Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/42231b6c-4c9f-37ed-946b-613c96a6e233.roa
File:                     42231b6c-4c9f-37ed-946b-613c96a6e233.roa (raw, json)
Hash identifier:          /kswKRygMvgKLGKRRW6DC8u82etHqVRSMUpNoze4kMQ=
Subject key identifier:   EF:52:B5:C6:E0:30:75:58:FA:0B:02:63:AD:C4:E2:75:7D:BD:AA:EF
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583F9D0C6A76629C52AE3F81CB00
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/42231b6c-4c9f-37ed-946b-613c96a6e233.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     7029
IP address blocks:        104.234.36.0/24 maxlen: 24
                          104.234.38.0/24 maxlen: 24
                          104.234.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:9d:0c:6a:76:62:9c:52:ae:3f:81:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=326d86c3-3223-425a-a841-73dae0c27ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b2:49:81:70:bf:0d:c1:e9:ba:8d:21:7d:a6:
                    09:44:ce:4e:79:42:df:b9:bf:e4:8a:44:d8:79:1f:
                    75:3f:59:0f:14:ce:15:60:1d:d7:fe:bc:1f:a8:b7:
                    51:81:b4:83:48:30:5b:a1:87:2c:47:c2:56:08:86:
                    c5:c8:c4:a6:9b:89:30:8b:c7:4e:a4:3a:cf:46:d3:
                    51:7f:27:6f:2e:b6:bc:57:3a:06:e4:e9:6d:1e:4d:
                    b9:ee:b4:92:fa:74:1b:d3:91:5d:28:1d:e6:1f:36:
                    16:f9:09:c4:8f:a0:5c:1d:b4:42:61:1d:2c:6c:38:
                    ff:7a:9e:7e:fe:a1:a6:d2:5b:85:58:94:5a:b6:87:
                    99:82:2f:da:fb:42:bf:0f:88:3e:15:be:ba:b5:ba:
                    56:4f:f3:93:ab:c2:ee:aa:ea:80:e2:9c:35:4f:d0:
                    08:89:51:9c:30:cd:88:1d:01:6b:e1:6b:f1:bf:0d:
                    a3:71:66:f1:f8:37:52:42:36:70:af:e2:2c:25:ca:
                    a6:a7:ad:c6:59:df:3f:90:b4:85:f4:bf:28:2c:b5:
                    45:28:e0:6f:b2:df:94:38:8a:30:c0:1e:18:7f:7b:
                    11:74:60:86:b2:26:63:66:04:b8:34:49:71:51:c7:
                    f6:c6:37:b1:80:91:81:8c:53:4c:b0:68:33:c8:2d:
                    14:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:52:B5:C6:E0:30:75:58:FA:0B:02:63:AD:C4:E2:75:7D:BD:AA:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/42231b6c-4c9f-37ed-946b-613c96a6e233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.36.0/24
                  104.234.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:70:da:0f:08:a9:65:80:cd:0c:03:03:10:3d:ea:95:0c:f5:
         f7:e1:ec:5f:3f:5d:e1:ba:58:05:b0:86:43:ad:c8:65:20:b6:
         c5:99:0d:c7:56:8d:5e:58:37:c8:f2:ad:36:2c:88:58:c0:b0:
         73:ae:b4:ff:83:05:e0:24:c0:6e:a2:97:c9:b3:7a:9f:ff:86:
         c3:cc:fc:28:bd:45:fa:58:9a:2b:34:46:38:1c:77:1e:8b:30:
         4e:80:fd:4a:ad:4f:ac:a4:f6:01:18:ca:f9:83:24:f8:c2:cc:
         b3:64:37:a8:78:71:f0:f9:76:46:8d:f1:cc:df:f1:49:ba:cc:
         82:be:32:75:4c:fe:a7:bb:de:5f:d3:3b:81:2a:a0:aa:d8:1b:
         41:0b:a7:1c:da:93:52:f6:59:1c:74:17:cd:52:7d:aa:10:f9:
         23:6d:6e:cb:0d:21:0b:99:df:54:87:9b:73:56:ca:b1:bf:5d:
         ca:a4:1b:69:54:08:33:88:72:d8:1b:2a:8b:16:0f:a0:fe:e1:
         51:5d:78:57:12:e5:f6:a8:b7:d8:68:06:cb:ca:87:f0:9f:40:
         b7:a6:0e:f1:ac:64:19:69:b0:5d:f9:cd:03:11:77:d1:fd:1b:
         3b:86:a0:f6:29:36:d5:c1:96:55:89:64:c0:04:ac:f7:90:42:
         62:87:8c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:54 2023 by rpki-client on console-fra.rpki-client.org