Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/819140cf-fbfc-49da-84dc-dd807ce1adbc/3bcd1ee2-44c1-3872-9792-f1a6ed682ebe.roa
File:                     3bcd1ee2-44c1-3872-9792-f1a6ed682ebe.roa (raw, json)
Hash identifier:          UIofBY2JCCL2axGKDADIrN27Ny3dau3BbEjf6ruuDSE=
Subject key identifier:   87:92:A5:DA:A5:A5:90:AF:34:F0:2C:97:64:55:FF:72:32:34:53:CA
Certificate issuer:       /CN=819140cf-fbfc-49da-84dc-dd807ce1adbc
Certificate serial:       010D0C9F4328583CDDC0DC55B4EC4748DD9FAA00
Authority key identifier: D8:EC:B9:C7:FC:30:6D:9E:93:54:8D:D1:06:84:1F:C9:8E:C6:32:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/819140cf-fbfc-49da-84dc-dd807ce1adbc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/819140cf-fbfc-49da-84dc-dd807ce1adbc/3bcd1ee2-44c1-3872-9792-f1a6ed682ebe.roa
Signing time:             Wed 15 Sep 2021 04:00:00 +0000
ROA not before:           Wed 15 Sep 2021 04:00:00 +0000
ROA not after:            Mon 13 May 2024 04:00:00 +0000
asID:                     16509
IP address blocks:        157.53.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:dd:c0:dc:55:b4:ec:47:48:dd:9f:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=819140cf-fbfc-49da-84dc-dd807ce1adbc
        Validity
            Not Before: Sep 15 04:00:00 2021 GMT
            Not After : May 13 04:00:00 2024 GMT
        Subject: CN=5373d912-fedd-419c-b245-baaef4a7ad4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:28:93:47:4b:db:67:35:25:2a:c7:b2:39:72:
                    9e:46:aa:ba:dd:77:3d:b5:4a:ab:b1:18:0d:16:33:
                    61:06:a5:4c:4c:6f:bd:c8:90:69:57:ef:58:1b:a6:
                    78:6f:57:0a:87:9b:3b:54:79:cb:7c:67:f3:ef:c1:
                    3d:95:b4:33:24:1a:f5:ef:35:41:af:47:78:b0:0c:
                    65:fd:8a:6d:c7:d2:d9:db:bf:03:9c:bb:b3:26:ab:
                    e9:2c:6b:d2:df:03:2d:bd:8b:06:52:70:4a:45:27:
                    75:4c:48:fc:38:27:f9:55:fb:19:56:0d:3f:1c:05:
                    35:14:fc:b7:48:1f:fe:0c:89:fa:2e:3e:57:18:3a:
                    ef:ca:0a:b4:be:be:94:e0:6c:77:e8:fb:59:fa:30:
                    36:72:d1:f4:1c:c1:06:c8:1c:4a:e9:ea:20:50:17:
                    41:71:69:95:c1:44:50:95:4c:ad:e8:c0:1b:cd:26:
                    62:84:a1:78:cb:9f:5a:1d:68:81:43:fc:8f:8c:f5:
                    43:59:5f:01:9f:ad:68:c9:b3:89:e4:da:bf:f5:98:
                    80:75:7c:ed:aa:d8:1d:3c:cc:7e:10:66:05:21:3a:
                    0e:55:79:62:be:67:ef:61:ab:7f:cb:c4:94:4a:c7:
                    28:66:09:41:6b:a6:75:01:1a:fa:7b:64:42:bd:f5:
                    0f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:92:A5:DA:A5:A5:90:AF:34:F0:2C:97:64:55:FF:72:32:34:53:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/819140cf-fbfc-49da-84dc-dd807ce1adbc/3bcd1ee2-44c1-3872-9792-f1a6ed682ebe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/819140cf-fbfc-49da-84dc-dd807ce1adbc/819140cf-fbfc-49da-84dc-dd807ce1adbc.crl

            X509v3 Authority Key Identifier:
                keyid:D8:EC:B9:C7:FC:30:6D:9E:93:54:8D:D1:06:84:1F:C9:8E:C6:32:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/819140cf-fbfc-49da-84dc-dd807ce1adbc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.53.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:b2:58:45:33:de:f4:01:3d:81:c6:5d:dc:ee:45:ed:6d:1d:
         a7:4f:e6:47:a7:83:ea:a6:2e:7f:49:47:f2:4e:94:19:89:a1:
         c1:d4:70:00:01:f1:34:9d:1b:07:14:ce:71:3f:5d:88:a0:9a:
         9b:30:be:5f:23:30:96:74:1f:c5:65:f7:55:41:5a:0b:37:d3:
         7e:0a:be:52:43:12:22:16:1e:0d:0f:cf:28:02:5b:81:5e:43:
         80:59:4c:4b:6b:d2:6a:f8:99:34:5d:7f:04:08:51:41:e3:8c:
         06:87:7a:67:4e:97:f8:80:8a:b8:6e:9d:da:08:7c:56:7b:26:
         47:d6:5a:d2:55:5d:43:e8:94:13:cc:d4:86:cf:e2:32:01:61:
         17:79:da:8f:1f:ed:0e:2c:a5:7c:50:71:db:bb:8b:e7:71:17:
         18:92:b7:09:0f:6b:6e:17:e7:d3:69:f3:36:93:a9:6e:98:93:
         b4:66:2e:44:21:ce:b1:af:18:b0:80:59:d6:74:07:0e:37:43:
         30:b3:0c:0e:b9:a3:1a:94:65:72:f5:24:83:85:93:c1:6d:f0:
         5f:24:57:5e:f1:79:02:94:74:db:5c:b5:5a:5a:10:39:48:c8:
         76:f7:e4:00:00:e2:1d:c8:37:b6:c2:35:c9:91:5d:dd:0b:50:
         d3:59:71:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org