Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b5435194-77e2-3fb2-a892-1e4adc99b9f2.roa
File:                     b5435194-77e2-3fb2-a892-1e4adc99b9f2.roa (raw, json)
Hash identifier:          SK2EqE1QSniVrgoElRQZfKd1fJrlm2g0UJPbQTpNR5k=
Subject key identifier:   6B:98:01:A3:CA:D8:DC:86:F4:CB:49:0E:98:DB:0F:44:51:66:92:BC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840D1656EF519A64973AEB26FC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b5435194-77e2-3fb2-a892-1e4adc99b9f2.roa
Signing time:             Sun 05 Feb 2023 12:00:00 +0000
ROA not before:           Sun 05 Feb 2023 12:00:00 +0000
ROA not after:            Mon 13 Mar 2023 04:00:00 +0000
asID:                     16509
IP address blocks:        192.157.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:d1:65:6e:f5:19:a6:49:73:ae:b2:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  5 12:00:00 2023 GMT
            Not After : Mar 13 04:00:00 2023 GMT
        Subject: CN=1f9c2362-3c52-420d-8181-21e721eae8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ed:0a:70:de:27:dd:70:cc:4e:61:c9:b6:d9:
                    a9:2b:68:19:c3:4e:ab:67:15:f0:1b:89:7c:7d:9c:
                    f0:0f:76:d0:d3:b1:61:ec:83:53:29:45:47:3a:c7:
                    b5:b4:4a:ef:73:ce:22:f4:f2:f9:d6:a8:dd:d2:59:
                    41:07:53:58:e6:79:39:f1:a8:32:ce:fb:13:6d:37:
                    b6:23:f6:c6:a5:6c:f9:89:b1:18:6a:4f:ac:85:79:
                    ef:63:c8:5e:85:a8:85:8c:72:af:97:ed:e4:20:2c:
                    0a:43:e8:42:ed:fb:c5:7c:92:40:06:30:17:bd:c2:
                    2e:7f:0e:d2:37:74:e7:e4:36:13:f9:08:ef:d9:78:
                    8d:f5:80:ee:4e:39:62:40:51:cd:0d:d1:b8:71:d0:
                    b2:62:e1:85:7e:7b:5e:eb:9b:82:75:bb:37:e0:d9:
                    d7:9d:46:9e:61:35:b7:c7:e7:63:58:66:5e:f3:0a:
                    d5:85:d8:fa:11:63:31:04:7a:31:1d:d7:2e:48:3d:
                    64:a5:c6:02:40:5a:e0:fc:8f:f4:ec:27:74:95:66:
                    58:f8:8f:30:a0:5c:61:95:30:0f:c5:02:08:2d:a8:
                    d3:de:00:8e:2a:70:af:34:24:45:2a:17:a0:53:10:
                    e9:23:c1:22:4f:98:f0:41:88:a6:59:e0:da:72:4d:
                    a2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:98:01:A3:CA:D8:DC:86:F4:CB:49:0E:98:DB:0F:44:51:66:92:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b5435194-77e2-3fb2-a892-1e4adc99b9f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:2b:3f:01:70:7e:46:f5:d9:6a:9f:1a:6c:2b:c4:6f:fd:b2:
         99:db:85:30:c4:a2:ed:e1:50:a1:80:c6:11:5d:f3:8d:19:a3:
         db:27:e7:c6:d3:36:86:40:5d:8e:45:dc:9d:68:68:4b:56:3d:
         8b:21:11:c7:2e:71:a0:9c:28:cc:3e:7a:95:84:4b:ad:00:60:
         db:52:a7:0e:45:e7:95:18:e1:6a:6e:7e:53:f2:a8:bb:3b:30:
         78:7b:e4:0f:19:be:06:01:71:51:8c:fd:29:ef:e9:60:58:c1:
         25:31:35:9d:23:6d:34:66:ec:a2:48:f7:69:dc:43:4c:5d:97:
         43:5b:4e:f7:a9:2a:ea:22:16:31:b3:f4:54:b1:98:9a:9e:da:
         55:0d:62:5b:79:23:37:c2:54:50:64:fa:1b:89:d0:8e:8a:18:
         15:77:cb:d1:7c:a8:d6:cd:6b:d7:d4:47:a1:68:c3:69:c3:6f:
         07:65:a3:26:09:75:08:a8:e9:cf:b9:02:1a:a5:59:fb:71:be:
         45:bb:10:a3:06:00:54:e8:98:9b:93:6a:e9:06:18:5a:89:dd:
         8a:42:04:1c:c3:5b:5f:9f:5b:14:db:4d:48:84:64:1e:d0:1e:
         ea:88:80:41:d9:48:88:6c:ed:a9:36:45:69:f0:b6:ed:d9:da:
         6b:9d:b1:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEDRZW71GaZJc66yb8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDIwNTEyMDAwMFoXDTIzMDMxMzA0MDAwMFowLzEtMCsGA1UEAxMk
MWY5YzIzNjItM2M1Mi00MjBkLTgxODEtMjFlNzIxZWFlOGQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO0KcN4n3XDMTmHJttmpK2gZw06rZxXwG4l8
fZzwD3bQ07Fh7INTKUVHOse1tErvc84i9PL51qjd0llBB1NY5nk58agyzvsTbTe2
I/bGpWz5ibEYak+shXnvY8hehaiFjHKvl+3kICwKQ+hC7fvFfJJABjAXvcIufw7S
N3Tn5DYT+Qjv2XiN9YDuTjliQFHNDdG4cdCyYuGFfnte65uCdbs34NnXnUaeYTW3
x+djWGZe8wrVhdj6EWMxBHoxHdcuSD1kpcYCQFrg/I/07Cd0lWZY+I8woFxhlTAP
xQIILajT3gCOKnCvNCRFKhegUxDpI8EiT5jwQYimWeDack2ieQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGuYAaPK2NyG9MtJDpjbD0RRZpK8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYjU0MzUxOTQtNzdlMi0z
ZmIyLWE4OTItMWU0YWRjOTliOWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwJ0gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADwrPwFwfkb12WqfGmwrxG/9spnbhTDEou3hUKGAxhFd840Zo9sn58bT
NoZAXY5F3J1oaEtWPYshEccucaCcKMw+epWES60AYNtSpw5F55UY4WpuflPyqLs7
MHh75A8ZvgYBcVGM/Snv6WBYwSUxNZ0jbTRm7KJI92ncQ0xdl0NbTvepKuoiFjGz
9FSxmJqe2lUNYlt5IzfCVFBk+huJ0I6KGBV3y9F8qNbNa9fUR6Fow2nDbwdloyYJ
dQio6c+5AhqlWftxvkW7EKMGAFTomJuTaukGGFqJ3YpCBBzDW1+fWxTbTUiEZB7Q
HuqIgEHZSIhs7ak2RWnwtu3Z2mudsTA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:55:17 2024 by rpki-client on console-fra.rpki-client.org