Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70d4429d-87bd-4cd8-8a69-e77cf29b9493/37e1da26-2149-3a7d-afa8-6f118e08e61c.roa
File:                     37e1da26-2149-3a7d-afa8-6f118e08e61c.roa (raw, json)
Hash identifier:          EJzUFcy8JzV9r9Xjw7vjF/ZXBpcou7kUORrJvt6dWPI=
Subject key identifier:   ED:63:5C:7E:B4:D8:87:6A:65:EA:9C:33:7A:42:A1:96:FF:B6:91:10
Certificate issuer:       /CN=70d4429d-87bd-4cd8-8a69-e77cf29b9493
Certificate serial:       010D0C9F4328576D51CC73C042CFC171CB7F602C
Authority key identifier: E3:3A:FA:19:C2:5B:C1:C3:3B:BB:09:80:81:10:1B:09:E7:80:B3:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70d4429d-87bd-4cd8-8a69-e77cf29b9493.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70d4429d-87bd-4cd8-8a69-e77cf29b9493/37e1da26-2149-3a7d-afa8-6f118e08e61c.roa
Signing time:             Thu 30 Apr 2020 14:30:54 +0000
ROA not before:           Tue 09 Jul 2019 04:00:00 +0000
ROA not after:            Wed 03 Aug 2022 04:00:00 +0000
asID:                     35280
IP address blocks:        23.158.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:cb:7f:60:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70d4429d-87bd-4cd8-8a69-e77cf29b9493
        Validity
            Not Before: Jul  9 04:00:00 2019 GMT
            Not After : Aug  3 04:00:00 2022 GMT
        Subject: CN=8dbdaab3-0712-4457-909b-9934b64ad6c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e1:12:9c:19:86:f9:21:bd:8e:9c:b5:bb:67:
                    bc:8f:5f:24:9a:f5:ba:c8:d9:71:53:26:97:b7:82:
                    04:a0:3c:7b:97:67:87:91:97:21:ab:79:6c:3e:fc:
                    ea:c9:61:57:19:91:f4:c4:cd:78:52:15:38:ab:05:
                    43:80:a2:18:57:bf:42:9a:7f:dc:f1:34:5d:69:32:
                    00:86:f2:4f:2d:74:0c:67:97:24:ff:5b:3e:d2:9f:
                    06:b7:57:f3:d3:3f:2d:f4:ae:9b:15:3f:a7:a5:9b:
                    c1:c4:f7:57:96:4f:0b:fb:6b:27:5c:82:10:74:e2:
                    c8:95:b3:e2:e3:84:76:c6:29:f2:17:4b:13:62:2c:
                    a2:92:ae:39:e4:01:71:88:a9:cc:f1:9e:1a:60:d0:
                    b4:eb:0d:21:86:00:43:e5:87:84:0f:b6:7f:1b:5b:
                    60:24:59:d3:0b:83:ba:74:95:dd:2d:51:e2:51:d4:
                    95:b9:b6:a0:4e:e7:eb:7c:1f:5d:9b:56:c0:80:d0:
                    c2:99:eb:df:7b:83:86:8f:12:41:18:2b:99:64:e2:
                    46:de:cb:f8:a8:07:f7:e3:58:dc:63:87:3c:48:b5:
                    55:86:73:87:94:87:70:78:f6:69:06:56:d0:03:ab:
                    02:0f:f4:de:c0:af:33:b0:b9:d8:86:0b:f5:fc:25:
                    b6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:63:5C:7E:B4:D8:87:6A:65:EA:9C:33:7A:42:A1:96:FF:B6:91:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70d4429d-87bd-4cd8-8a69-e77cf29b9493/37e1da26-2149-3a7d-afa8-6f118e08e61c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70d4429d-87bd-4cd8-8a69-e77cf29b9493/70d4429d-87bd-4cd8-8a69-e77cf29b9493.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3A:FA:19:C2:5B:C1:C3:3B:BB:09:80:81:10:1B:09:E7:80:B3:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70d4429d-87bd-4cd8-8a69-e77cf29b9493.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:4a:85:38:99:3c:f7:bb:52:ff:92:c4:6a:71:c7:1e:88:7f:
         b0:2c:87:3d:90:f0:6b:6b:c2:53:7f:03:5e:e5:4a:7d:dd:c2:
         13:7c:e1:be:98:d4:c9:69:21:70:62:f7:c5:87:eb:80:df:c2:
         cc:08:91:a2:15:58:f5:f4:49:35:16:7f:7e:71:7d:6f:63:c8:
         50:40:f9:a6:d1:a5:cb:0f:78:b1:b8:ea:ba:15:d5:18:e5:02:
         5d:4c:f3:2e:88:26:09:67:38:fa:b1:0d:a6:c9:82:29:79:6c:
         5c:8d:c5:76:3a:d7:a6:96:a7:79:7b:d9:1e:47:94:1b:68:8b:
         ff:98:97:3e:be:f2:27:f3:f4:b7:56:63:7a:01:59:d3:e3:8a:
         47:a1:82:65:e0:0b:e0:a3:b1:7e:3a:f7:fb:9d:34:b9:b8:f8:
         57:c5:98:1a:b5:0e:50:76:d3:00:e7:3b:ed:25:e0:2c:80:dd:
         78:27:f4:bf:4c:a1:7a:56:a0:21:8f:a9:6d:02:21:51:78:1d:
         ad:5d:eb:8c:17:c0:ca:2e:5c:c8:5f:bc:4c:dd:2e:83:5a:7a:
         85:60:ca:32:98:89:46:d0:ae:8e:2c:7d:29:95:b7:32:dc:77:
         86:41:81:39:6d:99:74:80:2b:12:d9:31:12:47:6f:8e:e2:6d:
         69:5d:f0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:40 2024 by rpki-client on console-fra.rpki-client.org