Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/d5c91897-a034-3e45-8d1c-7d878d4c4c79.roa
File:                     d5c91897-a034-3e45-8d1c-7d878d4c4c79.roa (raw, json)
Hash identifier:          3at7H78MIPgO8E1bOFlPQh+f4efUbJElgrTZaYKqyk0=
Subject key identifier:   03:0C:DE:0E:87:EA:84:EA:88:B0:03:C9:32:63:23:A7:77:48:45:23
Certificate issuer:       /CN=9389c3cd-af8c-44d4-ae71-4e8073846349
Certificate serial:       010D0C9F4328583F26C198D0BFFA0C1C8BB8FD80
Authority key identifier: 42:D6:AD:13:6E:C7:EA:DF:FD:F6:D1:B3:56:21:BA:A9:89:BD:96:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/d5c91897-a034-3e45-8d1c-7d878d4c4c79.roa
Signing time:             Mon 05 Sep 2022 12:00:00 +0000
ROA not before:           Mon 05 Sep 2022 12:00:00 +0000
ROA not after:            Tue 11 Oct 2022 04:00:00 +0000
asID:                     62785
IP address blocks:        172.96.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:26:c1:98:d0:bf:fa:0c:1c:8b:b8:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9389c3cd-af8c-44d4-ae71-4e8073846349
        Validity
            Not Before: Sep  5 12:00:00 2022 GMT
            Not After : Oct 11 04:00:00 2022 GMT
        Subject: CN=fd3bdba7-91b6-4715-a4f2-ed63dc9a3311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bf:1b:a1:84:36:e6:5b:7d:bb:b3:5a:91:c6:
                    36:9b:4b:4f:ce:85:fd:9b:62:64:cc:2f:57:03:70:
                    02:a4:40:dc:cc:59:d6:04:65:ba:24:f3:ff:27:89:
                    0c:06:b4:91:b6:0a:95:2b:0a:ce:8a:74:25:cf:f9:
                    1d:e0:be:7c:78:06:f0:39:90:2c:9b:10:6c:90:30:
                    ff:62:37:af:e4:e7:40:56:5f:31:6c:e4:db:4a:9c:
                    28:6f:7b:46:cc:1d:df:b4:a6:a0:cf:77:69:48:22:
                    7b:d4:92:6f:d3:9f:05:23:17:c4:a9:29:28:e8:97:
                    26:e3:d6:30:d2:ee:01:63:79:aa:98:03:90:77:ce:
                    b8:da:20:2e:f2:11:10:68:80:9a:17:91:37:bc:27:
                    49:a7:eb:af:e9:df:ae:8c:86:e8:60:ef:74:d8:e6:
                    59:03:a4:43:23:c6:1f:29:85:97:cd:33:ac:a2:cd:
                    3b:59:c0:83:f3:21:39:a6:64:79:1d:62:e7:c8:9e:
                    7c:e9:14:0d:a1:2d:90:12:ba:f7:92:70:1f:cd:94:
                    ec:9e:a3:0d:15:0b:c2:f2:c8:29:ac:aa:61:ff:90:
                    bf:59:8e:20:d0:97:60:72:1f:7d:60:fa:ab:bc:5f:
                    63:3f:3f:81:af:df:d1:71:97:97:0f:c8:dc:a7:5c:
                    d0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0C:DE:0E:87:EA:84:EA:88:B0:03:C9:32:63:23:A7:77:48:45:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/d5c91897-a034-3e45-8d1c-7d878d4c4c79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/9389c3cd-af8c-44d4-ae71-4e8073846349.crl

            X509v3 Authority Key Identifier:
                keyid:42:D6:AD:13:6E:C7:EA:DF:FD:F6:D1:B3:56:21:BA:A9:89:BD:96:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:06:e3:9e:7f:05:5c:75:66:98:6c:ba:ec:d2:da:d8:2b:87:
         8f:68:29:09:00:36:f3:32:80:e0:8d:bd:af:b1:6e:a1:1c:ba:
         be:d6:df:cd:e6:8d:34:c5:4c:f7:ef:14:7f:93:d7:25:33:c6:
         72:6f:5e:2d:41:4b:71:d2:1b:bf:3e:24:ec:ed:26:95:df:4a:
         95:ac:99:1c:c5:72:60:d0:4c:c0:c5:8b:74:35:65:8a:2c:aa:
         31:04:e1:6f:32:21:5d:fd:8c:d3:75:42:71:f5:32:16:34:89:
         01:ac:01:dc:4b:01:56:9b:39:5f:cb:66:f3:ba:3d:b6:54:07:
         88:9b:d1:a1:4d:27:de:ff:ec:08:5b:a0:f2:2c:72:c6:c6:15:
         b4:de:9d:2d:b1:c0:57:8f:e2:a9:92:1a:47:2f:d7:04:9b:26:
         f1:0b:6f:26:7f:b4:ee:61:26:1b:67:0f:98:b9:54:4e:18:2b:
         d1:c4:44:c0:70:d6:9f:c5:7a:e8:0a:03:d0:7e:84:e1:59:a7:
         78:0b:5a:b0:46:96:a2:8b:1a:11:b9:15:69:88:fa:a5:bd:ea:
         7f:1b:f6:93:7f:11:23:25:e2:1c:7b:f8:c0:0e:11:d2:a7:25:
         23:02:cc:85:ea:7f:85:c1:47:77:48:59:5d:7f:fa:13:b9:6a:
         95:6c:b2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org