Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da/0f735d2a-76a0-3659-9b4d-2ad7c41b9f2a.roa
File:                     0f735d2a-76a0-3659-9b4d-2ad7c41b9f2a.roa (raw, json)
Hash identifier:          Ya8KyKpQoA2RSVBLOlzYMbBlAl0z0GExDOLqHXTyf7w=
Subject key identifier:   ED:F1:DF:05:9B:81:EB:CC:25:6D:49:AF:09:F0:A3:3C:20:18:2D:E3
Certificate issuer:       /CN=80f0e919-8ed6-4b5f-bc05-1b833ab626da
Certificate serial:       010D0C9F4328583EB0E09445D6ED3E86DD8CF800
Authority key identifier: A7:02:98:3F:AE:FA:FE:7F:00:28:35:A9:4C:B2:34:5D:C9:C2:81:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da/0f735d2a-76a0-3659-9b4d-2ad7c41b9f2a.roa
Signing time:             Mon 04 Apr 2022 13:44:52 +0000
ROA not before:           Mon 04 Apr 2022 13:44:52 +0000
ROA not after:            Sun 27 Oct 2024 04:00:00 +0000
asID:                     16509
IP address blocks:        23.130.112.0/24 maxlen: 24
                          23.130.240.0/24 maxlen: 24
                          23.142.96.0/24 maxlen: 24
                          23.156.240.0/24 maxlen: 24
                          23.161.160.0/24 maxlen: 24
                          2600:3300::/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b0:e0:94:45:d6:ed:3e:86:dd:8c:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f0e919-8ed6-4b5f-bc05-1b833ab626da
        Validity
            Not Before: Apr  4 13:44:52 2022 GMT
            Not After : Oct 27 04:00:00 2024 GMT
        Subject: CN=fa564a5f-2b01-41df-a5d1-8c90ae0a12ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:95:d7:c9:7b:66:98:34:db:18:94:04:e5:cf:
                    94:e2:95:50:db:c6:2f:44:70:d7:5a:6f:53:0b:f7:
                    c8:db:54:2d:a6:7b:b8:6b:05:10:22:cf:4a:2e:47:
                    23:19:a0:4d:95:d6:2d:e3:a0:2f:86:50:f2:a6:0f:
                    53:8a:ce:5e:cf:c4:42:27:d0:4f:e9:20:2a:cc:f2:
                    45:19:70:3c:c5:79:5d:72:cd:34:65:9c:b5:db:2f:
                    d2:d4:2c:fc:b9:ed:7c:eb:01:41:54:bb:19:25:d1:
                    1d:e9:7a:46:e4:7f:c0:56:98:23:f0:b9:d6:6a:99:
                    10:26:d2:d8:b9:f7:7e:21:c1:1f:fd:b0:05:a1:ab:
                    09:80:2b:ca:ab:3a:69:18:58:fd:b2:53:aa:c0:05:
                    70:53:27:f0:3c:1a:05:00:3c:6b:17:36:71:a0:ce:
                    9f:9c:f9:42:b9:64:1f:41:04:5e:31:bf:f8:0a:c7:
                    c4:d8:c2:82:a1:75:f1:09:07:0d:e9:e8:ca:d8:51:
                    14:5b:69:dd:ae:f3:c1:a8:2d:c9:ea:86:19:3f:35:
                    2b:18:97:8b:ca:83:f5:24:51:7a:23:7a:63:b9:95:
                    c7:ef:ed:49:4d:95:84:a6:80:ca:98:b4:9e:13:af:
                    ed:0d:a2:a5:cc:a3:c7:17:cf:12:dd:f6:d4:d8:2b:
                    82:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F1:DF:05:9B:81:EB:CC:25:6D:49:AF:09:F0:A3:3C:20:18:2D:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da/0f735d2a-76a0-3659-9b4d-2ad7c41b9f2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da/80f0e919-8ed6-4b5f-bc05-1b833ab626da.crl

            X509v3 Authority Key Identifier:
                keyid:A7:02:98:3F:AE:FA:FE:7F:00:28:35:A9:4C:B2:34:5D:C9:C2:81:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.112.0/24
