Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d58491-209e-4f00-ae4f-39fc10fde045/e1c58743-2e1f-338d-b720-1c24cf942c44.roa
File:                     e1c58743-2e1f-338d-b720-1c24cf942c44.roa (raw, json)
Hash identifier:          FaOQ/beM+UoLV8rrNm6W4snfHz0kpuTq8fO+ZMy/vWc=
Subject key identifier:   80:76:DE:4C:43:E1:3B:F2:E1:7D:43:89:EE:A2:AC:BF:EE:D1:D0:16
Certificate issuer:       /CN=22d58491-209e-4f00-ae4f-39fc10fde045
Certificate serial:       010D0C9F4328583FC6F9C1AA8BA7B16A5DE39E40
Authority key identifier: E2:6B:DB:70:9D:B5:18:D6:0E:6A:4C:1C:58:61:EF:8A:89:17:2E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d58491-209e-4f00-ae4f-39fc10fde045.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d58491-209e-4f00-ae4f-39fc10fde045/e1c58743-2e1f-338d-b720-1c24cf942c44.roa
Signing time:             Tue 18 Oct 2022 19:18:11 +0000
ROA not before:           Tue 18 Oct 2022 19:18:11 +0000
ROA not after:            Wed 01 Jan 2025 05:00:00 +0000
asID:                     205663
IP address blocks:        23.142.24.0/24 maxlen: 24
                          23.142.25.0/24 maxlen: 24
                          23.142.26.0/24 maxlen: 24
                          23.142.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c6:f9:c1:aa:8b:a7:b1:6a:5d:e3:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d58491-209e-4f00-ae4f-39fc10fde045
        Validity
            Not Before: Oct 18 19:18:11 2022 GMT
            Not After : Jan  1 05:00:00 2025 GMT
        Subject: CN=78c2b720-81ff-4989-8296-de833d5c289f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:87:c7:0b:75:05:d5:47:10:43:3a:e2:a8:b8:
                    33:62:29:cf:ff:a8:f2:8f:b0:21:5f:40:86:b6:84:
                    b7:5e:77:d6:27:26:02:6c:49:e7:1f:ee:26:c3:7d:
                    3f:70:ab:58:75:b8:cb:5a:08:a6:12:5e:f4:57:e5:
                    9d:b0:15:12:d2:6e:e1:b5:47:4a:46:8b:51:38:e5:
                    d0:ce:04:ea:21:2e:3b:ae:4d:3b:f9:43:37:c6:98:
                    38:2e:16:97:98:ed:dc:e9:87:83:50:bd:53:70:15:
                    cf:e7:59:b8:93:ea:54:7f:0b:f6:6f:4a:97:0b:b5:
                    59:a8:55:c0:e3:31:15:4d:c1:8a:20:15:94:5d:69:
                    b7:25:22:e4:52:ae:d2:cc:4e:ae:e0:db:23:44:20:
                    5c:e1:4c:35:91:21:b4:7f:2d:6c:32:72:13:1f:19:
                    0f:ff:ab:d4:2b:cf:9a:22:ff:4e:47:fe:87:c5:26:
                    f8:c4:29:9d:fc:29:11:42:70:9c:e4:f3:0e:42:85:
                    05:1f:09:dc:bf:50:a6:f2:33:9d:88:40:56:b3:00:
                    40:cb:c6:c2:55:d5:a6:9b:f5:0d:a4:25:43:eb:c9:
                    99:13:2e:57:9d:31:cf:af:3a:99:3c:22:6c:74:e1:
                    e3:fb:e4:c2:51:ea:cb:3e:cd:bf:b7:c8:e1:7c:c7:
                    87:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:76:DE:4C:43:E1:3B:F2:E1:7D:43:89:EE:A2:AC:BF:EE:D1:D0:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d58491-209e-4f00-ae4f-39fc10fde045/e1c58743-2e1f-338d-b720-1c24cf942c44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d58491-209e-4f00-ae4f-39fc10fde045/22d58491-209e-4f00-ae4f-39fc10fde045.crl

