Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e1e6ad0f-4070-463b-ab35-dee9165037d0/e861d834-810e-3c5b-afda-792335127f57.roa
File:                     e861d834-810e-3c5b-afda-792335127f57.roa (raw, json)
Hash identifier:          Qiz55SZP0H/I5JGY3n9DMV3jU2MqCqu03sam/Ig3/Ek=
Subject key identifier:   45:30:AE:16:73:02:4E:91:20:9A:EE:FC:E5:DA:2D:B2:CA:4B:B4:ED
Certificate issuer:       /CN=e1e6ad0f-4070-463b-ab35-dee9165037d0
Certificate serial:       010D0C9F4328576D51CC73C042CFC16D81A099B1
Authority key identifier: F7:21:A8:C2:92:D9:A6:74:BC:6A:96:14:16:56:C6:8C:F5:A2:71:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e1e6ad0f-4070-463b-ab35-dee9165037d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e1e6ad0f-4070-463b-ab35-dee9165037d0/e861d834-810e-3c5b-afda-792335127f57.roa
Signing time:             Mon 30 Sep 2019 10:04:09 +0000
ROA not before:           Tue 02 Jul 2019 04:00:00 +0000
ROA not after:            Mon 02 Jul 2029 04:00:00 +0000
asID:                     55002
IP address blocks:        65.38.96.0/19 maxlen: 24
                          209.46.0.0/17 maxlen: 24
                          216.245.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:81:a0:99:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1e6ad0f-4070-463b-ab35-dee9165037d0
        Validity
            Not Before: Jul  2 04:00:00 2019 GMT
            Not After : Jul  2 04:00:00 2029 GMT
        Subject: CN=bf7576c0-4c49-4e68-8399-a520543de985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bd:f6:b0:c1:66:07:4a:59:6f:2f:40:75:61:
                    1e:fe:40:62:c8:90:b1:c2:c2:7a:00:11:f5:7d:f2:
                    c6:17:99:03:e9:79:f4:0c:a8:5d:af:5a:0a:45:a8:
                    5a:f7:26:33:3c:98:3f:f9:f4:89:34:3f:5c:30:94:
                    45:56:85:d3:d6:a4:48:3c:c2:91:19:0e:04:bc:19:
                    1d:60:3d:f7:35:e6:98:9a:30:d9:bc:d3:5d:1b:75:
                    bc:01:07:dd:0b:22:67:c7:17:c6:8c:7a:9d:26:5b:
                    42:49:a2:78:51:e7:6e:6f:20:20:91:9e:12:a7:ff:
                    f3:49:c4:29:d6:68:ee:54:3c:fe:67:a0:bb:ad:bb:
                    0e:1d:01:f0:86:cd:10:63:c3:6b:15:39:e9:d6:18:
                    94:20:ed:96:6b:e7:9e:27:72:8f:67:a7:c6:0b:dc:
                    d0:24:24:37:5e:f2:ef:81:1f:5b:d3:44:a5:b2:e3:
                    fa:7c:14:0b:98:64:da:b4:6a:71:f4:9f:f9:41:22:
                    ef:6e:18:2b:a3:a0:2a:8b:e2:3e:e0:a0:78:70:bd:
                    64:fb:01:90:a9:be:e7:1f:fb:47:b8:c1:04:5b:f0:
                    0c:c3:db:9d:b6:19:72:97:2a:91:91:7d:22:4d:c8:
                    de:59:da:18:11:bd:b8:00:9f:c9:be:04:35:6d:cb:
                    0d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:30:AE:16:73:02:4E:91:20:9A:EE:FC:E5:DA:2D:B2:CA:4B:B4:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e1e6ad0f-4070-463b-ab35-dee9165037d0/e861d834-810e-3c5b-afda-792335127f57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e1e6ad0f-4070-463b-ab35-dee9165037d0/e1e6ad0f-4070-463b-ab35-dee9165037d0.crl

            X509v3 Authority Key Identifier:
                keyid:F7:21:A8:C2:92:D9:A6:74:BC:6A:96:14:16:56:C6:8C:F5:A2:71:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e1e6ad0f-4070-463b-ab35-dee9165037d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.38.96.0/19
                  209.46.0.0/17
                  216.245.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:e7:aa:69:0e:81:d6:a4:20:25:b5:da:41:de:00:f4:77:15:
         05:38:76:b4:89:e9:3e:17:e7:5b:f2:5a:6c:13:70:92:97:dd:
         2c:03:68:2e:b0:06:5f:67:b7:1d:9e:b4:8d:09:53:8d:d4:7d:
         9d:06:bd:c6:23:d3:83:04:89:5a:a4:20:0c:9d:0f:33:d2:bb:
         9a:73:90:5a:7b:5f:7b:22:95:7a:d8:89:76:e7:3d:85:0f:2b:
         a7:c8:ae:ce:f2:fa:04:ef:58:54:02:2d:53:37:6b:3e:18:14:
         66:6d:17:52:7b:b0:1f:e3:0f:ad:c8:27:db:00:8b:88:a7:58:
         60:5b:d5:39:bb:21:db:23:33:1f:41:6e:dd:3d:72:af:69:c3:
         23:56:64:3a:69:fe:aa:9f:71:87:85:4e:17:db:94:76:43:2b:
         ee:7f:ff:a8:6a:ec:9d:9a:32:c5:9e:9f:46:3d:71:cd:f9:50:
         ab:79:b4:1f:aa:28:b8:2e:71:30:e3:7a:3c:b0:e8:e8:b6:9f:
         a2:0d:aa:1d:72:ca:7c:5b:42:f2:3a:0f:ea:f5:74:58:44:fd:
         71:39:72:36:0e:d3:8f:33:2c:42:9b:fe:5d:e9:ca:a0:bb:57:
         1b:be:03:58:2c:d7:cc:42:86:12:39:92:7a:b1:a2:aa:00:0f:
         ca:8b:58:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:55 2024 by rpki-client on console-ams.rpki-client.org