Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514/695ec122-512d-3623-94ed-bd66795ad2ae.roa
File:                     695ec122-512d-3623-94ed-bd66795ad2ae.roa (raw, json)
Hash identifier:          EHdJkyttz+1nWEZMLeKhbVYW4UIQLDb/mO1z1NWh9/4=
Subject key identifier:   55:59:91:CC:59:34:4B:3B:F4:E5:70:5E:53:4C:30:2E:E2:13:B6:49
Certificate issuer:       /CN=dc969dfb-52db-45b6-9244-62c3f7ddf514
Certificate serial:       010D0C9F4328583F74079DD069A3AD6DA47F4000
Authority key identifier: CA:DC:79:A9:69:34:E9:AF:17:2E:50:66:00:0A:A1:30:0D:EC:61:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514/695ec122-512d-3623-94ed-bd66795ad2ae.roa
Signing time:             Mon 03 Oct 2022 15:03:08 +0000
ROA not before:           Mon 03 Oct 2022 15:03:08 +0000
ROA not after:            Mon 01 Jan 2029 05:00:00 +0000
asID:                     7018
IP address blocks:        128.254.205.0/24 maxlen: 24
                          128.254.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:74:07:9d:d0:69:a3:ad:6d:a4:7f:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc969dfb-52db-45b6-9244-62c3f7ddf514
        Validity
            Not Before: Oct  3 15:03:08 2022 GMT
            Not After : Jan  1 05:00:00 2029 GMT
        Subject: CN=56bf5986-24f4-4384-a42c-d2dd061ab4b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:81:a6:76:3f:a0:bb:af:f9:da:24:2e:87:c5:
                    fd:20:e5:39:f1:aa:79:b7:f9:79:3d:cf:4d:5d:0e:
                    2b:38:44:aa:56:8e:9a:fd:5c:9d:dd:69:3b:6f:9b:
                    ee:f1:a6:bc:a3:20:4f:23:be:6a:50:c0:92:3c:dc:
                    63:c6:3e:2b:c3:f6:62:e4:95:9a:50:83:bf:83:be:
                    6f:c2:e8:48:63:13:3f:6a:fb:5b:31:a3:40:8a:ca:
                    5d:68:20:ed:6f:2a:5a:14:b6:6b:e5:27:03:dc:21:
                    15:fa:f1:e0:c2:61:43:32:ec:83:58:94:84:74:fd:
                    92:86:19:e7:8f:6d:80:d1:7b:6b:3a:65:b7:75:8c:
                    de:30:5a:e9:93:ba:fa:81:ca:72:d5:09:3b:f1:4b:
                    3f:6f:05:c8:1b:98:95:52:d2:87:1f:70:e6:e0:ae:
                    ca:88:07:64:53:d4:8d:6b:73:bb:e7:96:73:f7:59:
                    ad:3c:47:26:3d:5a:78:3f:6d:c9:7b:a4:e1:61:44:
                    b8:aa:84:c9:a5:8b:da:ca:79:01:ff:8e:8c:62:7f:
                    82:29:b0:d3:2d:50:09:dc:08:4f:eb:4d:13:97:be:
                    cd:27:ec:a7:90:8a:bc:62:65:27:6d:1f:fe:1f:e3:
                    da:5e:ff:29:79:91:d1:da:92:80:2e:9f:f8:4d:d7:
                    3a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:59:91:CC:59:34:4B:3B:F4:E5:70:5E:53:4C:30:2E:E2:13:B6:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514/695ec122-512d-3623-94ed-bd66795ad2ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514/dc969dfb-52db-45b6-9244-62c3f7ddf514.crl

            X509v3 Authority Key Identifier:
                keyid:CA:DC:79:A9:69:34:E9:AF:17:2E:50:66:00:0A:A1:30:0D:EC:61:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc969dfb-52db-45b6-9244-62c3f7ddf514.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.205.0-128.254.206.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:6f:e4:5b:a3:4e:1e:b3:58:2b:1c:74:8d:d6:eb:1f:f7:a5:
         da:ea:3c:c3:cf:6f:eb:ee:47:8e:51:33:56:ad:40:6f:fb:28:
         33:9c:d9:03:2b:95:0b:55:03:4c:7a:c6:f3:23:8c:95:74:6a:
         da:22:11:e9:e1:37:68:65:df:ed:40:7a:ec:98:55:d0:23:33:
         0f:a4:6d:fd:92:5d:17:9b:18:88:5b:4d:bb:31:9b:12:8c:bd:
         59:69:f1:9c:c6:21:e0:f6:f0:3d:9b:a5:4b:7b:67:35:91:f2:
         ba:14:4b:d3:28:00:38:4d:14:dc:99:29:29:85:78:83:7d:e5:
         7a:75:6d:b6:d7:6a:c6:62:7c:59:e6:3c:ac:18:3d:6c:99:ff:
         b6:61:f5:de:32:4e:6b:d4:b4:08:1c:cc:ed:2e:4e:85:06:0f:
         50:f8:55:ab:9c:d9:c5:d3:7e:0b:67:67:1e:a7:ae:0f:71:cc:
         df:c2:cf:38:4b:cd:cd:e7:f0:97:ba:c2:9d:58:af:bd:97:b6:
         59:83:ad:06:b1:65:eb:b2:7a:80:3f:49:59:98:24:e9:92:36:
         42:32:65:e4:82:af:ae:6e:01:d4:5d:56:b0:35:87:25:b6:12:
         a0:de:0b:5b:7d:15:a6:4b:6f:df:25:cd:f7:f3:88:24:98:47:
         c0:7d:1d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:46 2023 by rpki-client on console-ams.rpki-client.org