Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/6be108aa-d67c-3b9e-bfee-f4f78e90da42.roa
File:                     6be108aa-d67c-3b9e-bfee-f4f78e90da42.roa (raw, json)
Hash identifier:          fkmpuWvN6xqWSRqbbWueC8UvAyaQMEHI3x5aZ4QmJ3s=
Subject key identifier:   7B:08:51:DF:71:70:4A:D0:4A:D3:79:0B:11:45:5A:60:9F:57:8E:6A
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583FB66FA16127667A9975622680
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/6be108aa-d67c-3b9e-bfee-f4f78e90da42.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     1239
IP address blocks:        104.234.236.0/24 maxlen: 24
                          104.234.245.0/24 maxlen: 24
                          104.234.246.0/24 maxlen: 24
                          104.234.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b6:6f:a1:61:27:66:7a:99:75:62:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=8645a94e-8092-4a3f-924e-f2d543e4f255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:98:6d:18:e2:23:bf:14:45:38:00:78:d7:45:
                    ec:e0:78:82:e8:19:23:7f:c4:b7:59:6a:f9:a0:f3:
                    4f:c7:93:13:d5:f6:24:93:ee:54:9a:24:9c:54:d0:
                    47:c0:47:76:0e:e0:f9:04:c6:10:80:05:8a:9d:2a:
                    79:02:47:ef:eb:d9:0d:8e:dd:d6:c4:e2:02:bb:75:
                    08:dc:0f:7a:43:c6:65:a3:64:12:7e:58:a0:e6:6e:
                    99:38:3a:4c:7a:4d:ba:1e:8c:6e:61:60:7d:4e:fc:
                    22:9d:a3:d3:66:20:60:5d:22:72:d4:d6:6c:8c:c1:
                    e4:73:b9:37:1d:21:9f:88:c5:4f:d2:d9:14:35:15:
                    e4:12:79:91:08:f4:79:ab:eb:cd:f0:35:08:9e:97:
                    e7:b6:d0:ce:b0:5b:62:16:b4:38:28:f5:6c:96:e2:
                    3f:2d:38:c6:53:0d:45:df:06:f4:21:37:9c:fd:69:
                    2e:3d:e3:a4:f0:c9:ff:6e:2e:dc:fa:33:ca:de:a7:
                    b2:0d:e8:69:a0:13:3c:86:5e:ef:69:37:26:f4:ae:
                    ad:4f:b5:df:c2:aa:3a:88:f7:1c:31:07:93:e5:44:
                    99:f0:f4:df:a2:e4:d9:49:3b:02:e3:d3:d4:43:33:
                    89:aa:10:58:9b:7c:dc:48:54:f2:aa:39:52:d2:55:
                    9b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:08:51:DF:71:70:4A:D0:4A:D3:79:0B:11:45:5A:60:9F:57:8E:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/6be108aa-d67c-3b9e-bfee-f4f78e90da42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.236.0/24
                  104.234.245.0-104.234.247.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:8e:4a:88:69:6a:05:1c:4d:09:81:07:f1:8d:4f:f2:1c:a5:
         00:13:79:65:7b:8d:b6:1b:86:5b:75:c4:ed:e2:52:07:c5:47:
         9e:d9:95:46:60:4c:90:90:6f:6e:a2:9a:1b:1f:53:32:fb:25:
         78:a8:75:c6:04:27:69:49:0b:bd:18:05:cd:e7:d3:f3:76:ac:
         32:6b:5c:ca:74:d9:ae:0d:63:3b:f9:57:da:da:c3:27:d8:80:
         0e:1d:b0:07:00:41:68:95:cd:ce:c9:4c:fb:cf:e5:c5:0a:7e:
         b1:72:d8:e3:7e:d3:ae:e8:45:8f:f9:7f:37:9f:6d:fb:3b:8b:
         86:db:e2:9e:e8:47:31:b1:a8:d0:b7:77:e7:35:b2:cf:39:6e:
         8a:b1:05:e2:cf:ba:3a:33:ad:23:5e:f5:c7:66:db:d1:d0:9e:
         6a:de:f4:f7:87:3d:1a:72:70:d7:b5:12:8f:e2:47:e9:7d:4c:
         84:96:4e:05:da:d2:b1:55:a1:1c:18:34:e2:ba:8a:f9:38:c9:
         27:4f:16:d4:ec:5d:5a:d3:9d:eb:ff:f9:d8:6b:0f:80:49:58:
         80:6e:ca:91:58:02:2a:4c:a8:6d:6c:d5:84:6f:bf:ef:fb:ea:
         1f:c2:f0:d4:ff:d3:67:bf:45:d7:1d:f0:b5:0b:b0:db:5d:13:
         81:29:99:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:49 2023 by rpki-client on console-ams.rpki-client.org