Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/a3fad13f-ff48-35d4-a53b-0a8971f6935c.roa
File:                     a3fad13f-ff48-35d4-a53b-0a8971f6935c.roa (raw, json)
Hash identifier:          o0dTVFNZUZN9aN1Gn7kr1Izq+EjzFW2MMUJ9TYXg+LA=
Subject key identifier:   60:2F:73:BD:3E:84:EF:55:48:FC:1F:C9:4C:45:F7:C7:AD:AF:1C:8D
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583FB5035BC4052172F339688200
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/a3fad13f-ff48-35d4-a53b-0a8971f6935c.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     1239
IP address blocks:        104.234.236.0/24 maxlen: 24
                          104.234.237.0/24 maxlen: 24
                          104.234.238.0/24 maxlen: 24
                          104.234.244.0/24 maxlen: 24
                          104.234.245.0/24 maxlen: 24
                          104.234.246.0/24 maxlen: 24
                          104.234.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b5:03:5b:c4:05:21:72:f3:39:68:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=9e422a07-d156-4aa9-8fad-5d3be6c1a57a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3c:51:01:cc:31:69:4b:92:7f:eb:91:84:20:
                    83:ed:be:6f:a6:b7:0d:1c:9d:f1:2f:1e:64:69:f2:
                    28:25:20:ce:0c:48:cb:73:02:5d:bb:a0:b0:bd:0c:
                    32:0a:05:f7:0c:96:27:89:b4:90:8e:0a:05:d3:ab:
                    06:be:14:92:aa:5a:cc:bb:21:8e:0a:f3:b8:61:e4:
                    83:89:5a:26:56:f3:e8:1d:d8:b1:b3:31:d7:85:15:
                    3c:c2:5b:e1:c2:32:fe:bd:90:fc:3e:4e:29:fa:bd:
                    f0:3a:ef:aa:cb:16:85:1b:57:f4:02:79:03:fb:b8:
                    8c:9f:d5:74:d2:bf:0d:b2:3e:96:a8:70:20:1f:13:
                    d0:e7:01:8a:00:6f:8e:9c:fb:ae:7a:ae:04:ca:78:
                    ee:ca:1b:be:43:47:84:8a:55:a3:fe:2e:45:31:0b:
                    b0:b4:7b:12:48:5b:e3:38:7d:7a:1e:9e:d3:18:56:
                    8b:9e:a0:5f:f8:fc:9e:90:31:b4:ec:92:4e:6b:ee:
                    ed:fb:3c:cf:87:9b:b1:64:76:7c:db:31:7b:22:32:
                    cb:b2:f2:46:85:e9:db:6c:97:d8:b1:a8:dd:c2:c9:
                    84:bc:7b:22:74:58:fd:6f:cc:39:53:07:a9:d9:b4:
                    b7:18:57:80:41:33:3f:59:43:13:bf:35:3f:77:41:
                    ed:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2F:73:BD:3E:84:EF:55:48:FC:1F:C9:4C:45:F7:C7:AD:AF:1C:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/a3fad13f-ff48-35d4-a53b-0a8971f6935c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.236.0-104.234.238.255
                  104.234.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:df:f6:e4:d7:dd:0c:3f:0f:a0:75:b8:2e:9c:15:50:75:48:
         3d:ce:75:b1:7d:62:d2:7b:1e:9e:f7:12:92:32:35:fe:a0:c6:
         f3:87:c0:46:e5:94:1a:d2:67:61:94:dc:70:99:8e:21:2b:ce:
         ea:a2:d0:33:8a:af:e8:9e:db:9c:fe:9a:46:44:2f:7a:57:34:
         1e:42:9c:a2:33:a1:b3:f1:67:75:1c:c5:87:7a:fd:70:b7:a9:
         c5:e8:0e:38:81:e1:82:48:90:ad:59:19:6f:61:3a:56:0d:13:
         a8:81:6c:b2:81:8d:fd:47:ec:50:bf:03:90:b7:37:a5:d6:78:
         c0:4e:6c:83:9f:c9:e9:57:74:5a:e5:db:3c:4a:5b:d2:33:91:
         cb:09:79:3e:ca:c9:6b:7e:ab:2e:8e:65:b7:c6:86:bb:54:0a:
         ac:9e:2d:be:47:d9:fe:5d:e0:5d:eb:07:55:7b:ad:3d:f2:90:
         3d:51:58:23:be:42:38:15:36:0e:d7:32:3b:ca:e8:3e:02:2e:
         ac:40:ce:d2:67:ad:d9:e7:51:fd:e7:15:c0:c4:5f:fc:75:78:
         4f:e3:12:bb:c1:f6:ab:ae:d6:eb:f9:7f:e4:bf:83:e5:3b:d5:
         71:be:cb:bb:f5:81:69:7e:a1:ef:d1:96:54:55:9f:c5:56:56:
         1c:b9:5b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:49 2023 by rpki-client on console-ams.rpki-client.org