certificate serial:       010D0C9F43285837C360691CA4311B8186D86F80
Authority key identifier: B9:C2:15:9E:1A:D8:FC:BF:F7:89:E8:75:4E:1A:23:34:86:4E:AB:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4c96ceab-4c5d-4801-82cd-913921cb3c49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4c96ceab-4c5d-4801-82cd-913921cb3c49/e5476bb5-f773-352c-b6df-529c82984886.roa
Signing time:             Fri 28 Feb 2020 05:00:00 +0000
ROA not before:           Fri 28 Feb 2020 05:00:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     40139
IP address blocks:        209.12.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:c3:60:69:1c:a4:31:1b:81:86:d8:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c96ceab-4c5d-4801-82cd-913921cb3c49
        Validity
            Not Before: Feb 28 05:00:00 2020 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=bdf65b89-f789-4673-831f-022df5e84e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:74:de:cc:58:9b:80:d4:67:38:1c:f3:31:53:
                    69:7c:79:76:9b:ff:b5:20:7f:6c:e6:f9:51:b6:b2:
                    b9:02:4c:11:df:ad:48:0e:15:22:2f:d0:17:95:54:
                    33:b0:f4:7d:8c:f2:2a:b4:e8:c3:5a:2a:72:06:d2:
                    f7:64:54:3a:5d:90:18:94:53:bd:fe:71:8a:7f:30:
                    1b:f1:bd:ce:69:49:c6:cc:7b:ef:21:5c:04:8d:e0:
                    75:4a:94:bc:46:12:77:89:2f:ed:61:8e:a0:94:dc:
                    85:15:6f:ae:80:2c:45:63:49:dc:06:e5:67:81:2f:
                    dc:7f:ea:31:8d:70:72:2d:5b:57:99:c9:9b:17:b8:
                    cb:b2:07:eb:cb:59:d9:25:d9:f4:93:cc:ee:e9:7e:
                    ec:ef:7c:03:07:a3:c5:8f:42:3a:a1:7f:a1:c9:2c:
                    be:34:d9:6a:f7:06:70:c4:be:cd:44:0a:62:d0:1b:
                    5a:c0:a7:a2:72:9a:b5:7f:d7:b3:2f:4d:06:c2:60:
                    4d:73:23:3e:dc:bc:81:c2:fb:e4:b8:18:dd:3f:37:
                    97:58:b5:ec:3d:5f:82:86:99:b6:de:28:72:0a:36:
                    3c:20:3b:27:47:70:f6:bf:0e:3d:1c:74:a1:2a:1e:
                    da:e7:4d:ce:ce:fc:08:6b:35:27:98:10:e6:84:ea:
                    a0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A1:E0:F1:1B:43:A5:2B:08:A7:F3:2F:C2:F1:4C:DD:46:DC:52:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4c96ceab-4c5d-4801-82cd-913921cb3c49/e5476bb5-f773-352c-b6df-529c82984886.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4c96ceab-4c5d-4801-82cd-913921cb3c49/4c96ceab-4c5d-4801-82cd-913921cb3c49.crl

            X509v3 Authority Key Identifier:
                keyid:B9:C2:15:9E:1A:D8:FC:BF:F7:89:E8:75:4E:1A:23:34:86:4E:AB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4c96ceab-4c5d-4801-82cd-913921cb3c49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.12.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:a9:40:82:c2:e0:a0:42:dd:ad:79:a5:94:40:64:db:d7:df:
         4d:0c:d5:98:6d:31:a6:e1:47:cf:a7:a4:64:74:48:f5:98:7d:
         ac:a7:2b:07:ba:a1:8d:7c:7c:ab:b0:6f:d3:f3:42:53:1e:d9:
         0c:e4:e6:fb:a7:00:6b:d4:97:09:74:54:30:95:d5:df:66:aa:
         8b:36:24:19:ca:7d:b7:46:bc:ea:cb:c4:e9:77:20:cf:69:6a:
         71:00:b3:eb:42:60:8b:be:dc:ee:e5:2d:c7:37:97:c3:78:70:
         d2:b3:6b:65:c2:3a:06:40:77:24:46:31:6c:22:d4:c3:c3:93:
         6d:08:c6:d6:60:7f:8c:30:7d:2f:77:ff:f9:ac:30:1d:0a:d4:
         a1:f9:81:4f:75:e6:8d:63:00:6d:ad:50:b2:5f:e4:bc:0b:4e:
         ae:54:a6:a9:f2:f9:54:9b:17:87:bf:6c:60:10:47:75:d2:63:
         fe:b3:44:8b:54:29:fc:19:e7:6d:b5:58:c8:b6:9c:97:6c:1d:
         55:80:7d:9a:12:77:3a:d4:b3:bf:20:55:06:bf:37:38:35:c4:
         a5:d3:eb:be:1d:3a:5b:09:8f:f9:0c:ee:79:e9:92:06:9b:f6:
         52:0a:ac:a2:5d:e9:e0:86:b3:b6:8e:56:3f:fd:47:d3:23:44:
         08:46:b4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:16 2024 by rpki-client on console-fra.rpki-client.org