Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61c2a35c-ce3c-44d8-a070-b55253715f64/c9a9cd28-2130-3065-abce-89eb800bc7ca.roa
File:                     c9a9cd28-2130-3065-abce-89eb800bc7ca.roa (raw, json)
Hash identifier:          ec3GrOKtjxDMlz1x0bELOFWEJC5E2mN5kON7MHLJ4U8=
Subject key identifier:   4F:86:95:1C:8D:94:1B:86:03:E2:AF:C2:C5:BF:2E:D8:45:0A:7B:77
Certificate issuer:       /CN=61c2a35c-ce3c-44d8-a070-b55253715f64
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E6FE2C0E0
Authority key identifier: 47:7B:9B:91:93:4E:F2:8B:81:9E:1D:A0:EB:2F:23:8A:12:20:9D:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61c2a35c-ce3c-44d8-a070-b55253715f64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61c2a35c-ce3c-44d8-a070-b55253715f64/c9a9cd28-2130-3065-abce-89eb800bc7ca.roa
Signing time:             Fri 15 Nov 2019 16:26:01 +0000
ROA not before:           Thu 07 Nov 2019 05:00:00 +0000
ROA not after:            Wed 07 Nov 2029 05:00:00 +0000
asID:                     30456
IP address blocks:        23.145.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:6f:e2:c0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61c2a35c-ce3c-44d8-a070-b55253715f64
        Validity
            Not Before: Nov  7 05:00:00 2019 GMT
            Not After : Nov  7 05:00:00 2029 GMT
        Subject: CN=f7ae1b04-d66d-47f5-aabf-86bb42d64c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:38:9d:28:ae:c2:d4:44:74:cf:35:0b:9c:90:
                    4f:f5:54:19:57:62:27:19:1e:43:ab:19:48:97:c3:
                    fe:b6:99:75:b9:ab:c8:cd:a1:af:b5:73:fa:df:84:
                    1f:28:32:00:63:46:0f:19:e7:ed:72:45:a2:32:2d:
                    ad:7c:3b:5d:35:2a:2c:16:a5:c8:53:6d:48:36:86:
                    c7:ac:7e:ac:8d:b0:c1:4d:5e:30:6e:7c:c2:84:4e:
                    0b:41:89:8e:f9:0f:c4:de:fc:b7:16:01:69:7c:01:
                    aa:49:e3:66:f3:a2:08:a0:b7:eb:ae:18:4d:1b:dc:
                    f6:fe:35:21:a1:36:5c:8e:1f:c9:50:b2:ef:0b:ab:
                    e2:6b:9f:cd:36:99:93:07:74:5d:c1:f5:77:ad:24:
                    66:2f:d5:e9:dd:44:7b:b0:63:54:0d:1e:56:06:80:
                    b0:b3:02:cd:fc:7e:24:e1:17:30:4a:cc:dd:4c:73:
                    a5:a3:27:b3:89:c3:5c:af:4d:77:b3:eb:19:23:36:
                    c2:2c:99:6c:b3:bb:9f:88:5a:c3:f5:05:99:a1:a1:
                    e6:38:5c:ef:25:2c:2f:01:97:67:a6:3c:15:d2:db:
                    c3:04:b6:3a:5b:ab:60:3f:76:9e:ff:5f:3a:e4:c0:
                    5f:f0:60:9a:00:28:66:00:49:7e:a8:4c:ef:b7:6e:
                    27:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:86:95:1C:8D:94:1B:86:03:E2:AF:C2:C5:BF:2E:D8:45:0A:7B:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61c2a35c-ce3c-44d8-a070-b55253715f64/c9a9cd28-2130-3065-abce-89eb800bc7ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61c2a35c-ce3c-44d8-a070-b55253715f64/61c2a35c-ce3c-44d8-a070-b55253715f64.crl

            X509v3 Authority Key Identifier:
                keyid:47:7B:9B:91:93:4E:F2:8B:81:9E:1D:A0:EB:2F:23:8A:12:20:9D:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61c2a35c-ce3c-44d8-a070-b55253715f64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c8:d1:32:54:6c:71:6b:7a:0e:6a:60:6e:7f:6a:98:f9:6a:
         05:f1:5c:5f:aa:4f:83:d0:7f:18:75:d5:88:56:e8:25:43:42:
         fa:c5:0f:c6:05:c1:64:d6:a4:2b:56:13:85:22:3f:55:ed:64:
         8c:71:2d:cc:35:fa:2a:0e:2d:bc:82:35:61:2f:84:a4:d5:b5:
         94:b8:8a:1d:7a:a0:de:cf:b6:63:c0:cb:41:97:20:f8:60:e6:
         57:50:86:fe:4e:a0:d4:dd:cd:cd:a3:57:6e:ca:25:74:21:d8:
         5a:7f:a1:16:ce:85:0d:bb:ee:6a:60:b0:38:1d:45:3f:6a:c7:
         9f:50:99:f1:0b:74:8f:6a:4a:74:3e:34:98:6d:ce:1c:76:bc:
         4b:a0:9a:56:f9:72:bd:1c:85:fd:e5:85:28:ff:ce:75:90:12:
         35:34:77:d2:07:92:34:b6:aa:1f:87:a4:51:b2:06:b0:66:4e:
         85:eb:11:b2:95:a7:b5:08:d8:b8:b8:71:55:dd:ff:aa:66:e0:
         b3:11:01:f6:dd:00:a6:c7:67:e3:ca:cf:00:62:4f:53:25:ad:
         45:0e:86:ee:ba:47:1b:8b:57:ba:0a:87:f6:7a:cc:87:91:28:
         e5:c5:78:b4:55:75:f7:f9:9b:f2:b8:62:0b:7b:d4:51:0c:31:
         39:06:1c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:25 2024 by rpki-client on console-ams.rpki-client.org