                  23.130.240.0/24
                  23.142.96.0/24
                  23.156.240.0/24
                  23.161.160.0/24
                IPv6:
                  2600:3300::/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:f1:36:34:74:d3:13:f0:af:28:2a:f1:78:ef:20:79:89:45:
         2e:c1:4d:1a:f4:b5:a9:f3:06:00:51:5d:97:eb:ea:cb:ca:ab:
         07:7e:5c:4e:8d:20:d9:6a:30:44:40:a0:03:df:b1:e8:cd:f7:
         eb:fa:ea:60:b7:53:b2:19:59:b0:95:d6:c2:58:9f:74:83:bb:
         f0:31:38:84:e6:d4:1e:25:d6:5a:ab:9e:73:f1:6b:57:2d:46:
         a2:2e:0c:2e:e5:ca:25:19:61:4f:78:30:d9:fe:12:a9:85:d0:
         94:08:d5:12:a2:bd:4d:d2:b0:bc:38:cf:7c:bd:d1:e2:56:d9:
         4e:e6:26:10:c0:4f:d9:e0:1a:70:d4:50:68:41:74:83:80:25:
         29:d0:54:c4:c2:08:f7:e9:0c:30:ed:6e:0b:bb:d2:05:bf:99:
         38:83:89:14:c9:ef:a4:4e:71:02:8e:fa:ad:1c:43:80:92:87:
         4b:c0:c2:cf:79:3d:7d:42:27:50:cd:61:10:19:8e:58:7b:4f:
         a2:0f:74:28:2e:d5:6c:ab:df:a9:bb:81:c2:52:60:1b:f4:53:
         be:dc:e1:c1:a2:c6:95:72:55:b8:72:96:91:33:66:de:8e:52:
         44:20:e9:77:03:c6:98:36:53:e6:30:37:74:aa:69:a0:a3:63:
         cb:6f:e7:b3
-----BEGIN CERTIFICATE-----
MIIGaTCCBVGgAwIBAgIUAQ0Mn0MoWD6w4JRF1u0+ht2M+AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODBmMGU5MTktOGVkNi00YjVmLWJjMDUtMWI4MzNhYjYy
NmRhMB4XDTIyMDQwNDEzNDQ1MloXDTI0MTAyNzA0MDAwMFowLzEtMCsGA1UEAxMk
ZmE1NjRhNWYtMmIwMS00MWRmLWE1ZDEtOGM5MGFlMGExMmVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpXXyXtmmDTbGJQE5c+U4pVQ28YvRHDXWm9T
C/fI21Qtpnu4awUQIs9KLkcjGaBNldYt46AvhlDypg9Tis5ez8RCJ9BP6SAqzPJF
GXA8xXldcs00ZZy12y/S1Cz8ue186wFBVLsZJdEd6XpG5H/AVpgj8LnWapkQJtLY
ufd+IcEf/bAFoasJgCvKqzppGFj9slOqwAVwUyfwPBoFADxrFzZxoM6fnPlCuWQf
QQReMb/4CsfE2MKCoXXxCQcN6ejK2FEUW2ndrvPBqC3J6oYZPzUrGJeLyoP1JFF6
I3pjuZXH7+1JTZWEpoDKmLSeE6/tDaKlzKPHF88S3fbU2CuCIwIDAQABo4IDezCC
A3cwHQYDVR0OBBYEFO3x3wWbgevMJW1JrwnwozwgGC3jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MGYw
ZTkxOS04ZWQ2LTRiNWYtYmMwNS0xYjgzM2FiNjI2ZGEvMGY3MzVkMmEtNzZhMC0z
NjU5LTliNGQtMmFkN2M0MWI5ZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODBmMGU5MTktOGVkNi00YjVmLWJj
MDUtMWI4MzNhYjYyNmRhLzgwZjBlOTE5LThlZDYtNGI1Zi1iYzA1LTFiODMzYWI2
MjZkYS5jcmwwHwYDVR0jBBgwFoAUpwKYP676/n8AKDWpTLI0XcnCgWUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84MGYwZTkxOS04ZWQ2LTRiNWYtYmMwNS0xYjgz
M2FiNjI2ZGEuY2VyMEUGCCsGAQUFBwEHAQH/BDYwNDAkBAIAATAeAwQAF4JwAwQA
F4LwAwQAF45gAwQAF5zwAwQAF6GgMAwEAgACMAYDBAAmADMwVAYDVR0gAQH/BEow
SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l
dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARfE2
NHTTE/CvKCrxeO8geYlFLsFNGvS1qfMGAFFdl+vqy8qrB35cTo0g2WowRECgA9+x
6M336/rqYLdTshlZsJXWwlifdIO78DE4hObUHiXWWquec/FrVy1Goi4MLuXKJRlh
T3gw2f4SqYXQlAjVEqK9TdKwvDjPfL3R4lbZTuYmEMBP2eAacNRQaEF0g4AlKdBU
xMII9+kMMO1uC7vSBb+ZOIOJFMnvpE5xAo76rRxDgJKHS8DCz3k9fUInUM1hEBmO
WHtPog90KC7VbKvfqbuBwlJgG/RTvtzhwaLGlXJVuHKWkTNm3o5SRCDpdwPGmDZT
5jA3dKppoKNjy2/nsw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:41 2023 by rpki-client on console-fra.rpki-client.org