Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62f3be1f-a9e6-4792-89c6-d1a3c4b02eb4/8d4ceff5-b175-382e-9cfe-0612af5bc3f0.roa
File:                     8d4ceff5-b175-382e-9cfe-0612af5bc3f0.roa (raw, json)
Hash identifier:          uQLEif+nHxfyFBQHGHCwEJeAqx/HIKdygye6SA8zEa4=
Subject key identifier:   20:FD:F7:8F:A8:25:27:08:A9:60:CA:51:95:6B:C3:BE:1B:36:15:CD
Certificate issuer:       /CN=62f3be1f-a9e6-4792-89c6-d1a3c4b02eb4
Certificate serial:       010D0C9F4328576D51CC73C042CFC1726F687105
Authority key identifier: B0:B0:40:E8:5B:91:E9:29:73:0C:6F:01:4A:50:46:42:47:2F:C4:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62f3be1f-a9e6-4792-89c6-d1a3c4b02eb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62f3be1f-a9e6-4792-89c6-d1a3c4b02eb4/8d4ceff5-b175-382e-9cfe-0612af5bc3f0.roa
Signing time:             Mon 01 Jun 2020 10:23:35 +0000
ROA not before:           Mon 27 Apr 2020 04:00:00 +0000
ROA not after:            Thu 04 Sep 2025 04:00:00 +0000
asID:                     395434
IP address blocks:        172.86.230.0/24 maxlen: 24
                          172.86.231.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:6f:68:71:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f3be1f-a9e6-4792-89c6-d1a3c4b02eb4
        Validity
            Not Before: Apr 27 04:00:00 2020 GMT
            Not After : Sep  4 04:00:00 2025 GMT
        Subject: CN=c21da3ef-d1ae-44bc-9244-31debe0c2018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7c:86:3f:b2:0d:2b:88:b8:04:40:4f:43:7a:
                    3c:cd:46:62:72:fa:9b:82:d2:f2:16:0f:f3:8c:64:
                    e0:52:8a:c9:5e:ac:2a:eb:60:b8:89:6d:72:02:c1:
                    5f:80:7e:1a:2d:aa:8d:f6:8d:61:7d:0d:b0:cf:f1:
                    db:7b:9d:3d:41:70:32:1b:76:44:69:88:7f:ab:71:
                    e8:fc:5c:ac:41:c5:43:53:5e:5b:34:2b:dd:61:1b:
                    c4:2f:27:2c:b0:4c:28:be:c9:b0:9e:5f:4f:81:64:
                    83:bc:c3:cf:43:02:42:da:17:f2:9a:0d:fd:7c:07:
                    30:ab:77:a5:5e:8c:1e:5a:ac:e2:e8:6e:93:d0:b7:
                    36:b3:36:22:43:2b:6a:0d:ab:03:48:22:a4:78:fe:
                    a2:94:f8:e9:e8:fb:fd:7d:fe:0e:48:dc:83:c8:9a:
                    a0:be:d0:b4:35:c5:62:4a:13:a6:24:36:42:cd:7d:
                    3b:df:fe:d1:fd:0e:96:66:85:94:55:c4:9a:0a:b5:
                    07:a4:d3:5d:1d:b5:e5:1d:99:07:16:2b:e8:c3:30:
                    9a:de:d5:ed:94:08:48:93:ca:83:67:28:83:c9:28:
                    99:a7:a7:56:05:1a:93:c3:d3:3c:b9:4b:52:18:00:
                    6e:99:af:22:8f:58:54:b4:72:31:0d:50:05:f5:a5:
                    c5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FD:F7:8F:A8:25:27:08:A9:60:CA:51:95:6B:C3:BE:1B:36:15:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62f3be1f-a9e6-4792-89c6-d1a3c4b02eb4/8d4ceff5-b175-382e-9cfe-0612af5bc3f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62f3be1f-a9e6-4792-89c6-d1a3c4b02eb4/62f3be1f-a9e6-4792-89c6-d1a3c4b02eb4.crl

            X509v3 Authority Key Identifier:
                keyid:B0:B0:40:E8:5B:91:E9:29:73:0C:6F:01:4A:50:46:42:47:2F:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62f3be1f-a9e6-4792-89c6-d1a3c4b02eb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.86.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:1b:e1:e2:73:88:1c:b5:8c:a8:3b:b3:21:95:11:7f:3b:91:
         e2:12:dc:b1:1c:45:ba:30:4d:80:77:ca:64:b5:da:72:b0:87:
         fb:11:0b:b7:e8:db:6c:fa:b2:44:55:1f:b1:a6:97:70:37:66:
         6f:22:1a:5f:5f:17:a5:84:d8:c5:2e:93:a0:0b:39:1b:59:57:
         0d:9d:6b:90:b8:6d:c4:84:39:a5:a5:f8:51:aa:52:1a:28:50:
         29:35:66:68:62:46:fe:1f:49:5a:4c:33:63:2c:48:7b:4a:d3:
         88:48:2f:f2:52:4c:71:4b:2a:51:99:dd:4c:93:e4:47:fe:9d:
         f6:c5:79:3b:5e:ab:92:ac:e9:dd:b3:c1:8f:f7:e9:01:27:1a:
         77:3c:ec:9e:9e:68:33:63:c6:8b:32:82:5f:79:d4:98:91:cc:
         41:63:83:b1:60:f0:00:b8:53:59:5d:b5:72:a5:08:b8:2f:cb:
         57:2f:1b:b1:d1:83:7d:84:e0:37:e3:c2:40:51:e2:1e:c6:3b:
         d6:3f:5f:df:84:79:c1:dc:e0:e4:a2:af:29:cf:8d:3d:8f:6e:
         d9:94:25:93:07:29:6c:8a:e3:a0:45:b0:72:c4:d8:42:a9:94:
         02:07:19:ed:d0:dc:d5:37:35:17:33:cf:9f:b3:06:9d:8f:f2:
         10:6f:d7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:25 2024 by rpki-client on console-ams.rpki-client.org