Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/bd24baf5-86f0-3b62-97a5-80cd9724eaac.roa
File:                     bd24baf5-86f0-3b62-97a5-80cd9724eaac.roa (raw, json)
Hash identifier:          0m8YGXtkQmxzuv+9/b0HNrtmgyvAX++k/wqoit/l9BA=
Subject key identifier:   23:F2:21:37:F1:43:EE:83:0A:01:BD:51:58:45:BC:3C:90:35:CA:93
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F432858400A9C1F90E8EE7FBE17B0CF00
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/bd24baf5-86f0-3b62-97a5-80cd9724eaac.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Fri 28 Feb 2025 05:00:00 +0000
asID:                     14445
IP address blocks:        104.234.7.0/24 maxlen: 24
                          104.234.17.0/24 maxlen: 24
                          104.234.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:0a:9c:1f:90:e8:ee:7f:be:17:b0:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Feb 28 05:00:00 2025 GMT
        Subject: CN=b25a1e8c-60b5-412b-9d42-7dde00795c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c8:db:a6:cd:06:17:e2:67:c9:e9:62:ee:b8:
                    03:7a:dc:8f:a1:ab:af:b6:9c:76:ea:56:e9:76:17:
                    45:2c:16:49:51:72:73:31:a2:d9:0e:34:9a:af:1a:
                    7a:b8:9e:1b:1b:27:1f:2a:de:3b:d1:dd:2e:d1:a0:
                    81:f9:8e:57:dd:87:17:fd:be:41:7b:e2:e3:0e:5c:
                    41:5c:fb:1a:7a:1d:e3:b3:fc:63:5d:93:bb:67:03:
                    f8:0a:0b:7c:ac:fd:ae:60:8c:89:6b:70:a6:94:67:
                    a1:52:f6:04:ad:f2:98:b5:44:14:fc:67:47:98:2c:
                    23:43:74:68:83:4b:c3:08:ac:9b:1d:4c:4b:8f:be:
                    96:7b:08:80:ac:a1:bc:8a:1b:ef:01:6d:20:1b:26:
                    d1:ac:a2:3d:3d:bc:93:6e:58:97:f2:f3:03:d0:e6:
                    d0:fe:51:1a:6e:00:7e:97:52:97:f3:93:5d:78:39:
                    01:a7:12:23:a6:23:13:c3:d0:ba:a6:76:86:1e:3d:
                    7a:37:ec:47:51:a6:a4:3c:5f:b9:b9:12:dd:ca:b7:
                    21:84:8f:3f:e4:92:3d:d3:2b:1a:f3:05:d3:9f:80:
                    64:1d:88:6a:5b:51:66:54:9d:ac:c6:c0:dd:5d:1b:
                    c4:45:58:85:9a:7d:54:0d:0b:5c:7b:9b:46:3e:f6:
                    e8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F2:21:37:F1:43:EE:83:0A:01:BD:51:58:45:BC:3C:90:35:CA:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/bd24baf5-86f0-3b62-97a5-80cd9724eaac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.7.0-104.234.8.255
                  104.234.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:0c:3c:d7:d1:36:b6:21:64:d5:5e:5a:f0:52:d6:a1:ac:b6:
         fb:21:0d:dc:28:f6:00:a7:94:2d:e3:bc:4c:40:e3:3b:07:19:
         bd:0f:51:a2:64:d7:59:7f:60:bc:76:d9:12:15:3a:23:dd:b7:
         23:05:e8:c7:75:9d:47:94:3a:61:ce:a1:91:23:37:f3:72:be:
         3e:c0:a2:32:62:ae:2f:2a:52:b2:44:d5:85:ed:91:46:fe:ea:
         76:d7:5f:43:5a:da:4d:10:e1:81:8d:1e:d8:42:cd:5d:96:a0:
         15:cb:8a:8c:d9:d3:90:35:f8:2d:b8:6f:54:32:85:de:84:45:
         63:84:37:2d:91:24:5e:d3:bb:c2:27:97:d0:d6:a3:0d:3d:09:
         a1:37:c8:b3:df:73:9f:b7:ab:bb:bf:5d:bc:14:ef:6f:46:fe:
         71:ea:e9:76:fb:f9:6e:32:5f:43:d1:7d:9d:92:e5:01:1e:f4:
         61:7c:ed:a2:01:94:da:fa:16:83:e8:e1:55:f5:cd:da:9c:7c:
         04:3b:78:f2:9e:4f:9a:e6:d3:0e:5f:50:9d:67:55:9f:79:e3:
         67:5c:12:0a:54:b9:2a:f6:38:fa:21:b8:ad:a1:c1:30:76:1b:
         b3:1b:45:da:46:bb:dd:88:b1:28:f1:c3:9b:67:64:d0:7e:a0:
         3b:fc:0c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:56 2023 by rpki-client on console-fra.rpki-client.org