Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/746fada8-dc6c-46d4-a25b-49ec0fceeb3d/30586445-569e-313e-8265-17add9eefaec.roa
File:                     30586445-569e-313e-8265-17add9eefaec.roa (raw, json)
Hash identifier:          IzxXiH6ZmxDvcI/Yo8T/BwE+UPWAscR793cTOFQFVPY=
Subject key identifier:   A0:70:4E:07:7D:C5:91:6F:39:67:A5:62:E7:02:4C:F2:41:1F:FF:99
Certificate issuer:       /CN=746fada8-dc6c-46d4-a25b-49ec0fceeb3d
Certificate serial:       010D0C9F4328583AD47EDB1D84FA82D782534500
Authority key identifier: B6:A3:4A:9E:49:1A:4C:30:EB:94:74:0B:FE:BD:3F:74:2D:CB:E7:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/746fada8-dc6c-46d4-a25b-49ec0fceeb3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/746fada8-dc6c-46d4-a25b-49ec0fceeb3d/30586445-569e-313e-8265-17add9eefaec.roa
Signing time:             Fri 23 Aug 2019 04:00:00 +0000
ROA not before:           Fri 23 Aug 2019 04:00:00 +0000
ROA not after:            Fri 08 Nov 2024 05:00:00 +0000
asID:                     395378
IP address blocks:        104.152.216.0/22 maxlen: 22
                          104.152.220.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:d4:7e:db:1d:84:fa:82:d7:82:53:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746fada8-dc6c-46d4-a25b-49ec0fceeb3d
        Validity
            Not Before: Aug 23 04:00:00 2019 GMT
            Not After : Nov  8 05:00:00 2024 GMT
        Subject: CN=99e3eb6e-94f6-4f7c-8bc1-70f95847943a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f7:9f:92:ea:0c:27:f8:5c:40:26:13:c6:61:
                    65:5d:55:fc:89:fd:5f:c3:c4:58:fa:42:9a:bd:f8:
                    8e:9f:af:c3:9e:b7:bf:8d:c8:10:79:84:8f:ac:d8:
                    9f:4f:77:90:09:91:4f:aa:0e:da:96:9c:de:2f:67:
                    d9:5e:25:5d:5f:f5:15:3d:15:48:56:58:89:78:ac:
                    26:c3:84:eb:fa:07:4e:16:5a:46:ce:13:61:38:ec:
                    46:2d:3e:af:4c:b3:d3:84:7c:0d:9b:8e:b8:1a:60:
                    e7:ea:31:11:d6:18:4e:65:57:cf:6c:35:a6:73:e3:
                    fe:1d:90:0b:a9:6f:aa:40:49:60:46:c2:45:3c:56:
                    3d:c6:72:bc:9f:a1:08:6e:44:d0:32:9e:ed:8b:65:
                    b2:53:aa:a1:76:48:06:7f:f6:7c:00:b4:6d:eb:ce:
                    77:32:06:af:02:d0:95:13:de:8c:be:a2:d2:f4:b5:
                    85:78:18:bb:ae:ec:1a:23:c3:96:43:47:8e:46:88:
                    c4:1a:e0:b5:eb:10:d7:68:97:76:dc:6a:80:fe:0f:
                    b1:79:b4:16:1c:b1:85:31:83:93:94:4a:d3:4b:2b:
                    12:ce:52:b1:4e:38:39:d6:77:7d:f9:4d:1f:c9:69:
                    4d:c8:fc:72:3b:ef:0a:b8:0e:ad:73:49:28:9f:b4:
                    1a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:70:4E:07:7D:C5:91:6F:39:67:A5:62:E7:02:4C:F2:41:1F:FF:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/746fada8-dc6c-46d4-a25b-49ec0fceeb3d/30586445-569e-313e-8265-17add9eefaec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/746fada8-dc6c-46d4-a25b-49ec0fceeb3d/746fada8-dc6c-46d4-a25b-49ec0fceeb3d.crl

            X509v3 Authority Key Identifier:
                keyid:B6:A3:4A:9E:49:1A:4C:30:EB:94:74:0B:FE:BD:3F:74:2D:CB:E7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/746fada8-dc6c-46d4-a25b-49ec0fceeb3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.216.0-104.152.221.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:ab:97:7e:98:66:b8:a6:6d:8d:54:fd:b1:2f:2a:7b:de:9b:
         55:03:bc:a4:aa:78:52:1e:76:71:3c:e8:a1:0f:ae:f3:a0:8f:
         93:9c:d0:46:9c:98:a6:72:84:74:01:5c:22:37:5a:55:0c:bb:
         c4:a6:dc:b9:13:d5:42:c3:d0:c5:df:22:8d:fb:6f:7b:20:d6:
         77:b1:57:e0:b7:09:6b:e9:4f:6c:b0:74:20:9e:a5:f6:59:a5:
         19:ef:59:6d:25:20:2c:a9:3c:fb:81:36:a3:77:98:21:32:8e:
         c2:f2:db:c0:78:de:fe:bd:a8:6a:f5:66:38:2c:29:81:32:56:
         c1:4b:2e:df:10:e6:0d:bd:2c:2e:5f:84:49:73:57:e7:f3:fc:
         18:9d:73:76:09:72:24:e5:e0:af:5a:c4:fe:03:61:7a:61:05:
         52:39:af:12:6b:51:0b:12:4b:df:ef:d2:30:46:8f:06:df:81:
         f8:7a:6a:b6:4e:9f:c7:73:38:d8:94:94:46:d3:1d:cc:e1:45:
         5b:87:73:bd:e1:3a:da:01:2d:77:9b:39:8c:7a:69:f8:9e:71:
         aa:58:a5:32:76:72:cd:3e:61:2f:ce:0c:12:4d:7c:81:9a:9a:
         53:31:97:65:54:f4:71:ed:48:d8:ea:4f:d0:59:78:4d:be:f3:
         1c:88:47:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:26 2023 by rpki-client on console-ams.rpki-client.org