Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/424559f4-c86f-3c00-8557-1f395c3f914b.roa
File:                     424559f4-c86f-3c00-8557-1f395c3f914b.roa (raw, json)
Hash identifier:          yWglwhohFPOfI39pteEqJQv9kFxWzpN37ZH+L2ToSV4=
Subject key identifier:   FF:67:81:20:17:0B:38:9C:40:4F:33:9F:B5:49:CA:C1:B3:CC:AE:7F
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328584004A2B9590BBB029D2E832C00
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/424559f4-c86f-3c00-8557-1f395c3f914b.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     212238
IP address blocks:        104.234.58.0/24 maxlen: 24
                          104.234.59.0/24 maxlen: 24
                          104.234.62.0/24 maxlen: 24
                          104.234.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:04:a2:b9:59:0b:bb:02:9d:2e:83:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=24588b57-3ca1-4030-adcb-7a9ecd624818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7a:c8:46:8c:cb:99:cb:d5:04:2e:be:4b:1a:
                    f9:ee:e1:ca:23:e9:db:32:30:e8:d1:df:fc:d8:81:
                    46:18:c0:90:f0:c5:21:9f:53:40:a4:73:c1:45:c7:
                    38:cf:f8:2c:70:21:68:06:cd:a7:49:c5:6d:e1:91:
                    9d:57:ac:d3:51:c9:94:98:ac:6d:55:9c:69:da:92:
                    9f:c2:03:84:67:35:30:f9:5a:ed:9e:e0:3a:e0:2e:
                    1e:83:2b:cf:10:a2:9b:d7:ae:49:76:1a:73:21:11:
                    60:b3:80:7b:da:09:b0:08:22:74:bb:be:26:71:58:
                    ae:dd:b5:00:f0:72:5a:82:9e:b3:82:b3:1b:f3:34:
                    24:7c:64:ec:c4:7a:01:50:7e:a8:ef:10:9c:d1:a9:
                    aa:e7:55:3f:74:35:3d:80:39:e8:7d:9a:89:0f:58:
                    b0:c5:92:f6:b6:22:f0:24:17:1c:f4:8a:99:3d:f9:
                    01:ce:39:fb:a6:f8:9e:9a:b0:b5:b0:85:38:3f:c1:
                    e3:45:50:84:ca:54:f8:5b:62:1c:d1:39:36:e8:e2:
                    84:f8:0f:e1:c1:46:9f:b2:eb:97:0e:46:ad:c7:cf:
                    7d:29:0c:35:f3:d9:84:13:34:ac:a9:96:f7:92:a8:
                    27:17:6a:6c:67:da:a3:ec:a9:4e:c7:2a:cf:ac:62:
                    47:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:67:81:20:17:0B:38:9C:40:4F:33:9F:B5:49:CA:C1:B3:CC:AE:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/424559f4-c86f-3c00-8557-1f395c3f914b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.58.0/23
                  104.234.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:4c:ef:22:f1:c7:97:59:c6:ec:58:60:50:8d:eb:92:d2:f3:
         8b:a9:a7:7d:67:a4:31:24:fa:c6:99:b3:4c:7c:1a:8f:12:a0:
         62:7e:b9:7f:ec:f9:ea:97:82:c3:9a:74:d5:bf:f2:14:b6:d1:
         0d:6c:59:9f:66:bc:57:05:37:50:e9:df:fa:5c:5a:ef:a0:76:
         25:cd:df:73:16:cb:19:79:03:fd:1b:8b:9d:6c:ce:f1:2e:25:
         fb:03:f6:c5:65:ec:c3:92:50:01:b4:aa:87:4d:a0:15:59:0d:
         dc:b1:83:a0:ae:c7:af:81:f9:36:9d:93:bf:52:52:6c:f5:61:
         65:c0:b0:a3:1d:dd:b3:fa:55:59:93:1c:7c:0f:40:a9:7f:da:
         f8:b2:8b:6d:a2:a3:2f:fd:9f:b4:79:f0:70:4c:2d:69:e5:bf:
         a0:a1:85:cb:65:7d:07:1f:bd:24:e3:c4:6f:43:7a:b2:f7:bb:
         0a:5f:0d:32:c2:a4:57:5e:08:61:76:c9:f1:eb:cb:cc:2c:05:
         7e:01:25:7d:2b:58:7a:44:e4:bb:80:ed:3c:78:af:00:a3:76:
         ba:11:2f:00:24:fc:18:30:3f:63:b3:26:53:2c:e0:9c:63:82:
         57:d8:13:fd:d1:0c:f0:7e:63:d6:ed:fc:05:f9:f9:4e:46:65:
         b2:26:a9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:58 2024 by rpki-client on console-fra.rpki-client.org