Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a/b78f23d4-ac5d-3a9b-a214-eca7c33a6f50.roa
File:                     b78f23d4-ac5d-3a9b-a214-eca7c33a6f50.roa (raw, json)
Hash identifier:          bz+foZ+kxG8OmoiE50Hmyh2BgZZvCy5ALeNNuD7KLZo=
Subject key identifier:   55:CF:66:08:CC:F1:87:69:25:CA:F8:D8:E6:B6:F1:91:DD:27:D5:E1
Certificate issuer:       /CN=46107a8c-29da-4914-8858-2b42aa4d8b4a
Certificate serial:       010D0C9F4328583B7BD08356718E9E16F918BFB0
Authority key identifier: AA:4F:4F:E9:E2:28:28:6A:EC:B1:88:AA:98:ED:11:87:E9:E2:2F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a/b78f23d4-ac5d-3a9b-a214-eca7c33a6f50.roa
Signing time:             Wed 31 Mar 2021 04:00:00 +0000
ROA not before:           Wed 31 Mar 2021 04:00:00 +0000
ROA not after:            Tue 07 Jan 2025 05:00:00 +0000
asID:                     55155
IP address blocks:        207.250.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:7b:d0:83:56:71:8e:9e:16:f9:18:bf:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46107a8c-29da-4914-8858-2b42aa4d8b4a
        Validity
            Not Before: Mar 31 04:00:00 2021 GMT
            Not After : Jan  7 05:00:00 2025 GMT
        Subject: CN=2a702f35-c3cb-47df-bff6-81a1cb998942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:68:b1:f9:9a:6a:ef:27:45:df:30:d3:35:29:
                    61:82:75:6a:57:f9:be:3c:fc:f3:7b:76:f7:8a:b2:
                    7e:aa:fc:2c:5b:93:64:da:df:20:86:72:c7:55:59:
                    94:86:10:be:cc:56:d2:5c:29:47:e6:91:7f:83:72:
                    cd:75:ee:bd:14:bb:f2:16:ec:32:06:fd:0a:37:1b:
                    5f:fa:a3:b0:42:ce:ee:a8:12:b2:70:52:f6:0a:0f:
                    a3:5f:da:76:58:70:38:08:91:47:9b:a3:d5:1c:71:
                    9c:34:95:cc:d5:a9:25:b1:1e:e5:de:52:ef:04:4a:
                    37:9c:23:a1:17:95:37:26:d6:c9:c0:05:c4:1a:dc:
                    50:c7:c6:15:3c:5d:6e:95:34:39:46:cc:87:44:27:
                    97:23:39:01:76:62:c0:5d:dd:71:e6:7c:f4:3f:be:
                    58:27:18:8d:f9:0b:fe:84:02:f9:72:e7:86:2c:fa:
                    8c:a9:5c:8e:08:5e:1b:64:6a:31:b1:01:b9:96:15:
                    57:0f:de:18:bd:52:dc:c2:1a:2a:88:83:52:12:57:
                    53:12:fb:5a:f6:e6:d8:d5:27:32:da:4e:98:74:31:
                    57:93:f5:fe:08:d3:c2:7d:b6:78:f2:95:6d:06:2d:
                    cb:03:1e:bb:56:e4:5e:8f:2e:01:c5:2c:ba:08:d9:
                    45:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CF:66:08:CC:F1:87:69:25:CA:F8:D8:E6:B6:F1:91:DD:27:D5:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a/b78f23d4-ac5d-3a9b-a214-eca7c33a6f50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a/46107a8c-29da-4914-8858-2b42aa4d8b4a.crl

            X509v3 Authority Key Identifier:
                keyid:AA:4F:4F:E9:E2:28:28:6A:EC:B1:88:AA:98:ED:11:87:E9:E2:2F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46107a8c-29da-4914-8858-2b42aa4d8b4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.250.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b2:d0:d6:db:c5:19:aa:5b:55:82:34:aa:cd:2b:74:66:7c:
         8f:c6:bd:c9:cf:3a:82:5d:f6:dd:2d:e8:07:d0:8b:7f:1f:f5:
         24:5e:9d:b3:25:d9:07:24:fe:fc:d3:82:89:22:68:07:f1:a6:
         74:3e:63:26:e9:42:e9:26:79:fc:20:3e:e1:96:13:06:be:38:
         3c:58:de:22:15:65:38:86:5e:87:65:40:31:58:76:29:d5:8f:
         94:2d:92:67:b1:04:b0:12:3c:a6:3d:f2:25:02:33:5d:47:10:
         b6:77:56:34:48:87:77:f1:6d:c2:13:bd:ce:9f:93:da:a5:3b:
         ad:8d:5f:68:6d:fe:b4:dc:25:76:16:6f:9e:ac:1e:a0:4b:53:
         2e:65:a9:ca:b2:7a:10:95:02:a5:6c:07:4b:cd:4b:0a:50:7a:
         05:ef:c6:70:d4:70:01:46:4e:57:f7:68:84:47:e6:66:27:f3:
         6f:56:1d:18:91:cf:a2:75:58:fa:f0:30:ca:1a:8a:24:b2:ff:
         ae:f2:9c:43:89:cb:12:33:00:c5:b8:30:69:0a:70:27:9a:40:
         de:08:9c:4b:fc:60:e9:89:1c:b1:cf:b7:52:95:2a:a4:0c:3a:
         ad:db:8b:72:78:32:f5:61:8e:20:08:ad:3b:02:59:35:33:08:
         f0:c0:49:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDt70INWcY6eFvkYv7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDYxMDdhOGMtMjlkYS00OTE0LTg4NTgtMmI0MmFhNGQ4
YjRhMB4XDTIxMDMzMTA0MDAwMFoXDTI1MDEwNzA1MDAwMFowLzEtMCsGA1UEAxMk
MmE3MDJmMzUtYzNjYi00N2RmLWJmZjYtODFhMWNiOTk4OTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2ix+Zpq7ydF3zDTNSlhgnVqV/m+PPzze3b3
irJ+qvwsW5Nk2t8ghnLHVVmUhhC+zFbSXClH5pF/g3LNde69FLvyFuwyBv0KNxtf
+qOwQs7uqBKycFL2Cg+jX9p2WHA4CJFHm6PVHHGcNJXM1aklsR7l3lLvBEo3nCOh
F5U3JtbJwAXEGtxQx8YVPF1ulTQ5RsyHRCeXIzkBdmLAXd1x5nz0P75YJxiN+Qv+
hAL5cueGLPqMqVyOCF4bZGoxsQG5lhVXD94YvVLcwhoqiINSEldTEvta9ubY1Scy
2k6YdDFXk/X+CNPCfbZ48pVtBi3LAx67VuRejy4BxSy6CNlFHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFXPZgjM8YdpJcr42Oa28ZHdJ9XhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NjEw
N2E4Yy0yOWRhLTQ5MTQtODg1OC0yYjQyYWE0ZDhiNGEvYjc4ZjIzZDQtYWM1ZC0z
YTliLWEyMTQtZWNhN2MzM2E2ZjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDYxMDdhOGMtMjlkYS00OTE0LTg4
NTgtMmI0MmFhNGQ4YjRhLzQ2MTA3YThjLTI5ZGEtNDkxNC04ODU4LTJiNDJhYTRk
OGI0YS5jcmwwHwYDVR0jBBgwFoAUqk9P6eIoKGrssYiqmO0Rh+niL64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80NjEwN2E4Yy0yOWRhLTQ5MTQtODg1OC0yYjQy
YWE0ZDhiNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/qdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAECy0NbbxRmqW1WCNKrNK3RmfI/GvcnPOoJd9t0t6AfQi38f9SRenbMl
2Qck/vzTgokiaAfxpnQ+YybpQukmefwgPuGWEwa+ODxY3iIVZTiGXodlQDFYdinV
j5QtkmexBLASPKY98iUCM11HELZ3VjRIh3fxbcITvc6fk9qlO62NX2ht/rTcJXYW
b56sHqBLUy5lqcqyehCVAqVsB0vNSwpQegXvxnDUcAFGTlf3aIRH5mYn829WHRiR
z6J1WPrwMMoaiiSy/67ynEOJyxIzAMW4MGkKcCeaQN4InEv8YOmJHLHPt1KVKqQM
Oq3bi3J4MvVhjiAIrTsCWTUzCPDASZI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:34 2023 by rpki-client on console-fra.rpki-client.org