Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3476a2e3-fce4-4f8a-9724-640a6311bd86/bcd881e6-3dd9-39c5-b4c2-a730509d24fd.roa
File:                     bcd881e6-3dd9-39c5-b4c2-a730509d24fd.roa (raw, json)
Hash identifier:          x03Gv1RG130y2R57v4l8+hT4Sv84SHHgcpMEVeFWs0E=
Subject key identifier:   11:CA:DB:D9:1A:67:35:61:8B:55:81:E1:B9:D0:DE:13:5C:BD:11:27
Certificate issuer:       /CN=3476a2e3-fce4-4f8a-9724-640a6311bd86
Certificate serial:       010D0C9F4328583E1B7BB7BE9FBDA09BB1F8BFC0
Authority key identifier: D0:D0:C2:30:35:3A:67:1C:28:84:E9:08:02:C4:7E:16:71:4A:CB:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3476a2e3-fce4-4f8a-9724-640a6311bd86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3476a2e3-fce4-4f8a-9724-640a6311bd86/bcd881e6-3dd9-39c5-b4c2-a730509d24fd.roa
Signing time:             Thu 02 Jun 2022 13:08:18 +0000
ROA not before:           Thu 02 Jun 2022 13:08:18 +0000
ROA not after:            Wed 04 Sep 2024 04:00:00 +0000
asID:                     21817
IP address blocks:        104.152.100.0/22 maxlen: 24
                          199.36.176.0/21 maxlen: 24
                          199.187.148.0/22 maxlen: 24
                          2607:6200::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1b:7b:b7:be:9f:bd:a0:9b:b1:f8:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3476a2e3-fce4-4f8a-9724-640a6311bd86
        Validity
            Not Before: Jun  2 13:08:18 2022 GMT
            Not After : Sep  4 04:00:00 2024 GMT
        Subject: CN=29fc7755-3156-44c6-9339-1f1fc36359df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:aa:3d:2b:35:59:70:23:23:d6:7c:9c:73:d9:
                    2b:a0:53:9e:79:4d:d5:89:e0:68:18:1a:94:c3:99:
                    22:87:23:0d:6f:f2:1d:0c:e0:13:fe:46:d6:c4:65:
                    07:92:de:3b:67:0b:eb:17:5c:7f:57:f1:ae:89:80:
                    aa:b6:8b:f8:5a:53:48:41:0e:b6:ff:88:e3:b3:13:
                    9a:3c:48:b2:09:d6:87:53:72:dd:cb:7f:15:4a:f3:
                    1e:c3:33:aa:d8:c0:99:32:a4:30:ac:12:37:43:28:
                    52:c7:d5:4b:09:55:61:09:7d:95:a6:df:8d:aa:fc:
                    65:8f:94:8d:30:49:e0:2d:92:ee:ae:4e:fe:06:04:
                    33:b9:67:ea:7d:72:f4:a3:c1:e2:ff:37:9c:cf:eb:
                    dd:2b:85:cd:de:db:93:9f:64:98:07:af:e7:03:12:
                    82:93:a3:41:8d:d6:58:f4:79:16:b2:bf:06:f6:ae:
                    5e:dc:b2:60:54:ac:3a:40:b6:64:04:64:42:da:66:
                    74:4b:8f:aa:fc:bb:dc:74:e2:00:96:ff:dd:bc:3e:
                    3a:d2:83:f1:3a:68:a3:30:fa:14:63:40:89:26:98:
                    34:f8:d6:16:4b:ba:41:c0:9b:4c:02:4a:4d:ca:2f:
                    50:b7:36:c3:82:ca:a2:4a:e0:33:42:d6:14:01:e8:
                    5b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CA:DB:D9:1A:67:35:61:8B:55:81:E1:B9:D0:DE:13:5C:BD:11:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3476a2e3-fce4-4f8a-9724-640a6311bd86/bcd881e6-3dd9-39c5-b4c2-a730509d24fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3476a2e3-fce4-4f8a-9724-640a6311bd86/3476a2e3-fce4-4f8a-9724-640a6311bd86.crl

            X509v3 Authority Key Identifier:
