Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c284d4db-d9bb-4a79-b175-3c50e5c12e7f/a4b90787-fbc2-31da-a533-50cd291088b9.roa
File:                     a4b90787-fbc2-31da-a533-50cd291088b9.roa (raw, json)
Hash identifier:          ziBxsvU3p+FY3QeRTGLInGYG5GejSGC/VRZmhT4IP98=
Subject key identifier:   FD:BF:40:0D:0F:CF:92:AD:9D:9E:D1:38:C7:52:B4:97:60:F6:F7:C9
Certificate issuer:       /CN=c284d4db-d9bb-4a79-b175-3c50e5c12e7f
Certificate serial:       010D0C9F4328583EE19F17E5E5C048A81DF46520
Authority key identifier: C9:FA:77:7E:3C:25:6C:54:91:F5:FB:FF:2C:08:21:D5:80:DA:CF:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c284d4db-d9bb-4a79-b175-3c50e5c12e7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c284d4db-d9bb-4a79-b175-3c50e5c12e7f/a4b90787-fbc2-31da-a533-50cd291088b9.roa
Signing time:             Thu 11 Aug 2022 20:17:01 +0000
ROA not before:           Thu 11 Aug 2022 20:17:01 +0000
ROA not after:            Sun 05 Mar 2023 05:00:00 +0000
asID:                     7118
IP address blocks:        216.252.144.0/24 maxlen: 24
                          216.252.145.0/24 maxlen: 24
                          216.252.147.0/24 maxlen: 24
                          216.252.146.0/24 maxlen: 24
                          216.252.148.0/24 maxlen: 24
                          216.252.149.0/24 maxlen: 24
                          216.252.150.0/24 maxlen: 24
                          216.252.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e1:9f:17:e5:e5:c0:48:a8:1d:f4:65:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c284d4db-d9bb-4a79-b175-3c50e5c12e7f
        Validity
            Not Before: Aug 11 20:17:01 2022 GMT
            Not After : Mar  5 05:00:00 2023 GMT
        Subject: CN=b92260bf-7f1e-49fd-ab83-2f5a1e0eb320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:31:22:87:12:b7:7a:8b:84:a4:a5:6a:5f:85:
                    94:82:48:8f:56:c8:bf:06:ff:58:8f:7f:a8:92:69:
                    93:ca:c7:d3:3a:e9:4b:ab:52:47:72:44:d7:71:42:
                    2d:6f:d5:a2:f2:78:ac:00:27:9a:42:cd:0f:67:49:
                    b9:5f:a2:0d:5a:b6:f8:0a:c6:a5:6d:57:c6:c7:13:
                    23:f5:b4:d3:78:5c:d5:e3:0d:d7:27:c2:ec:a5:63:
                    c6:24:eb:1e:4b:dd:cf:06:4a:50:91:ed:d2:86:77:
                    b9:d5:d3:a6:f4:12:82:29:37:71:81:b2:ef:09:26:
                    9b:92:e4:c4:44:27:0a:c9:ea:c9:27:e2:b8:1d:c1:
                    75:9b:45:2a:3c:a9:00:7a:ca:1b:19:cd:81:52:8b:
                    bb:66:e4:7a:f9:7e:ab:a5:07:c7:60:43:7a:5f:7c:
                    42:38:98:d1:f7:c4:78:a8:89:d4:20:27:77:29:0d:
                    bd:6f:c7:0b:fb:7d:00:68:83:8c:0c:c1:c3:eb:d3:
                    cb:1a:a5:7c:f1:c1:b7:5a:69:1a:e3:34:a9:f0:83:
                    a4:6a:3c:57:b1:f4:d5:0f:62:82:66:9a:2b:78:57:
                    e6:50:6c:0a:db:14:a7:1d:13:fd:5f:2f:91:d0:96:
                    3d:2e:e4:bc:32:f8:0f:7b:c0:4a:e5:75:2f:3f:a2:
                    9d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BF:40:0D:0F:CF:92:AD:9D:9E:D1:38:C7:52:B4:97:60:F6:F7:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c284d4db-d9bb-4a79-b175-3c50e5c12e7f/a4b90787-fbc2-31da-a533-50cd291088b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c284d4db-d9bb-4a79-b175-3c50e5c12e7f/c284d4db-d9bb-4a79-b175-3c50e5c12e7f.crl

