Route Origin Authorization

$ rpki-client -vvf repodepot.wildtky.com/repo/WTAFarms-Jan2025/0/32332e3138302e3230302e302f32342d3234203d3e203534323831.roa
File:                     32332e3138302e3230302e302f32342d3234203d3e203534323831.roa (raw, json)
Hash identifier:          2ATZGiO0dlUNuq/M0wYcPrd5RczL5/oiGicLQTe4ZpU=
Subject key identifier:   09:82:AA:43:55:91:39:1B:A9:F3:02:64:A3:D6:7E:80:10:22:21:45
Certificate issuer:       /CN=cfc9610f6368bb4940db9ca03ba819c4d02c8fc968a360508c
Certificate serial:       38CE5B656DFBA72C01E0F887B18C1564E1B1F422
Authority key identifier: 39:CD:3A:1C:B3:A8:23:42:3F:9C:D6:91:88:35:F3:56:9D:04:1D:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/18991ace-3e88-491f-b286-e1996e753c3d/cfc9610f6368bb4940db9ca03ba819c4d02c8fc968a360508c.cer
Subject info access:      rsync://repodepot.wildtky.com/repo/WTAFarms-Jan2025/0/32332e3138302e3230302e302f32342d3234203d3e203534323831.roa
Signing time:             Mon 20 Jan 2025 23:52:03 +0000
ROA not before:           Mon 20 Jan 2025 23:47:03 +0000
ROA not after:            Mon 19 Jan 2026 23:52:03 +0000
asID:                     54281
IP address blocks:        23.180.200.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ce:5b:65:6d:fb:a7:2c:01:e0:f8:87:b1:8c:15:64:e1:b1:f4:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfc9610f6368bb4940db9ca03ba819c4d02c8fc968a360508c
        Validity
            Not Before: Jan 20 23:47:03 2025 GMT
            Not After : Jan 19 23:52:03 2026 GMT
        Subject: CN=0982AA435591391BA9F30264A3D67E8010222145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:af:49:13:91:70:4a:29:4e:a0:86:bd:37:4a:
                    79:7f:25:cf:e5:b4:88:7e:70:0c:3b:24:4e:1b:f7:
                    d3:8b:06:46:5b:00:54:81:1f:6a:98:b6:b9:e6:d0:
                    05:e7:2d:79:a5:ec:10:b3:3b:02:69:1f:76:65:74:
                    ab:8f:6d:95:80:b2:3c:9c:3f:51:b8:e2:c2:0b:e7:
                    5f:21:d6:08:21:1f:61:88:66:6a:89:2f:f0:24:05:
                    0a:0d:70:eb:7c:e7:f3:ae:f2:05:22:52:9d:94:38:
                    aa:9d:9c:a3:60:8b:1e:1e:bb:59:e3:11:07:a2:75:
                    69:89:c9:8b:47:08:5d:6e:4b:53:f9:1a:7b:60:49:
                    fa:d4:b8:e9:8e:02:55:4c:b6:e3:7b:66:ca:2d:51:
                    c3:97:40:ae:85:c1:4c:7a:f2:82:73:46:51:16:02:
                    a2:c0:d7:c6:7b:d1:dd:ba:f1:a5:34:5f:22:d0:c2:
                    28:4a:79:22:68:9e:d0:bc:08:0d:46:27:9b:83:b2:
                    05:05:05:40:cc:94:00:03:05:45:8c:20:65:de:75:
                    5b:c3:ad:c1:b8:a2:0e:0b:98:1e:3b:03:99:1c:56:
                    8a:87:83:1b:6e:aa:63:27:16:ea:f2:da:a1:2f:b1:
                    fa:0e:19:9b:a2:fc:3c:21:10:d0:4b:8a:6f:67:23:
                    24:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:82:AA:43:55:91:39:1B:A9:F3:02:64:A3:D6:7E:80:10:22:21:45
            X509v3 Authority Key Identifier:
                keyid:39:CD:3A:1C:B3:A8:23:42:3F:9C:D6:91:88:35:F3:56:9D:04:1D:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repodepot.wildtky.com/repo/WTAFarms-Jan2025/0/39CD3A1CB3A823423F9CD6918835F3569D041DEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/18991ace-3e88-491f-b286-e1996e753c3d/cfc9610f6368bb4940db9ca03ba819c4d02c8fc968a360508c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repodepot.wildtky.com/repo/WTAFarms-Jan2025/0/32332e3138302e3230302e302f32342d3234203d3e203534323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.180.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:3c:c8:4d:a9:c6:6b:76:a9:3d:81:86:2d:75:72:c4:8c:20:
         c9:ff:51:15:51:cb:cd:ef:26:bf:22:41:88:57:05:b7:ae:49:
         d3:f1:3a:36:6e:46:cc:38:5d:a9:e1:c6:55:0f:2d:a3:02:50:
         3f:99:68:84:aa:91:5a:7d:48:9b:79:ff:aa:f1:65:41:05:d2:
         f4:d8:54:25:92:3e:5c:45:27:b1:3a:9a:12:8a:87:db:11:61:
         d9:19:89:fa:85:1e:a9:6c:23:cb:d3:db:b3:f2:45:5e:35:92:
         c2:0f:13:53:93:f5:ab:79:75:0a:1b:98:de:35:a3:5d:61:e8:
         ff:92:4c:54:9c:c7:57:27:a1:b2:2d:65:28:a3:a6:21:69:f5:
         87:e7:cc:39:a8:2c:4c:1b:fb:09:77:b4:43:e8:49:d1:46:ed:
         7f:4f:a2:43:17:48:7e:2e:79:b5:38:22:27:36:78:12:a9:f6:
         cb:d4:3b:51:a2:5c:d9:75:12:fc:cd:ca:43:29:43:a1:76:73:
         09:99:6b:0f:32:59:77:2a:2d:d7:a3:8a:9c:93:fb:28:25:92:
         65:8f:1d:8c:28:79:57:5d:2e:ee:da:a0:ab:63:8f:7e:8a:11:
         a1:c5:21:94:f0:e0:88:4a:32:dd:7c:c4:81:bb:bb:18:1b:fd:
         13:18:ef:91
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIUOM5bZW37pywB4PiHsYwVZOGx9CIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyY2ZjOTYxMGY2MzY4YmI0OTQwZGI5Y2EwM2JhODE5YzRk
MDJjOGZjOTY4YTM2MDUwOGMwHhcNMjUwMTIwMjM0NzAzWhcNMjYwMTE5MjM1MjAz
WjAzMTEwLwYDVQQDEygwOTgyQUE0MzU1OTEzOTFCQTlGMzAyNjRBM0Q2N0U4MDEw
MjIyMTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2K9JE5FwSilO
oIa9N0p5fyXP5bSIfnAMOyROG/fTiwZGWwBUgR9qmLa55tAF5y15pewQszsCaR92
ZXSrj22VgLI8nD9RuOLCC+dfIdYIIR9hiGZqiS/wJAUKDXDrfOfzrvIFIlKdlDiq
nZyjYIseHrtZ4xEHonVpicmLRwhdbktT+Rp7YEn61LjpjgJVTLbje2bKLVHDl0Cu
hcFMevKCc0ZRFgKiwNfGe9HduvGlNF8i0MIoSnkiaJ7QvAgNRiebg7IFBQVAzJQA
AwVFjCBl3nVbw63BuKIOC5geOwOZHFaKh4MbbqpjJxbq8tqhL7H6Dhmbovw8IRDQ
S4pvZyMkswIDAQABo4ICijCCAoYwHQYDVR0OBBYEFAmCqkNVkTkbqfMCZKPWfoAQ
IiFFMB8GA1UdIwQYMBaAFDnNOhyzqCNCP5zWkYg181adBB3vMA4GA1UdDwEB/wQE
AwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3JlcG9kZXBvdC53aWxkdGt5
LmNvbS9yZXBvL1dUQUZhcm1zLUphbjIwMjUvMC8zOUNEM0ExQ0IzQTgyMzQyM0Y5
Q0Q2OTE4ODM1RjM1NjlEMDQxREVGLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAG
CCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJp
bi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82
ZWFkMDczYy1iOWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTg5OTFhY2UtM2U4
OC00OTFmLWIyODYtZTE5OTZlNzUzYzNkL2NmYzk2MTBmNjM2OGJiNDk0MGRiOWNh
MDNiYTgxOWM0ZDAyYzhmYzk2OGEzNjA1MDhjLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9yZXBvZGVwb3Qud2lsZHRreS5jb20vcmVw
by9XVEFGYXJtcy1KYW4yMDI1LzAvMzIzMzJlMzEzODMwMmUzMjMwMzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM0MzIzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7TIMA0GCSqG
SIb3DQEBCwUAA4IBAQBuPMhNqcZrdqk9gYYtdXLEjCDJ/1EVUcvN7ya/IkGIVwW3
rknT8To2bkbMOF2p4cZVDy2jAlA/mWiEqpFafUibef+q8WVBBdL02FQlkj5cRSex
OpoSiofbEWHZGYn6hR6pbCPL09uz8kVeNZLCDxNTk/WreXUKG5jeNaNdYej/kkxU
nMdXJ6GyLWUoo6YhafWH58w5qCxMG/sJd7RD6EnRRu1/T6JDF0h+Lnm1OCInNngS
qfbL1DtRolzZdRL8zcpDKUOhdnMJmWsPMll3Ki3Xo4qck/soJZJljx2MKHlXXS7u
2qCrY49+ihGhxSGU8OCISjLdfMSBu7sYG/0TGO+R
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:50:12 2025 by rpki-client