                keyid:D0:D0:C2:30:35:3A:67:1C:28:84:E9:08:02:C4:7E:16:71:4A:CB:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3476a2e3-fce4-4f8a-9724-640a6311bd86.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.100.0/22
                  199.36.176.0/21
                  199.187.148.0/22
                IPv6:
                  2607:6200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:df:5f:8d:55:34:17:bd:01:85:3e:c6:73:e2:0c:74:e4:18:
         2a:b5:ad:69:c2:10:90:bf:23:9a:55:e7:aa:56:86:7a:11:18:
         6c:91:29:f7:bb:94:96:8b:75:d9:4f:20:ae:ad:91:b0:d0:e9:
         e9:26:a7:65:16:f3:3e:08:71:a6:d6:11:6a:52:34:ab:65:72:
         a3:2e:38:26:c0:7b:7c:82:f9:06:d8:8e:a1:09:a1:80:5c:2c:
         4b:00:c1:8f:b6:1a:e4:c5:98:3f:72:20:fe:a4:10:70:47:b1:
         af:c7:0f:e4:a8:2d:ee:54:05:91:2e:90:2a:ef:d3:91:ed:08:
         0c:65:57:9d:de:8d:37:ce:84:19:98:1b:b4:a8:83:48:e5:29:
         80:c0:eb:b3:b3:5b:43:4c:1c:71:13:87:27:a0:50:19:8e:71:
         55:d1:e6:68:a9:b7:ac:fe:36:c9:5f:37:51:9d:c4:87:6e:b6:
         50:52:39:ef:36:2d:5a:03:bb:02:99:f0:51:c8:0b:61:f8:9f:
         8e:4e:95:4e:92:1f:43:23:8c:4b:df:cc:14:14:8f:80:b8:33:
         08:59:4f:c5:c6:42:64:46:bb:2d:98:08:69:12:f7:4c:45:9a:
         e4:63:a4:38:81:44:15:f6:f2:a2:ee:98:37:8e:2d:af:ba:a7:
         b3:4b:90:9c
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWD4be7e+n72gm7H4v8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQ3NmEyZTMtZmNlNC00ZjhhLTk3MjQtNjQwYTYzMTFi
ZDg2MB4XDTIyMDYwMjEzMDgxOFoXDTI0MDkwNDA0MDAwMFowLzEtMCsGA1UEAxMk
MjlmYzc3NTUtMzE1Ni00NGM2LTkzMzktMWYxZmMzNjM1OWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6o9KzVZcCMj1nycc9kroFOeeU3VieBoGBqU
w5kihyMNb/IdDOAT/kbWxGUHkt47ZwvrF1x/V/GuiYCqtov4WlNIQQ62/4jjsxOa
PEiyCdaHU3Ldy38VSvMewzOq2MCZMqQwrBI3QyhSx9VLCVVhCX2Vpt+Nqvxlj5SN
MEngLZLurk7+BgQzuWfqfXL0o8Hi/zecz+vdK4XN3tuTn2SYB6/nAxKCk6NBjdZY
9HkWsr8G9q5e3LJgVKw6QLZkBGRC2mZ0S4+q/LvcdOIAlv/dvD460oPxOmijMPoU
Y0CJJpg0+NYWS7pBwJtMAkpNyi9QtzbDgsqiSuAzQtYUAehbTwIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFBHK29kaZzVhi1WB4bnQ3hNcvREnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zNDc2
YTJlMy1mY2U0LTRmOGEtOTcyNC02NDBhNjMxMWJkODYvYmNkODgxZTYtM2RkOS0z
OWM1LWI0YzItYTczMDUwOWQyNGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzQ3NmEyZTMtZmNlNC00ZjhhLTk3
MjQtNjQwYTYzMTFiZDg2LzM0NzZhMmUzLWZjZTQtNGY4YS05NzI0LTY0MGE2MzEx
YmQ4Ni5jcmwwHwYDVR0jBBgwFoAU0NDCMDU6ZxwohOkIAsR+FnFKy08wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zNDc2YTJlMy1mY2U0LTRmOGEtOTcyNC02NDBh
NjMxMWJkODYuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCaJhkAwQD
xySwAwQCx7uUMA0EAgACMAcDBQAmB2IAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHbfX41VNBe9AYU+xnPi
DHTkGCq1rWnCEJC/I5pV56pWhnoRGGyRKfe7lJaLddlPIK6tkbDQ6ekmp2UW8z4I
cabWEWpSNKtlcqMuOCbAe3yC+QbYjqEJoYBcLEsAwY+2GuTFmD9yIP6kEHBHsa/H
D+SoLe5UBZEukCrv05HtCAxlV53ejTfOhBmYG7Sog0jlKYDA67OzW0NMHHEThyeg
UBmOcVXR5mipt6z+NslfN1GdxIdutlBSOe82LVoDuwKZ8FHIC2H4n45OlU6SH0Mj
jEvfzBQUj4C4MwhZT8XGQmRGuy2YCGkS90xFmuRjpDiBRBX28qLumDeOLa+6p7NL
kJw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:18 2023 by rpki-client on console-fra.rpki-client.org