            X509v3 Authority Key Identifier:
                keyid:E2:6B:DB:70:9D:B5:18:D6:0E:6A:4C:1C:58:61:EF:8A:89:17:2E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d58491-209e-4f00-ae4f-39fc10fde045.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:a6:7a:97:a2:3b:25:c0:42:87:23:25:13:8b:c0:9f:49:bd:
         68:41:ca:84:dc:c5:3c:c0:2c:11:c4:99:78:70:b1:8a:68:5c:
         0a:3a:50:da:62:04:ca:a0:d9:a1:ad:4e:02:03:74:4e:73:07:
         c3:0c:cb:e2:56:15:e0:32:11:33:4c:12:cc:ac:45:5e:c9:fe:
         15:02:28:bb:a0:f6:35:b1:af:46:60:c6:a6:f0:fe:c6:60:96:
         db:82:d0:21:3b:f1:78:be:8e:65:84:b7:b8:9f:c6:2f:94:fa:
         14:f1:92:2f:6c:66:92:a4:fa:3f:85:68:03:61:df:71:f0:86:
         d9:8c:77:fa:15:c7:7b:94:86:4b:e2:81:7f:0f:df:8f:12:a2:
         70:f3:75:60:de:64:22:be:19:26:37:bd:2d:e8:7a:18:c7:5c:
         43:7f:9b:b5:a0:ba:36:42:a1:72:3b:7f:80:64:15:f0:a9:21:
         69:11:18:78:c9:91:4b:31:e6:af:83:7d:45:6b:fa:47:ca:e7:
         16:ee:ab:fb:18:df:93:e6:72:32:a7:e4:47:09:0b:bd:8f:84:
         e4:74:b0:68:6f:3e:ef:9b:24:25:46:70:02:42:67:92:ee:b5:
         b4:86:de:f9:b0:9f:59:66:26:8d:9c:04:43:e8:6d:1b:9e:70:
         2a:35:06:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD/G+cGqi6exal3jnkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJkNTg0OTEtMjA5ZS00ZjAwLWFlNGYtMzlmYzEwZmRl
MDQ1MB4XDTIyMTAxODE5MTgxMVoXDTI1MDEwMTA1MDAwMFowLzEtMCsGA1UEAxMk
NzhjMmI3MjAtODFmZi00OTg5LTgyOTYtZGU4MzNkNWMyODlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIfHC3UF1UcQQzriqLgzYinP/6jyj7AhX0CG
toS3XnfWJyYCbEnnH+4mw30/cKtYdbjLWgimEl70V+WdsBUS0m7htUdKRotROOXQ
zgTqIS47rk07+UM3xpg4LhaXmO3c6YeDUL1TcBXP51m4k+pUfwv2b0qXC7VZqFXA
4zEVTcGKIBWUXWm3JSLkUq7SzE6u4NsjRCBc4Uw1kSG0fy1sMnITHxkP/6vUK8+a
Iv9OR/6HxSb4xCmd/CkRQnCc5PMOQoUFHwncv1Cm8jOdiEBWswBAy8bCVdWmm/UN
pCVD68mZEy5XnTHPrzqZPCJsdOHj++TCUerLPs2/t8jhfMeHwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIB23kxD4Tvy4X1Die6irL/u0dAWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmQ1
ODQ5MS0yMDllLTRmMDAtYWU0Zi0zOWZjMTBmZGUwNDUvZTFjNTg3NDMtMmUxZi0z
MzhkLWI3MjAtMWMyNGNmOTQyYzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJkNTg0OTEtMjA5ZS00ZjAwLWFl
NGYtMzlmYzEwZmRlMDQ1LzIyZDU4NDkxLTIwOWUtNGYwMC1hZTRmLTM5ZmMxMGZk
ZTA0NS5jcmwwHwYDVR0jBBgwFoAU4mvbcJ21GNYOakwcWGHviokXLocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmQ1ODQ5MS0yMDllLTRmMDAtYWU0Zi0zOWZj
MTBmZGUwNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF44YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEumepeiOyXAQocjJROLwJ9JvWhByoTcxTzALBHEmXhwsYpoXAo6UNpi
BMqg2aGtTgIDdE5zB8MMy+JWFeAyETNMEsysRV7J/hUCKLug9jWxr0Zgxqbw/sZg
ltuC0CE78Xi+jmWEt7ifxi+U+hTxki9sZpKk+j+FaANh33HwhtmMd/oVx3uUhkvi
gX8P348SonDzdWDeZCK+GSY3vS3oehjHXEN/m7WgujZCoXI7f4BkFfCpIWkRGHjJ
kUsx5q+DfUVr+kfK5xbuq/sY35PmcjKn5EcJC72PhOR0sGhvPu+bJCVGcAJCZ5Lu
tbSG3vmwn1lmJo2cBEPobRuecCo1Bt0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:18 2023 by rpki-client on console-fra.rpki-client.org