Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5387bf04-58cb-48fb-ac16-4936ae99bfe8/b98a5a55-9dbc-37e4-9808-2c8ca8c4cfac.roa
File:                     b98a5a55-9dbc-37e4-9808-2c8ca8c4cfac.roa (raw, json)
Hash identifier:          4Cnqtgj11Gz+4UsCa0MNmTB5rKT09pZz9R6N3XA5+Ss=
Subject key identifier:   45:1D:AD:4F:18:DA:4F:99:4D:01:AC:89:23:73:D5:BD:9C:D2:10:63
Certificate issuer:       /CN=5387bf04-58cb-48fb-ac16-4936ae99bfe8
Certificate serial:       010D0C9F4328583D668F9F5F1A11002A32B1E250
Authority key identifier: F5:B2:27:36:05:07:17:BE:91:E5:39:21:38:2C:58:5F:42:C1:4E:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5387bf04-58cb-48fb-ac16-4936ae99bfe8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5387bf04-58cb-48fb-ac16-4936ae99bfe8/b98a5a55-9dbc-37e4-9808-2c8ca8c4cfac.roa
Signing time:             Tue 22 Mar 2022 04:00:00 +0000
ROA not before:           Tue 22 Mar 2022 04:00:00 +0000
ROA not after:            Mon 22 Mar 2032 04:00:00 +0000
asID:                     6653
IP address blocks:        68.64.208.0/20 maxlen: 24
                          216.98.192.0/20 maxlen: 24
                          216.241.32.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:8f:9f:5f:1a:11:00:2a:32:b1:e2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5387bf04-58cb-48fb-ac16-4936ae99bfe8
        Validity
            Not Before: Mar 22 04:00:00 2022 GMT
            Not After : Mar 22 04:00:00 2032 GMT
        Subject: CN=88fef765-5db8-48ed-8892-39b48451d292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d1:5d:f1:e8:4a:ee:bf:a1:b0:d8:30:dc:af:
                    d8:84:e9:f1:b1:91:95:e0:6a:2e:83:58:d6:60:cc:
                    e2:9f:a7:7e:c0:e0:d7:9b:6e:41:07:50:d1:02:30:
                    ac:35:01:1b:a7:0e:72:64:43:c6:41:1d:57:54:1d:
                    e4:51:16:29:02:b9:25:dc:7e:83:55:1b:82:9b:b6:
                    5a:4f:6e:7d:1b:dd:b0:18:70:2f:a8:0e:bb:14:62:
                    5c:13:92:ca:fa:ca:78:25:2b:78:58:4a:c9:af:b5:
                    85:79:02:16:7b:1f:5b:7f:26:04:1b:04:eb:4c:c1:
                    ea:16:f1:31:ee:40:32:e5:1f:73:d0:9b:7b:a1:1a:
                    93:9d:4e:40:b2:ed:08:b4:d2:45:86:9e:f1:d8:ce:
                    15:8f:19:dc:90:e5:cf:6a:fe:db:c1:2c:23:d8:62:
                    28:1e:f7:86:a6:32:51:f7:b2:18:80:2d:67:a8:65:
                    74:16:90:39:53:5a:cd:59:24:7d:0e:f1:c5:55:f7:
                    37:89:37:da:17:89:85:c5:ab:4e:10:49:cc:fd:9e:
                    78:89:58:7d:45:21:23:4c:47:2e:bf:77:c0:b9:66:
                    2b:a1:5e:c8:7e:9d:c2:0b:5e:d2:7a:aa:1b:8d:b0:
                    d7:fb:83:ba:f9:e1:b5:9c:d9:30:d2:15:b0:97:33:
                    aa:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1D:AD:4F:18:DA:4F:99:4D:01:AC:89:23:73:D5:BD:9C:D2:10:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5387bf04-58cb-48fb-ac16-4936ae99bfe8/b98a5a55-9dbc-37e4-9808-2c8ca8c4cfac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5387bf04-58cb-48fb-ac16-4936ae99bfe8/5387bf04-58cb-48fb-ac16-4936ae99bfe8.crl

            X509v3 Authority Key Identifier:
