Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/74d8ce22-4f54-32a9-b1bc-0e5711d8d703.roa
File:                     74d8ce22-4f54-32a9-b1bc-0e5711d8d703.roa (raw, json)
Hash identifier:          JbKi7D1M576cWkWpHn3nqdLDKXmy22KO8Fy2LsU+oWM=
Subject key identifier:   D8:AE:47:BD:50:E5:22:D4:CB:04:86:02:9A:82:68:13:3F:EA:0B:38
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583FCC996D3C6E4E944388C7F880
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/74d8ce22-4f54-32a9-b1bc-0e5711d8d703.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     59711
IP address blocks:        98.142.252.0/24 maxlen: 24
                          206.53.48.0/24 maxlen: 24
                          206.53.53.0/24 maxlen: 24
                          206.53.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cc:99:6d:3c:6e:4e:94:43:88:c7:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=5eb9032a-12c8-43b4-98f1-72ea47b57995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:40:5d:5a:04:fa:52:ec:bd:0d:95:52:50:d0:
                    6d:0d:7d:ed:91:18:a3:83:1e:61:4f:7e:d6:00:e0:
                    28:2c:5a:81:4e:78:15:9e:a4:0d:8b:87:3c:c5:80:
                    24:a2:60:77:d1:98:3b:01:64:99:88:62:69:f7:f9:
                    e1:de:7d:60:1f:e7:52:93:bd:2e:fa:bb:d9:36:5b:
                    9d:10:d3:5a:82:4c:ce:ff:e3:4c:2c:eb:33:15:d4:
                    0f:33:11:92:f3:33:ff:65:24:84:a3:93:2e:f8:e2:
                    ef:b2:89:e1:ff:d5:07:f6:cb:fb:dc:55:e3:f0:82:
                    1b:83:11:35:e2:c7:2d:98:b2:ce:39:6c:6a:5b:f7:
                    64:15:f8:f9:71:09:44:96:9e:e1:57:2e:f1:9e:57:
                    8d:54:61:e2:87:de:cb:52:df:db:8d:77:00:5b:b2:
                    91:2f:a5:6a:2f:54:5c:66:98:df:9b:99:0e:b7:9c:
                    96:2b:79:fc:df:66:78:0d:94:d2:f9:e2:f9:94:89:
                    54:76:58:62:53:9a:c1:31:02:38:f1:ed:63:e1:17:
                    fe:ed:51:b5:e4:b9:e7:ce:59:db:85:da:75:90:6e:
                    59:b5:dc:08:d0:5a:98:9e:27:eb:e4:b0:0c:96:91:
                    71:e4:db:e4:d1:d2:52:d6:a5:ef:32:6c:ec:7e:ca:
                    30:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AE:47:BD:50:E5:22:D4:CB:04:86:02:9A:82:68:13:3F:EA:0B:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/74d8ce22-4f54-32a9-b1bc-0e5711d8d703.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.252.0/24
                  206.53.48.0/24
                  206.53.53.0/24
                  206.53.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:32:03:8c:b5:6c:eb:6d:23:b3:e9:c1:3d:af:e4:8f:15:bc:
         69:5b:2c:01:fe:8a:28:cd:5e:f2:5e:6e:99:6b:ff:f6:1f:29:
         c5:ab:2f:6c:e3:4c:f3:f1:48:f4:e6:df:92:12:d4:c7:55:2c:
         d7:78:d8:92:1b:b0:a9:f5:2d:f1:67:c3:47:7a:d7:c3:8b:1a:
         43:52:12:2b:b5:05:8d:57:05:c0:52:11:52:58:41:ee:f0:1c:
         b7:a7:f9:db:12:58:0d:36:6e:6b:7a:2b:f4:bd:0c:a1:ef:42:
         ae:0d:9e:81:ab:9f:07:ef:99:57:ab:53:f5:ec:ac:12:65:f8:
         4e:43:17:e6:67:13:13:9a:f3:0f:36:04:72:85:6c:db:7d:de:
         2a:99:f4:e8:12:fc:39:1f:d3:24:ea:8d:d9:f6:6b:45:62:5e:
         32:ea:84:8a:53:3d:7f:dd:a8:54:55:cb:6d:15:98:6b:20:f1:
         76:09:fb:e3:f7:42:22:b6:eb:fa:f2:8d:28:ad:3c:c4:84:38:
         a0:d6:ac:4b:1e:b4:b8:13:dd:3a:a1:81:9e:b8:88:0f:04:a5:
         34:87:ed:58:00:e1:90:9c:5d:62:f8:cd:5c:00:68:78:3e:fb:
         ba:b3:f3:21:10:b7:05:64:3e:b9:be:bb:16:7f:10:06:a7:9a:
         87:79:7a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:55 2023 by rpki-client on console-fra.rpki-client.org