Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/53a6a734-3c6f-3842-b319-eeb41d3ed36e.roa
File:                     53a6a734-3c6f-3842-b319-eeb41d3ed36e.roa (raw, json)
Hash identifier:          WeRCoHFXSrNZmlbHdTBWACKkQtyQx71UfNrPRyV4/fs=
Subject key identifier:   8B:31:DF:45:2A:C1:EE:81:12:48:36:18:42:C1:59:ED:D9:C2:33:95
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840B670423A58E350EF19EAA1B0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/53a6a734-3c6f-3842-b319-eeb41d3ed36e.roa
Signing time:             Thu 26 Jan 2023 15:12:07 +0000
ROA not before:           Thu 26 Jan 2023 15:12:07 +0000
ROA not after:            Fri 03 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        76.223.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b6:70:42:3a:58:e3:50:ef:19:ea:a1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 26 15:12:07 2023 GMT
            Not After : Mar  3 05:00:00 2023 GMT
        Subject: CN=514b8ead-b973-48f1-8a3f-6d2565f1cc00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5e:3d:20:95:09:24:1e:0f:29:8f:0e:d0:68:
                    ef:3b:90:5f:11:56:cb:ab:54:34:96:a7:a8:b9:2e:
                    a0:01:80:a3:42:e3:7b:62:f8:61:b0:68:21:09:63:
                    7a:72:11:cf:e2:0e:33:31:1c:86:3b:de:a9:33:e8:
                    4b:e0:12:d8:b2:8c:6c:57:5a:6a:3e:6a:88:e1:ab:
                    ac:37:46:43:5c:d9:77:b7:64:9e:bf:87:8b:92:90:
                    be:07:b5:7a:23:87:d0:10:c0:ff:86:45:d2:68:d0:
                    61:4c:68:2c:ae:85:e2:e7:fe:9b:dd:c5:1d:ac:cf:
                    c5:99:b5:ea:6a:3a:fc:2f:84:0c:dd:d9:90:94:d9:
                    2a:f5:a3:0c:77:03:46:a2:1c:2f:8d:a3:4f:c2:65:
                    c5:bf:8f:82:ac:3b:10:92:6b:f6:36:78:14:a0:e4:
                    2b:8b:67:38:bd:b3:e4:8f:fa:8d:3f:b5:f0:79:71:
                    84:1f:6b:6e:6e:dd:92:9b:ea:29:90:5a:10:d8:71:
                    88:82:c4:e8:33:ac:1e:ad:57:3a:93:83:40:d1:53:
                    c6:dd:ef:93:3f:31:ec:24:40:78:18:bd:8c:4a:0d:
                    f3:2c:8b:d3:48:00:70:2a:11:30:0b:b3:44:8f:ce:
                    1b:a2:f9:fc:72:9c:54:95:5f:0c:06:77:4f:3b:9b:
                    57:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:31:DF:45:2A:C1:EE:81:12:48:36:18:42:C1:59:ED:D9:C2:33:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/53a6a734-3c6f-3842-b319-eeb41d3ed36e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:03:90:ef:c5:61:6b:57:38:f1:b8:9f:70:b5:fc:62:0a:1b:
         0e:33:1b:34:4b:7d:ab:9f:83:21:c6:4e:3b:68:23:86:67:95:
         dc:13:d1:f3:1b:38:0c:d5:a7:60:b6:99:f5:cb:cd:ab:ba:7e:
         be:9d:2f:1e:74:44:0d:82:aa:7f:dd:9b:73:4b:b7:d9:29:11:
         af:a6:2e:f7:0f:45:92:c4:22:3d:f4:7b:44:92:6d:1b:cb:69:
         76:aa:6f:d1:22:ba:1e:6c:55:c9:a8:41:ba:52:57:80:01:bc:
         08:52:9a:a8:29:06:c4:67:88:e6:8a:79:b7:3c:f7:6a:a4:d7:
         4d:e4:b1:81:b9:9e:20:ca:c6:73:b2:2e:3b:d8:bb:ff:d4:08:
         1a:46:39:c9:d1:0a:74:fe:1a:b3:6a:66:ef:df:91:13:da:2c:
         f7:55:50:14:be:30:d6:db:3c:e4:3c:37:dd:5d:cb:0c:84:b9:
         5a:28:eb:a7:71:0a:c5:05:62:bc:85:9c:7a:27:13:be:bc:55:
         8d:a4:86:75:01:39:48:9e:57:4e:ad:3d:04:37:0b:c2:d0:3a:
         56:aa:4c:97:d0:ef:95:9b:38:d3:3e:3f:66:6b:e5:f2:c3:26:
         11:b5:4d:f3:e0:5f:29:3e:f0:ef:d5:b4:05:5c:f6:a0:ec:57:
         d1:73:fd:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEC2cEI6WONQ7xnqobAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEyNjE1MTIwN1oXDTIzMDMwMzA1MDAwMFowLzEtMCsGA1UEAxMk
NTE0YjhlYWQtYjk3My00OGYxLThhM2YtNmQyNTY1ZjFjYzAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl49IJUJJB4PKY8O0GjvO5BfEVbLq1Q0lqeo
uS6gAYCjQuN7YvhhsGghCWN6chHP4g4zMRyGO96pM+hL4BLYsoxsV1pqPmqI4aus
N0ZDXNl3t2Sev4eLkpC+B7V6I4fQEMD/hkXSaNBhTGgsroXi5/6b3cUdrM/FmbXq
ajr8L4QM3dmQlNkq9aMMdwNGohwvjaNPwmXFv4+CrDsQkmv2NngUoOQri2c4vbPk
j/qNP7XweXGEH2tubt2Sm+opkFoQ2HGIgsToM6werVc6k4NA0VPG3e+TPzHsJEB4
GL2MSg3zLIvTSABwKhEwC7NEj84bovn8cpxUlV8MBndPO5tX5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIsx30Uqwe6BEkg2GELBWe3ZwjOVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNTNhNmE3MzQtM2M2Zi0z
ODQyLWIzMTktZWViNDFkM2VkMzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFTN+AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADIDkO/FYWtXOPG4n3C1/GIKGw4zGzRLfaufgyHGTjtoI4ZnldwT0fMb
OAzVp2C2mfXLzau6fr6dLx50RA2Cqn/dm3NLt9kpEa+mLvcPRZLEIj30e0SSbRvL
aXaqb9Eiuh5sVcmoQbpSV4ABvAhSmqgpBsRniOaKebc892qk103ksYG5niDKxnOy
LjvYu//UCBpGOcnRCnT+GrNqZu/fkRPaLPdVUBS+MNbbPOQ8N91dywyEuVoo66dx
CsUFYryFnHonE768VY2khnUBOUieV06tPQQ3C8LQOlaqTJfQ75WbONM+P2Zr5fLD
JhG1TfPgXyk+8O/VtAVc9qDsV9Fz/UY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:24:23 2023 by rpki-client on console-fra.rpki-client.org