Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/a941e73a-39c8-332a-aac5-0e4ee1681fa0.roa
File:                     a941e73a-39c8-332a-aac5-0e4ee1681fa0.roa (raw, json)
Hash identifier:          qoQIEPChJG6X7Dr0gejZirIbSFaBuhSP8AD5HZnxrAw=
Subject key identifier:   69:0A:9F:A0:36:F1:29:EA:AB:1D:ED:F1:D4:03:D7:A6:D6:2B:2B:D2
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583F8BEEFED217F1F5149E0D2000
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/a941e73a-39c8-332a-aac5-0e4ee1681fa0.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     1239
IP address blocks:        104.234.27.0/24 maxlen: 24
                          104.234.28.0/24 maxlen: 24
                          104.234.29.0/24 maxlen: 24
                          104.234.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8b:ee:fe:d2:17:f1:f5:14:9e:0d:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=4b85f767-edc8-47b2-86b3-262b238395fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b7:34:e3:d6:83:56:34:e7:87:2e:e1:ea:61:
                    8c:5e:46:34:88:68:4a:31:7d:77:46:1b:82:89:c2:
                    2e:e4:d5:2e:a4:28:7d:75:b6:b4:be:cc:7e:2e:25:
                    d1:15:0d:7e:4b:b1:0b:75:a4:86:ea:c9:9a:79:9a:
                    32:a4:59:fe:b5:c2:8f:c6:05:60:07:d7:76:8f:6c:
                    7f:0d:73:f4:ca:6a:d6:ce:42:50:f3:f0:b0:69:60:
                    b5:89:1e:c0:27:ab:f1:d6:33:fc:7e:67:b2:c4:e4:
                    32:3b:6c:8d:76:be:42:08:2c:35:e6:41:96:df:e0:
                    56:c2:a3:51:be:75:fd:bb:a9:ce:89:aa:2e:15:8f:
                    19:5c:df:29:40:d4:f1:53:bd:c4:2e:2d:8c:86:6e:
                    5d:6a:98:6e:63:92:03:3a:54:8f:fb:cf:e2:5c:20:
                    eb:7f:47:36:f7:54:bb:31:e6:cb:e6:d9:85:e8:98:
                    77:51:f7:14:3b:38:d7:88:93:56:22:f0:4d:30:93:
                    2d:87:05:6d:13:15:fd:53:bd:62:bc:5f:24:07:0a:
                    65:47:51:31:bb:fe:bc:24:f6:ef:32:3f:f8:43:56:
                    fe:74:67:04:ae:d7:0f:ed:e5:38:ad:3f:a1:1b:7a:
                    aa:04:b9:fa:08:e0:4a:7a:80:a5:35:d6:c3:57:0f:
                    4d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0A:9F:A0:36:F1:29:EA:AB:1D:ED:F1:D4:03:D7:A6:D6:2B:2B:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/a941e73a-39c8-332a-aac5-0e4ee1681fa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.27.0-104.234.29.255
                  104.234.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:f3:01:b2:00:84:ce:01:86:91:b2:79:0a:19:b3:ce:b5:e6:
         50:33:94:f0:5e:30:2d:af:b1:9d:d5:2a:54:0e:37:a3:92:63:
         c0:39:30:72:c6:57:49:59:51:79:d5:fe:6e:39:8f:11:05:b2:
         3e:de:ae:cc:2c:ec:a2:2f:24:09:37:f2:9a:59:98:f9:68:04:
         e3:ef:2f:be:bf:2c:ee:18:b7:0c:be:4e:15:8e:40:c3:92:15:
         da:7c:4e:0c:9f:f5:da:99:a7:f3:a2:f6:45:f8:1e:9e:04:f2:
         7c:22:08:f7:a6:ac:41:71:70:e6:97:4c:c9:a2:17:c0:83:91:
         54:c6:07:bc:8a:01:b7:aa:11:0c:46:cc:c8:40:c9:f8:b8:e6:
         f7:c6:1a:df:e3:00:eb:be:88:74:f3:e4:b5:0d:55:82:93:d9:
         64:00:0c:91:00:33:c2:02:c3:11:94:46:f0:8b:4c:0c:9b:a1:
         e3:7b:69:2a:28:dc:07:69:be:4c:70:f6:d6:fc:a4:df:9c:90:
         a3:2f:c6:90:e4:7c:ac:ee:27:55:0a:7e:f1:f3:06:eb:08:aa:
         38:2b:a5:c7:40:61:db:7b:37:19:f1:c8:2f:7f:1a:ff:3a:4c:
         6e:42:e2:b8:89:e5:10:3c:eb:2a:68:d5:0d:46:57:b5:55:e8:
         52:05:9a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:49 2023 by rpki-client on console-ams.rpki-client.org