Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514/5b8d1e77-bbe8-3771-b2ef-97746cf16a6c.roa
File:                     5b8d1e77-bbe8-3771-b2ef-97746cf16a6c.roa (raw, json)
Hash identifier:          WKC5G9TrosgzXqDaqE76LRuRQ6IVim+LRry/IzaT31Y=
Subject key identifier:   A4:98:2D:90:19:A2:3E:E8:02:1E:B5:7C:01:33:69:C6:BE:F0:5E:B6
Certificate issuer:       /CN=dc969dfb-52db-45b6-9244-62c3f7ddf514
Certificate serial:       010D0C9F4328583F1C9A9F90226D91147DC50740
Authority key identifier: CA:DC:79:A9:69:34:E9:AF:17:2E:50:66:00:0A:A1:30:0D:EC:61:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514/5b8d1e77-bbe8-3771-b2ef-97746cf16a6c.roa
Signing time:             Fri 02 Sep 2022 18:06:08 +0000
ROA not before:           Fri 02 Sep 2022 18:06:08 +0000
ROA not after:            Mon 01 Jan 2029 05:00:00 +0000
asID:                     7018
IP address blocks:        192.209.63.0/24 maxlen: 24
                          216.73.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:1c:9a:9f:90:22:6d:91:14:7d:c5:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc969dfb-52db-45b6-9244-62c3f7ddf514
        Validity
            Not Before: Sep  2 18:06:08 2022 GMT
            Not After : Jan  1 05:00:00 2029 GMT
        Subject: CN=8b9310a9-5255-479c-8aa4-d0e40e56f106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a5:56:05:90:1e:36:c7:35:1d:c1:38:31:2f:
                    98:b4:68:10:b8:94:c7:e2:92:6a:4c:9d:5f:d9:16:
                    83:d3:7d:cd:84:2d:0c:0a:65:25:d6:16:01:90:a4:
                    cc:be:3d:72:77:de:32:33:c7:20:4c:5c:ab:8c:94:
                    af:7d:30:bb:f7:e3:57:2a:74:a9:26:21:3e:41:25:
                    1c:ef:6c:53:69:f8:de:a6:36:b5:aa:70:4c:02:ea:
                    c5:71:9d:be:07:0e:76:3e:94:99:f6:84:16:d3:36:
                    d6:f2:c8:b8:13:5f:dd:a9:44:fe:2a:8c:08:ec:8a:
                    95:e8:24:ec:93:05:53:a2:19:a7:90:00:7c:49:fe:
                    dd:e6:95:db:f7:30:c8:57:fc:4b:63:c6:62:89:c7:
                    d3:60:72:77:5c:81:41:d5:17:32:b1:66:e9:0f:b4:
                    32:12:49:55:40:ee:74:38:7a:f2:94:a7:b7:0b:7a:
                    4e:2a:e4:05:2d:74:bb:73:f8:7e:30:a6:aa:37:a0:
                    d3:e2:d8:16:07:51:ca:70:62:0a:16:4a:f6:24:6c:
                    b3:c4:93:e3:0a:ea:12:91:68:0e:96:39:69:11:b0:
                    86:a2:18:3e:16:cb:d1:cf:d2:6f:41:4c:22:f0:bd:
                    78:f9:6d:79:88:6e:08:87:c6:df:65:63:f2:a6:74:
                    71:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:98:2D:90:19:A2:3E:E8:02:1E:B5:7C:01:33:69:C6:BE:F0:5E:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514/5b8d1e77-bbe8-3771-b2ef-97746cf16a6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514/dc969dfb-52db-45b6-9244-62c3f7ddf514.crl

            X509v3 Authority Key Identifier:
                keyid:CA:DC:79:A9:69:34:E9:AF:17:2E:50:66:00:0A:A1:30:0D:EC:61:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.209.63.0/24
                  216.73.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:bf:dd:4d:fc:eb:cb:d4:9f:23:8c:69:05:d7:10:8f:8c:58:
         00:40:6c:df:51:03:41:04:6f:1b:b3:83:70:eb:cb:a5:b5:14:
         a5:60:5a:c1:65:62:6b:33:68:12:05:0c:87:be:f0:2c:02:63:
         80:51:d3:13:53:17:88:4b:0a:85:6a:3d:ed:ab:5d:74:fc:58:
         d5:8d:15:50:aa:5a:70:40:57:cd:32:02:fc:e0:41:ef:08:cb:
         6d:80:9a:56:f4:60:a7:e2:4a:d4:ee:c7:91:45:26:db:4c:2c:
         9e:b2:89:fd:a5:40:8c:73:e4:8c:8f:35:b9:66:90:e5:e9:28:
         0a:1b:22:b8:40:d9:5c:ee:7d:8f:fe:84:b4:39:28:33:29:f1:
         df:f9:e5:95:63:4e:8c:06:c5:a5:33:69:04:d3:6f:22:51:1d:
         3d:5a:75:f2:68:c3:ec:d6:fa:2a:1f:5d:42:11:9c:66:33:c6:
         5b:9d:ec:ae:7f:0e:3f:c9:19:a5:ae:9b:8d:79:22:23:62:8c:
         50:e9:53:85:b8:9f:bc:e0:4a:25:96:c5:f7:a0:da:ca:34:86:
         b5:e9:53:97:12:3e:83:7c:b1:06:7a:1a:bc:ed:97:14:9a:64:
         41:a7:5d:28:a2:bd:d4:7a:15:f5:0f:87:d1:6e:70:69:54:ba:
         9d:52:cf:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:46 2023 by rpki-client on console-ams.rpki-client.org