Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61c2a35c-ce3c-44d8-a070-b55253715f64/de50551f-e9f9-30e0-bb2a-c834cbd81767.roa
File:                     de50551f-e9f9-30e0-bb2a-c834cbd81767.roa (raw, json)
Hash identifier:          erxcKQ77CegsUQjGbyEvEEgIaUaplmuq2dn2O2OecAk=
Subject key identifier:   F0:04:E8:65:FF:BA:FF:77:7C:0D:14:A4:73:9F:B9:B3:1F:C7:B9:B4
Certificate issuer:       /CN=61c2a35c-ce3c-44d8-a070-b55253715f64
Certificate serial:       010D0C9F4328576D51CC73C042CFC1711D48E344
Authority key identifier: 47:7B:9B:91:93:4E:F2:8B:81:9E:1D:A0:EB:2F:23:8A:12:20:9D:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61c2a35c-ce3c-44d8-a070-b55253715f64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61c2a35c-ce3c-44d8-a070-b55253715f64/de50551f-e9f9-30e0-bb2a-c834cbd81767.roa
Signing time:             Fri 27 Mar 2020 18:37:28 +0000
ROA not before:           Thu 07 Nov 2019 05:00:00 +0000
ROA not after:            Thu 30 Jun 2022 04:00:00 +0000
asID:                     30456
IP address blocks:        23.156.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:1d:48:e3:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61c2a35c-ce3c-44d8-a070-b55253715f64
        Validity
            Not Before: Nov  7 05:00:00 2019 GMT
            Not After : Jun 30 04:00:00 2022 GMT
        Subject: CN=18410d16-8c6a-4670-8cc6-6eac86617dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:e0:ec:ed:ad:74:d5:dd:3a:84:f1:bf:33:
                    32:b6:f7:fe:04:34:33:43:2a:84:e1:3f:28:b7:0f:
                    a1:c1:3f:97:c8:b8:1d:4a:ed:8e:48:63:22:80:6b:
                    51:8d:a2:73:ee:bd:20:15:63:bb:ca:8a:61:89:c9:
                    b7:64:73:3d:5a:09:7c:10:71:b4:b9:4f:b7:88:1c:
                    1a:3d:7a:ab:2d:92:ad:28:d5:bf:ec:ef:d9:e9:2c:
                    de:de:8d:df:dc:d1:0c:55:76:15:16:7d:2f:07:88:
                    22:a5:3f:a0:6a:53:6e:49:7b:9f:75:7f:d5:04:e7:
                    71:ec:be:b0:62:d0:0a:52:8c:89:34:73:2a:ce:a9:
                    b2:64:8e:2e:4a:bf:e4:db:63:26:dd:af:73:54:75:
                    90:67:31:5e:3f:e3:b4:e9:88:1d:96:4f:43:04:6c:
                    99:5e:44:20:ac:18:fe:72:d0:27:e3:45:71:5a:b8:
                    09:2a:c0:ff:38:4e:bd:55:96:ab:eb:f4:21:c1:50:
                    c8:88:fa:4e:84:c1:d2:44:f0:8d:33:e7:16:9f:ef:
                    4a:95:73:88:f7:5d:df:19:0b:9e:99:71:b9:9e:87:
                    08:35:95:df:cb:ef:13:6b:98:4b:4f:eb:a8:fc:75:
                    2f:cc:61:f9:22:2d:4c:9a:8e:af:75:c1:ac:dc:bb:
                    70:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:04:E8:65:FF:BA:FF:77:7C:0D:14:A4:73:9F:B9:B3:1F:C7:B9:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61c2a35c-ce3c-44d8-a070-b55253715f64/de50551f-e9f9-30e0-bb2a-c834cbd81767.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61c2a35c-ce3c-44d8-a070-b55253715f64/61c2a35c-ce3c-44d8-a070-b55253715f64.crl

            X509v3 Authority Key Identifier:
                keyid:47:7B:9B:91:93:4E:F2:8B:81:9E:1D:A0:EB:2F:23:8A:12:20:9D:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61c2a35c-ce3c-44d8-a070-b55253715f64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:bc:14:ea:60:8c:b0:a9:63:1a:a5:bf:ba:b7:4f:8f:8a:b2:
         c6:fe:fb:45:2b:8d:57:f6:9f:59:fe:f1:b1:cd:1d:0c:f8:14:
         93:cb:d9:2b:26:c0:09:2c:28:a5:d8:bb:07:27:fa:13:db:01:
         25:61:e6:ec:6d:9a:ed:0d:e1:f9:6a:ce:cd:e7:21:15:59:d7:
         a0:2a:e2:a6:db:75:a2:be:61:a7:2c:b2:82:fa:ac:22:bb:30:
         a8:5c:d2:6f:35:f7:ca:83:e7:3c:0d:9d:df:f5:d4:8d:55:86:
         07:1e:fd:a7:c4:f0:43:c3:a2:73:35:5a:32:a1:5a:9c:c6:ad:
         b2:39:fc:e0:4c:70:67:8b:51:41:43:44:86:bf:1c:c2:6f:55:
         7f:67:db:11:a3:fb:b2:1e:f2:dd:ab:9c:5e:75:fb:4b:cc:2d:
         75:64:d4:a5:5c:a2:08:3a:4a:bc:9c:64:4d:a4:8c:f3:cd:a1:
         0a:b8:52:60:78:02:e5:07:9d:a8:f8:56:33:7f:db:2c:49:da:
         6c:dd:7a:61:07:86:3c:b5:fc:01:a4:bf:0d:2a:fd:81:0c:e9:
         b7:e0:4b:8f:7a:ec:06:49:82:46:bc:32:6a:db:b2:f5:b7:b6:
         bd:b5:1a:ac:eb:a8:67:01:fc:c3:b8:04:8b:ef:17:ce:22:08:
         a2:0f:b3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:40 2024 by rpki-client on console-fra.rpki-client.org