Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29ce9a8d-ea05-3d3a-8ffd-db29f21bc3d5.roa
File:                     29ce9a8d-ea05-3d3a-8ffd-db29f21bc3d5.roa (raw, json)
Hash identifier:          vK9heJrULdgWdYKCkgqF3b7pYklzFG0JyuCnYkreTqM=
Subject key identifier:   7F:89:88:05:41:6B:FB:7E:E7:1D:B4:F2:72:CC:69:01:60:49:FE:8D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584075718767558E712F9C752C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29ce9a8d-ea05-3d3a-8ffd-db29f21bc3d5.roa
Signing time:             Tue 03 Jan 2023 12:00:00 +0000
ROA not before:           Tue 03 Jan 2023 12:00:00 +0000
ROA not after:            Wed 08 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        56.184.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:75:71:87:67:55:8e:71:2f:9c:75:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  3 12:00:00 2023 GMT
            Not After : Feb  8 05:00:00 2023 GMT
        Subject: CN=799d9193-9043-4cf3-8905-104f3d6c0ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:67:7a:c1:d7:b8:46:fb:14:70:51:98:6f:09:
                    ba:76:53:b0:33:56:86:95:73:7b:a8:e9:4d:3e:f1:
                    5a:21:4b:c8:f8:ed:f2:b0:73:d5:b9:75:f7:92:1d:
                    55:f7:4d:5e:73:d9:f7:3e:af:73:9d:97:92:27:7d:
                    c0:35:c6:f8:df:9a:96:4d:e4:f8:29:af:b1:ba:3e:
                    5c:2a:ad:07:4f:50:90:32:73:b0:2a:34:a9:01:44:
                    62:63:08:eb:26:8b:e2:54:63:11:28:cb:a4:8e:af:
                    74:a1:b5:87:0f:9b:a3:26:4a:24:3a:55:98:2c:63:
                    86:6b:45:4e:bc:01:3c:83:83:3c:e1:3c:d6:1b:a8:
                    2f:4b:94:aa:a4:a4:4d:5d:e3:ac:84:4d:68:0c:cd:
                    a6:ad:18:cf:df:e2:e1:cc:c7:38:ad:ac:61:bd:59:
                    1c:71:11:da:bd:32:be:de:d9:72:5b:68:bc:cd:ff:
                    7f:95:5d:22:60:48:6b:2d:7c:19:5b:17:d5:0d:f6:
                    e4:aa:cb:3e:e9:f4:c8:95:39:ba:02:ab:4f:81:d0:
                    65:aa:2c:a3:83:bc:e8:e9:37:52:f9:90:c6:89:b8:
                    19:78:ff:71:0c:8c:84:95:e1:3c:0a:09:59:38:89:
                    fe:36:ce:c3:e6:be:1e:67:16:c1:d5:00:76:2e:d5:
                    c0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:89:88:05:41:6B:FB:7E:E7:1D:B4:F2:72:CC:69:01:60:49:FE:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29ce9a8d-ea05-3d3a-8ffd-db29f21bc3d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.184.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:73:90:9b:fe:d3:ca:5f:a3:75:11:22:bd:c9:d1:8a:9f:88:
         4f:95:94:ef:32:2f:6c:61:c1:af:24:22:6e:3a:95:9c:39:a2:
         d7:ae:6d:17:d6:9b:ed:6f:f4:c8:82:cd:12:35:3a:23:72:eb:
         d1:6c:51:14:e9:0c:74:3c:e5:fb:48:f0:f2:7d:db:11:d8:df:
         b0:e1:4a:c6:e8:9b:99:92:55:32:e9:82:d4:fb:20:70:4d:81:
         39:55:98:df:bb:36:23:9e:5e:b3:30:dd:94:0f:10:de:a6:8c:
         a0:7b:7f:4f:81:61:c1:6c:36:01:11:f1:4f:ce:c4:64:27:aa:
         f2:9e:7d:44:1d:28:f5:e2:bf:d9:d2:b4:76:f1:c6:16:ca:75:
         38:e8:9b:d6:56:f6:fc:65:ba:28:5c:d4:2e:22:5e:9a:4d:81:
         9e:3c:74:f5:6a:73:58:10:5f:8e:9f:0a:42:fa:50:8e:19:ad:
         55:33:8c:0e:af:8c:77:d5:43:5d:79:47:59:9a:a2:62:67:5a:
         f0:4c:89:20:24:36:28:8e:9b:1b:7b:cf:37:07:bc:32:cf:91:
         aa:a4:2d:47:64:9c:9c:cd:ad:50:33:38:34:1f:13:37:0b:93:
         7f:cc:a1:22:a2:a9:a8:7a:5e:2f:dc:64:d4:f3:81:c4:3c:ab:
         88:cc:14:59
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEB1cYdnVY5xL5x1LIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEwMzEyMDAwMFoXDTIzMDIwODA1MDAwMFowLzEtMCsGA1UEAxMk
Nzk5ZDkxOTMtOTA0My00Y2YzLTg5MDUtMTA0ZjNkNmMwYWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2d6wde4RvsUcFGYbwm6dlOwM1aGlXN7qOlN
PvFaIUvI+O3ysHPVuXX3kh1V901ec9n3Pq9znZeSJ33ANcb435qWTeT4Ka+xuj5c
Kq0HT1CQMnOwKjSpAURiYwjrJoviVGMRKMukjq90obWHD5ujJkokOlWYLGOGa0VO
vAE8g4M84TzWG6gvS5SqpKRNXeOshE1oDM2mrRjP3+LhzMc4raxhvVkccRHavTK+
3tlyW2i8zf9/lV0iYEhrLXwZWxfVDfbkqss+6fTIlTm6AqtPgdBlqiyjg7zo6TdS
+ZDGibgZeP9xDIyEleE8CglZOIn+Ns7D5r4eZxbB1QB2LtXAIwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFH+JiAVBa/t+5x208nLMaQFgSf6NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjljZTlhOGQtZWEwNS0z
ZDNhLThmZmQtZGIyOWYyMWJjM2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOLgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgXOQm/7Tyl+jdREivcnRip+IT5WU7zIvbGHBryQibjqVnDmi165tF9ab
7W/0yILNEjU6I3Lr0WxRFOkMdDzl+0jw8n3bEdjfsOFKxuibmZJVMumC1PsgcE2B
OVWY37s2I55eszDdlA8Q3qaMoHt/T4FhwWw2ARHxT87EZCeq8p59RB0o9eK/2dK0
dvHGFsp1OOib1lb2/GW6KFzULiJemk2Bnjx09WpzWBBfjp8KQvpQjhmtVTOMDq+M
d9VDXXlHWZqiYmda8EyJICQ2KI6bG3vPNwe8Ms+RqqQtR2ScnM2tUDM4NB8TNwuT
f8yhIqKpqHpeL9xk1POBxDyriMwUWQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:48 2023 by rpki-client on console-fra.rpki-client.org