            X509v3 Authority Key Identifier:
                keyid:C9:FA:77:7E:3C:25:6C:54:91:F5:FB:FF:2C:08:21:D5:80:DA:CF:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c284d4db-d9bb-4a79-b175-3c50e5c12e7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.252.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:c1:29:a3:f4:14:84:dd:e3:98:dd:80:f4:46:bc:74:82:5f:
         39:2e:69:a9:d4:32:24:fa:39:2d:f6:bc:94:be:b1:7a:18:d8:
         d8:7a:87:83:74:ff:08:44:c6:09:7c:3d:64:9e:c1:66:a0:e7:
         ac:82:0c:4e:26:8b:41:3d:28:f6:b0:3c:9b:fc:af:d5:ea:7e:
         5d:f2:37:48:25:08:d4:f0:f8:b9:6a:91:ea:88:37:14:53:3a:
         b4:5d:f1:9d:5d:e7:2c:56:2d:b4:96:8e:ea:fb:84:00:3e:4c:
         91:1c:4c:ef:e4:30:3e:65:17:b7:3f:69:38:f1:c9:a3:bc:f3:
         c7:10:10:81:1a:37:ac:1d:f4:8d:12:59:ca:7c:30:3a:e3:3f:
         5a:5d:67:4b:dd:53:ce:3e:05:6f:95:56:2d:d8:89:43:14:c1:
         08:a2:7a:46:0d:84:b0:ae:57:41:53:06:a8:c0:51:2f:23:a1:
         2a:23:40:8b:75:09:51:be:7b:8c:d7:c6:48:f9:9d:96:fd:f9:
         4d:8f:9d:c2:e9:52:7e:3e:39:c2:79:75:02:54:a9:90:a9:28:
         80:2a:0e:6e:a7:ef:c4:50:72:56:30:84:37:92:0d:75:f0:3f:
         c6:b4:ad:3a:b2:7f:22:de:e7:75:07:d8:f6:bd:6b:c4:9d:69:
         04:53:22:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD7hnxfl5cBIqB30ZSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzI4NGQ0ZGItZDliYi00YTc5LWIxNzUtM2M1MGU1YzEy
ZTdmMB4XDTIyMDgxMTIwMTcwMVoXDTIzMDMwNTA1MDAwMFowLzEtMCsGA1UEAxMk
YjkyMjYwYmYtN2YxZS00OWZkLWFiODMtMmY1YTFlMGViMzIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDEihxK3eouEpKVqX4WUgkiPVsi/Bv9Yj3+o
kmmTysfTOulLq1JHckTXcUItb9Wi8nisACeaQs0PZ0m5X6INWrb4CsalbVfGxxMj
9bTTeFzV4w3XJ8LspWPGJOseS93PBkpQke3Shne51dOm9BKCKTdxgbLvCSabkuTE
RCcKyerJJ+K4HcF1m0UqPKkAesobGc2BUou7ZuR6+X6rpQfHYEN6X3xCOJjR98R4
qInUICd3KQ29b8cL+30AaIOMDMHD69PLGqV88cG3Wmka4zSp8IOkajxXsfTVD2KC
ZporeFfmUGwK2xSnHRP9Xy+R0JY9LuS8MvgPe8BK5XUvP6KdPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP2/QA0Pz5KtnZ7ROMdStJdg9vfJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jMjg0
ZDRkYi1kOWJiLTRhNzktYjE3NS0zYzUwZTVjMTJlN2YvYTRiOTA3ODctZmJjMi0z
MWRhLWE1MzMtNTBjZDI5MTA4OGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzI4NGQ0ZGItZDliYi00YTc5LWIx
NzUtM2M1MGU1YzEyZTdmL2MyODRkNGRiLWQ5YmItNGE3OS1iMTc1LTNjNTBlNWMx
MmU3Zi5jcmwwHwYDVR0jBBgwFoAUyfp3fjwlbFSR9fv/LAgh1YDaz6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jMjg0ZDRkYi1kOWJiLTRhNzktYjE3NS0zYzUw
ZTVjMTJlN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2PyQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJHBKaP0FITd45jdgPRGvHSCXzkuaanUMiT6OS32vJS+sXoY2Nh6h4N0
/whExgl8PWSewWag56yCDE4mi0E9KPawPJv8r9Xqfl3yN0glCNTw+LlqkeqINxRT
OrRd8Z1d5yxWLbSWjur7hAA+TJEcTO/kMD5lF7c/aTjxyaO888cQEIEaN6wd9I0S
Wcp8MDrjP1pdZ0vdU84+BW+VVi3YiUMUwQiiekYNhLCuV0FTBqjAUS8joSojQIt1
CVG+e4zXxkj5nZb9+U2PncLpUn4+OcJ5dQJUqZCpKIAqDm6n78RQclYwhDeSDXXw
P8a0rTqyfyLe53UH2Pa9a8SdaQRTIrQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:22 2023 by rpki-client on console-fra.rpki-client.org