Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514/411c322d-27ca-3e95-a263-c000d5ad3cbd.roa
File:                     411c322d-27ca-3e95-a263-c000d5ad3cbd.roa (raw, json)
Hash identifier:          xKS02R+KrHJTuXOIeoeMN4MES7TiJKw5Yl7LrKkbfI0=
Subject key identifier:   9E:E6:83:BD:A5:3F:4D:52:B6:FC:DA:60:C7:1A:0D:B9:B0:3D:EF:32
Certificate issuer:       /CN=dc969dfb-52db-45b6-9244-62c3f7ddf514
Certificate serial:       010D0C9F4328583E80F4CE33D9709F60411F7500
Authority key identifier: CA:DC:79:A9:69:34:E9:AF:17:2E:50:66:00:0A:A1:30:0D:EC:61:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514/411c322d-27ca-3e95-a263-c000d5ad3cbd.roa
Signing time:             Wed 31 Jul 2019 13:03:25 +0000
ROA not before:           Wed 31 Jul 2019 13:03:25 +0000
ROA not after:            Tue 10 Oct 2028 04:00:00 +0000
asID:                     7018
IP address blocks:        192.209.63.0/24 maxlen: 24
                          216.73.156.0/24 maxlen: 24
                          216.73.157.0/24 maxlen: 24
                          216.73.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:80:f4:ce:33:d9:70:9f:60:41:1f:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc969dfb-52db-45b6-9244-62c3f7ddf514
        Validity
            Not Before: Jul 31 13:03:25 2019 GMT
            Not After : Oct 10 04:00:00 2028 GMT
        Subject: CN=2298294d-f9ec-4fd3-9d22-f09ac89cd80b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8e:de:d3:7d:dd:9f:e2:f2:19:65:bf:36:85:
                    cb:5d:9b:c0:35:ff:b7:6a:4d:af:05:4e:52:2c:3f:
                    41:b6:4b:be:6c:2c:e2:47:11:fe:59:bc:a5:96:a9:
                    9a:25:01:95:d7:2a:73:9b:b9:7f:ca:da:a7:71:60:
                    ed:b8:1c:e6:b3:36:b6:56:75:7c:2c:42:34:f0:c3:
                    2a:94:f4:87:01:d7:28:46:19:40:39:8d:63:df:92:
                    56:8c:93:f2:cc:ae:c9:4e:db:be:61:44:18:b3:a4:
                    49:9d:d7:79:85:5e:9a:51:7d:52:da:3f:f1:3d:c9:
                    58:95:b7:97:f5:4e:16:36:a4:d7:f5:fc:61:d8:3b:
                    b5:1b:aa:7d:23:31:7f:cd:ca:76:bb:15:55:97:e3:
                    49:93:ea:e9:a7:de:6a:7c:15:a5:f7:de:f3:3c:e2:
                    37:51:c4:34:63:27:b6:e2:8e:5a:6c:17:22:47:7d:
                    e8:30:80:f2:21:3a:18:f4:eb:11:de:61:4f:60:91:
                    9f:7b:70:38:b2:c6:2c:c5:0c:b2:bf:f6:68:b5:ff:
                    e6:4f:72:71:a2:9c:41:fe:ae:91:6c:04:d5:83:c0:
                    39:b0:64:30:54:b4:89:14:64:ed:21:e8:1d:22:a4:
                    14:b4:91:96:3a:1f:5c:12:0c:1b:b0:a9:75:87:94:
                    8f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E6:83:BD:A5:3F:4D:52:B6:FC:DA:60:C7:1A:0D:B9:B0:3D:EF:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514/411c322d-27ca-3e95-a263-c000d5ad3cbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514/dc969dfb-52db-45b6-9244-62c3f7ddf514.crl

            X509v3 Authority Key Identifier:
                keyid:CA:DC:79:A9:69:34:E9:AF:17:2E:50:66:00:0A:A1:30:0D:EC:61:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.209.63.0/24
                  216.73.156.0-216.73.158.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:0d:84:77:47:17:52:9c:c4:32:4a:c5:bf:a3:48:30:cf:33:
         f5:d3:35:7f:ad:57:49:af:0c:2f:15:6d:5f:20:74:22:d2:b4:
         77:90:c2:d6:64:14:e9:26:d5:85:32:8b:d5:8c:52:78:2c:d3:
         cd:72:8c:67:72:b5:29:7e:e0:f4:39:c0:3d:2b:0f:b5:d0:4e:
         70:d0:00:85:e1:a2:3a:0d:3f:d6:fe:af:fa:fc:82:22:e9:12:
         35:5e:16:72:69:ae:0e:a0:08:79:37:59:54:c7:29:68:7e:bc:
         61:0c:1a:57:89:99:78:53:c1:49:df:e5:d8:f7:89:67:de:f7:
         8e:82:0d:d7:bb:db:64:50:b2:6d:44:27:4c:d2:67:dd:51:e0:
         a6:cb:74:5b:41:1d:ef:8b:62:f0:f1:ab:f5:c5:10:4d:e2:ce:
         b5:6e:b2:59:d7:d2:79:f4:3f:a4:90:16:22:bb:77:d1:4d:77:
         99:f5:13:5a:98:aa:36:7d:52:41:5b:21:81:f7:56:da:20:8e:
         34:84:5d:9d:4e:da:0c:62:20:d4:d2:e5:e5:15:6c:b9:00:2d:
         fe:6b:96:0e:9c:e6:52:f4:ce:2e:81:22:fd:30:27:d4:f0:ae:
         db:9b:29:a3:b3:ef:59:55:b5:e2:ad:d3:27:f8:cd:6c:79:88:
         6b:7a:0c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:57 2024 by rpki-client on console-fra.rpki-client.org