Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/f5e4b5d8-af89-3adc-bb50-e468ff4708a2.roa
File:                     f5e4b5d8-af89-3adc-bb50-e468ff4708a2.roa (raw, json)
Hash identifier:          C1bwSveG5eisRVZbZqcZr8cWAB6MAtdKUD3koiMJ4sQ=
Subject key identifier:   C1:D3:1B:9A:28:65:8E:34:6E:04:6F:5F:59:9F:D9:42:BA:C7:79:0D
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583D1F68E7D3E21EF5F2B0DD2800
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/f5e4b5d8-af89-3adc-bb50-e468ff4708a2.roa
Signing time:             Mon 13 Dec 2021 05:00:00 +0000
ROA not before:           Mon 13 Dec 2021 05:00:00 +0000
ROA not after:            Tue 31 Jan 2023 05:00:00 +0000
asID:                     1239
IP address blocks:        104.234.166.0/24 maxlen: 24
                          104.234.179.0/24 maxlen: 24
                          104.234.162.0/24 maxlen: 24
                          104.234.163.0/24 maxlen: 24
                          104.234.164.0/24 maxlen: 24
                          104.234.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:1f:68:e7:d3:e2:1e:f5:f2:b0:dd:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 05:00:00 2021 GMT
            Not After : Jan 31 05:00:00 2023 GMT
        Subject: CN=e89773c9-d5cc-4681-a1e2-5fa8c65f745e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:40:d6:99:94:92:fc:6b:d5:61:03:e5:d0:eb:
                    6f:a0:cc:0d:05:01:27:f8:e8:33:b6:d6:c5:4d:bf:
                    06:fd:60:96:dd:06:3c:96:9b:e0:d4:fb:78:83:0e:
                    65:07:1b:fc:a3:17:ac:d7:b4:4a:7c:2a:2a:d6:e4:
                    e3:65:8e:2a:2e:87:26:09:6c:07:f8:b0:23:ea:cb:
                    52:ae:e0:ef:d3:66:62:cc:ac:76:58:40:29:19:fb:
                    a2:1f:0b:0d:2f:9c:07:fd:61:a0:55:af:57:4f:c4:
                    46:10:11:33:fe:4f:e8:ca:ea:2e:ff:1b:67:cb:a2:
                    f4:89:ca:29:3c:2b:13:90:85:c2:ec:c2:e2:1a:5f:
                    d7:97:54:7b:60:9b:c1:53:b0:7e:ca:1d:5e:0e:7d:
                    9a:20:49:96:d2:68:f3:90:f2:38:6c:1f:88:06:1c:
                    3f:fa:4a:4f:97:59:38:a1:62:74:7c:b3:6e:1f:a4:
                    d6:24:b1:3c:2a:30:df:25:ef:48:21:ef:2e:2d:79:
                    6a:68:93:84:cc:2e:22:fc:e7:ae:c9:85:ae:69:92:
                    f0:c0:f3:85:db:8f:57:ff:ef:65:a9:58:c0:fa:1c:
                    9a:40:a7:ae:ee:3b:3e:4a:f5:43:15:f4:75:8d:5d:
                    73:d7:2a:44:e9:5a:d4:3d:fe:7a:e8:21:97:6b:e6:
                    61:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D3:1B:9A:28:65:8E:34:6E:04:6F:5F:59:9F:D9:42:BA:C7:79:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/f5e4b5d8-af89-3adc-bb50-e468ff4708a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.162.0-104.234.166.255
                  104.234.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:43:2d:ce:df:2e:35:37:80:d7:98:9b:c6:76:a5:60:3f:99:
         02:82:86:30:7b:b7:9c:eb:d5:c3:b1:81:37:63:08:68:f5:73:
         87:24:40:3b:42:17:b5:24:1e:21:29:9f:d9:f7:28:54:b3:1e:
         f2:99:1c:b3:2e:77:e9:bf:65:79:94:63:71:8a:7b:3f:95:e4:
         77:5c:2d:05:95:d9:af:fc:01:0b:47:6e:00:8e:af:e1:09:dd:
         7f:6f:eb:bc:9d:68:f2:a7:7d:77:15:ad:b6:8d:29:cd:2a:74:
         30:4a:da:49:b7:85:ce:0b:ac:47:93:5d:0c:91:ae:af:0f:cb:
         05:cf:c2:48:83:d7:d2:fe:96:6e:29:e0:50:66:89:b1:2e:1d:
         07:a3:2c:63:2f:79:27:cd:8b:7a:ba:89:99:98:87:79:ed:0b:
         0f:0c:a5:7e:08:9e:8f:0a:3c:20:94:48:67:8a:20:7f:7b:9e:
         3a:26:42:b7:cb:88:72:16:c7:47:79:79:46:2a:ad:26:28:91:
         f7:4c:17:26:db:5b:bf:32:4b:08:6a:6b:0c:3c:55:90:a0:ce:
         04:c7:1e:3e:ad:21:47:21:4b:7d:76:25:10:e4:ee:ce:f3:53:
         b1:42:bf:bb:a5:fb:0a:1e:3b:94:37:de:31:a4:02:fd:f5:87:
         81:a3:a4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:50 2023 by rpki-client on console-ams.rpki-client.org