Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ea0a4a87-1d3a-3102-a324-82c17df301aa.roa
File:                     ea0a4a87-1d3a-3102-a324-82c17df301aa.roa (raw, json)
Hash identifier:          doEqWHWIg3n6CP3ZmSdLzoaSxJc7AbgPdVSGaidLUws=
Subject key identifier:   9A:28:16:02:86:ED:28:35:8F:24:9E:E2:1C:44:39:6B:81:FA:84:D4
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583ED64B3F30F88E6AB8A5E3D9C0
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ea0a4a87-1d3a-3102-a324-82c17df301aa.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     53397
IP address blocks:        104.234.222.0/24 maxlen: 24
                          104.234.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:d6:4b:3f:30:f8:8e:6a:b8:a5:e3:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=3f230251-8644-4da1-b3c0-6aa29b2f3bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:50:87:0a:7f:d8:72:4c:43:2f:8c:83:b0:ef:
                    97:84:1f:aa:b4:f3:f5:b2:e0:b8:ed:1b:90:dc:6c:
                    59:56:8e:28:1b:a8:27:e6:a5:84:e3:06:73:c5:18:
                    3f:b0:44:ad:e7:65:6e:90:76:55:86:84:ff:78:82:
                    e6:cf:af:0f:42:7e:32:cd:3c:c7:b8:81:ca:b7:0e:
                    77:bd:d7:11:ff:4a:ab:b3:ed:5f:a7:01:67:22:97:
                    57:90:c6:f9:d3:b2:59:5e:ae:a9:1c:28:ac:41:bd:
                    c0:76:ae:68:ce:85:52:29:fc:3e:7b:12:b5:32:7e:
                    01:ba:14:41:4c:f0:03:2f:34:cf:bb:41:a1:52:17:
                    65:df:11:4f:72:32:42:8b:3b:84:51:d4:41:80:0f:
                    b0:c3:e4:da:09:ba:1b:e2:57:90:04:42:0a:99:59:
                    40:8f:87:79:8e:b8:61:74:18:d6:86:0b:37:02:d8:
                    2b:69:73:40:1d:d7:b1:89:da:50:a6:dd:0c:f3:88:
                    ca:43:dd:16:01:17:40:07:52:b7:a3:89:35:2a:d1:
                    2e:2f:d9:1d:e8:7d:7e:14:43:52:1a:a4:15:96:f2:
                    6d:db:6e:3a:52:f6:f1:92:1c:f4:a8:48:9c:d8:f4:
                    19:14:93:77:12:cc:87:61:a8:72:de:3b:83:bb:da:
                    3d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:28:16:02:86:ED:28:35:8F:24:9E:E2:1C:44:39:6B:81:FA:84:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ea0a4a87-1d3a-3102-a324-82c17df301aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.26.0/24
                  104.234.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:ad:f6:0c:c7:10:9a:f6:10:13:8d:13:fb:81:20:b0:62:aa:
         ad:f4:c1:d5:c1:fd:30:9e:b3:7d:c3:75:e7:51:46:a1:9e:b1:
         f1:2d:3b:62:be:73:26:b3:54:ef:25:bb:27:ff:a7:54:69:99:
         79:00:57:b4:f1:08:b1:a6:be:28:29:46:8a:3e:bf:cb:75:ac:
         a9:59:f0:76:1f:1a:82:26:fb:62:80:21:b5:b9:7d:88:0c:ae:
         c1:95:16:64:59:3f:f4:c3:05:a0:98:1a:df:fe:51:c2:4f:01:
         41:67:5f:8e:e4:f4:8b:b8:ce:35:bd:d1:e0:f0:7d:73:b9:1c:
         34:8a:3d:44:6d:7f:ee:3b:86:1a:e1:27:34:e4:da:80:cf:0c:
         c7:e8:9e:5c:7d:17:9a:d4:4f:55:7f:91:24:66:ea:8e:97:ab:
         73:f8:11:8b:16:1c:88:56:7a:36:df:f7:53:83:30:1e:a9:73:
         f8:eb:ad:14:f4:8f:a9:fd:c6:06:b1:d8:47:b5:71:87:ea:46:
         05:4f:8f:10:c2:22:c8:c6:2a:af:b6:e6:66:a9:75:6d:f1:43:
         9e:88:1a:a7:4e:a5:9a:3e:87:6a:d8:50:9e:3c:ba:d2:9e:cc:
         b6:38:af:f3:14:bd:7d:16:11:7a:f8:cc:01:08:3e:40:13:79:
         60:ea:1e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:56 2023 by rpki-client on console-fra.rpki-client.org