Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/e1b1a830-ab77-3823-ba84-197cd2310f44.roa
File:                     e1b1a830-ab77-3823-ba84-197cd2310f44.roa (raw, json)
Hash identifier:          F9q4sTHwAcDFYHRVNnSnK/A9nRQ4bTxvlKGogHsk4Y0=
Subject key identifier:   68:22:A9:BD:D8:35:50:01:61:2C:B4:C9:35:6D:2B:76:F6:66:4E:6A
Certificate issuer:       /CN=9389c3cd-af8c-44d4-ae71-4e8073846349
Certificate serial:       010D0C9F4328583DDC8B90B3AE5946AA2C6372C0
Authority key identifier: 42:D6:AD:13:6E:C7:EA:DF:FD:F6:D1:B3:56:21:BA:A9:89:BD:96:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/e1b1a830-ab77-3823-ba84-197cd2310f44.roa
Signing time:             Tue 10 May 2022 12:00:00 +0000
ROA not before:           Tue 10 May 2022 12:00:00 +0000
ROA not after:            Wed 15 Jun 2022 04:00:00 +0000
asID:                     7224
IP address blocks:        172.96.104.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:dc:8b:90:b3:ae:59:46:aa:2c:63:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9389c3cd-af8c-44d4-ae71-4e8073846349
        Validity
            Not Before: May 10 12:00:00 2022 GMT
            Not After : Jun 15 04:00:00 2022 GMT
        Subject: CN=824eff2d-aa28-4082-8872-f4fc65f7f7b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:38:30:25:c0:4d:18:cf:23:bc:b0:b6:8f:c5:
                    63:ac:1d:ee:e0:ab:1d:f0:59:5e:c4:24:39:b2:4c:
                    ae:6d:0f:5e:69:9b:91:f5:09:1a:ca:e0:15:06:35:
                    20:88:d0:de:d8:17:62:f3:20:13:9e:2a:43:2a:14:
                    37:ed:52:50:d6:53:74:2b:cb:ac:03:81:79:1b:20:
                    62:a6:ff:e4:25:91:7d:23:19:fa:28:26:7d:34:3d:
                    9d:ba:37:17:d1:93:80:b7:6a:96:3d:09:0b:9d:2f:
                    0c:4c:95:d7:d6:9a:4a:24:62:e2:36:60:20:f6:c8:
                    56:a4:59:d2:de:4d:c4:44:f0:e7:7c:83:69:d5:e1:
                    92:e4:2f:f3:01:da:42:29:69:11:4c:0d:84:33:fa:
                    c2:09:66:82:d6:b5:27:18:a5:29:85:c4:a9:a4:af:
                    8a:ff:b2:8c:47:f3:eb:41:c8:10:f3:76:bc:b0:cc:
                    3c:c4:66:f1:16:9f:30:b7:7a:a5:7a:90:52:f1:a1:
                    32:c4:ac:69:d2:e7:5d:93:1f:45:36:d8:ae:40:03:
                    c3:36:52:96:5c:73:c4:b6:17:bf:2e:fc:0d:18:8c:
                    8c:4d:c2:48:3b:5d:01:ff:22:39:9e:e0:51:4f:8f:
                    8d:b7:2a:eb:c3:ff:d1:b3:78:9a:24:43:2f:d3:1a:
                    14:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:22:A9:BD:D8:35:50:01:61:2C:B4:C9:35:6D:2B:76:F6:66:4E:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/e1b1a830-ab77-3823-ba84-197cd2310f44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349/9389c3cd-af8c-44d4-ae71-4e8073846349.crl

            X509v3 Authority Key Identifier:
                keyid:42:D6:AD:13:6E:C7:EA:DF:FD:F6:D1:B3:56:21:BA:A9:89:BD:96:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9389c3cd-af8c-44d4-ae71-4e8073846349.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:44:05:05:d5:41:4e:a4:c6:70:19:7f:74:be:8c:df:cf:e3:
         b7:fe:46:f8:6e:25:2b:28:82:d6:fa:ca:fb:33:7e:3e:34:02:
         be:5a:4d:ca:2b:bc:f8:e7:8c:64:72:44:ef:df:f9:32:ec:6b:
         84:ef:a1:37:78:23:a7:0a:f0:96:90:55:84:da:0c:73:36:4d:
         68:c8:58:fb:3a:49:d6:88:69:84:c0:77:41:ad:a6:e7:d2:c5:
         a4:81:41:a8:f3:a3:21:a1:bf:c5:2b:b4:4e:71:24:94:88:79:
         9b:4e:bc:5f:4f:4c:2c:a1:d0:87:d6:aa:85:9f:36:96:da:63:
         7c:57:34:ae:53:24:a4:c7:36:0b:b6:b6:17:02:d1:7d:53:a6:
         ae:41:af:97:88:2b:95:28:c3:0a:5d:87:75:ec:5c:c7:fa:ec:
         6f:09:99:b0:ac:8c:5a:3f:af:c6:be:ac:d4:b0:51:cc:f2:1e:
         cd:46:50:8f:df:b7:f9:d5:83:f1:ae:ea:43:c7:5a:a4:34:3f:
         2a:78:76:cb:77:fd:45:4e:91:bf:e4:7f:4d:c2:e5:fc:c6:07:
         55:0e:71:85:03:f1:fd:0d:cb:b1:2f:2a:18:96:32:22:68:37:
         89:7c:07:d9:23:1b:45:06:78:5d:dc:78:4b:92:6e:ad:87:2d:
         70:d3:73:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:41 2024 by rpki-client on console-ams.rpki-client.org