                keyid:F5:B2:27:36:05:07:17:BE:91:E5:39:21:38:2C:58:5F:42:C1:4E:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5387bf04-58cb-48fb-ac16-4936ae99bfe8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.64.208.0/20
                  216.98.192.0/20
                  216.241.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:ad:39:e4:96:ed:a4:62:99:d9:22:d7:eb:f3:76:b8:05:53:
         fe:96:7c:32:7a:6d:9e:32:62:c7:a9:83:97:c7:f4:e2:7d:69:
         f1:98:e2:76:92:3d:d5:72:8a:f3:85:89:bf:9b:12:c0:8c:8e:
         ba:53:9b:12:85:a3:58:8e:41:5f:31:d0:23:76:79:c9:7e:a7:
         f6:a9:93:56:66:b4:75:a5:5a:7f:a5:d1:0e:28:5b:fc:e1:9f:
         c0:0f:78:ef:04:07:f9:20:a1:bb:4e:62:b6:9d:4c:74:10:79:
         f3:df:52:f7:78:55:1f:a5:61:9e:78:fb:89:e5:bb:c0:8f:0a:
         a8:a2:f9:83:4d:0c:ae:40:99:d2:ea:ce:63:9e:b0:43:17:26:
         db:33:d1:f1:5f:ac:f5:2c:23:70:a5:e7:d4:39:d3:ba:b0:bc:
         c8:c5:8c:9b:fd:f1:7e:c5:b3:b0:91:ab:b4:be:16:bf:28:cc:
         00:0f:0a:7c:65:90:38:6c:ff:22:3a:42:df:f8:b6:b8:ee:65:
         f5:7d:bd:32:b4:15:15:17:3e:c3:d4:07:62:a9:1b:13:7a:83:
         b3:41:b6:38:53:9b:5a:43:37:aa:4e:04:17:7d:f4:aa:fa:49:
         cc:c2:a1:4c:0e:30:2c:80:68:29:15:b2:67:29:c7:68:59:ae:
         22:06:a2:47
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWD1mj59fGhEAKjKx4lAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTM4N2JmMDQtNThjYi00OGZiLWFjMTYtNDkzNmFlOTli
ZmU4MB4XDTIyMDMyMjA0MDAwMFoXDTMyMDMyMjA0MDAwMFowLzEtMCsGA1UEAxMk
ODhmZWY3NjUtNWRiOC00OGVkLTg4OTItMzliNDg0NTFkMjkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtFd8ehK7r+hsNgw3K/YhOnxsZGV4Goug1jW
YMzin6d+wODXm25BB1DRAjCsNQEbpw5yZEPGQR1XVB3kURYpArkl3H6DVRuCm7Za
T259G92wGHAvqA67FGJcE5LK+sp4JSt4WErJr7WFeQIWex9bfyYEGwTrTMHqFvEx
7kAy5R9z0Jt7oRqTnU5Asu0ItNJFhp7x2M4VjxnckOXPav7bwSwj2GIoHveGpjJR
97IYgC1nqGV0FpA5U1rNWSR9DvHFVfc3iTfaF4mFxatOEEnM/Z54iVh9RSEjTEcu
v3fAuWYroV7Ifp3CC17SeqobjbDX+4O6+eG1nNkw0hWwlzOqZwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFEUdrU8Y2k+ZTQGsiSNz1b2c0hBjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81Mzg3
YmYwNC01OGNiLTQ4ZmItYWMxNi00OTM2YWU5OWJmZTgvYjk4YTVhNTUtOWRiYy0z
N2U0LTk4MDgtMmM4Y2E4YzRjZmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTM4N2JmMDQtNThjYi00OGZiLWFj
MTYtNDkzNmFlOTliZmU4LzUzODdiZjA0LTU4Y2ItNDhmYi1hYzE2LTQ5MzZhZTk5
YmZlOC5jcmwwHwYDVR0jBBgwFoAU9bInNgUHF76R5TkhOCxYX0LBTsEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81Mzg3YmYwNC01OGNiLTQ4ZmItYWMxNi00OTM2
YWU5OWJmZTguY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEREDQAwQE
2GLAAwQE2PEgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAAytOeSW7aRimdki1+vzdrgFU/6WfDJ6bZ4yYsep
g5fH9OJ9afGY4naSPdVyivOFib+bEsCMjrpTmxKFo1iOQV8x0CN2ecl+p/apk1Zm
tHWlWn+l0Q4oW/zhn8APeO8EB/kgobtOYradTHQQefPfUvd4VR+lYZ54+4nlu8CP
Cqii+YNNDK5AmdLqzmOesEMXJtsz0fFfrPUsI3Cl59Q507qwvMjFjJv98X7Fs7CR
q7S+Fr8ozAAPCnxlkDhs/yI6Qt/4trjuZfV9vTK0FRUXPsPUB2KpGxN6g7NBtjhT
m1pDN6pOBBd99Kr6SczCoUwOMCyAaCkVsmcpx2hZriIGokc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:33 2023 by rpki-client on console-ams.rpki-client.org