Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f34270a9-0fd3-32f8-86a5-9c97bb4313ac.roa
File:                     f34270a9-0fd3-32f8-86a5-9c97bb4313ac.roa (raw, json)
Hash identifier:          ZklXuTt8C1yuZyncRzE8FDa+RMr494RTKT40Wpd8Vhk=
Subject key identifier:   34:CE:EB:05:37:51:5B:1C:AF:13:A7:23:2D:C7:C0:45:6C:07:B2:95
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840D18329385FB3745EB3046180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f34270a9-0fd3-32f8-86a5-9c97bb4313ac.roa
Signing time:             Sun 05 Feb 2023 12:00:00 +0000
ROA not before:           Sun 05 Feb 2023 12:00:00 +0000
ROA not after:            Mon 13 Mar 2023 04:00:00 +0000
asID:                     14618
IP address blocks:        168.192.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:d1:83:29:38:5f:b3:74:5e:b3:04:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  5 12:00:00 2023 GMT
            Not After : Mar 13 04:00:00 2023 GMT
        Subject: CN=2be9a7cd-d4d3-4557-b23f-d2b9468ca3be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:74:22:4d:e5:86:0c:39:6a:72:71:61:b3:26:
                    cd:f6:31:ce:7a:6c:4d:91:98:d0:28:05:5b:a5:a2:
                    0d:a3:65:0c:d9:fe:ea:59:fe:f8:e2:78:72:4b:1b:
                    fc:72:34:e7:7c:54:74:f0:d8:8e:c4:6f:ca:3d:72:
                    a2:7d:40:bf:75:6a:25:65:bc:10:e9:96:b8:47:57:
                    cb:0b:fb:88:42:00:82:c8:cd:ec:75:d2:65:65:c7:
                    5c:bd:3e:c0:68:78:c6:c7:fd:b9:fc:c4:0a:b4:ff:
                    fe:1e:28:51:bc:92:8c:72:8a:a7:18:5e:5a:6a:ee:
                    1c:22:fa:9b:c5:ee:4b:a4:bf:eb:df:1f:fc:51:ab:
                    74:00:bf:7b:ef:f1:4e:fc:9d:48:c8:e5:a3:ed:cf:
                    2c:06:76:1f:ad:48:22:16:39:34:34:b8:51:68:bd:
                    2a:e9:66:b6:6b:63:4e:51:3e:d7:35:49:63:13:d7:
                    5b:d9:5c:56:6a:24:7f:34:7f:59:11:bc:83:82:36:
                    5b:5d:63:03:04:b2:d3:6b:06:5b:88:26:13:b6:3b:
                    4a:eb:f7:a2:70:c0:3b:07:55:14:52:3e:19:87:2c:
                    d1:3e:c9:7c:c2:76:54:71:5d:38:ba:0f:4d:bc:8d:
                    e2:e0:fc:81:fa:1f:7b:1d:e4:c7:f0:fb:73:82:7a:
                    f3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CE:EB:05:37:51:5B:1C:AF:13:A7:23:2D:C7:C0:45:6C:07:B2:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f34270a9-0fd3-32f8-86a5-9c97bb4313ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.192.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:4a:ab:ba:cc:c1:ce:c3:b5:71:24:80:22:cf:cc:6c:e6:a4:
         cd:13:9f:ac:74:d6:fe:ee:71:a6:02:99:e5:5a:f9:ea:2e:df:
         82:ef:0c:be:82:df:4c:33:31:bd:04:c5:04:5b:78:c3:e7:1c:
         ef:2a:0b:21:7b:df:b7:d0:fe:d8:fe:5e:bb:f8:1a:11:23:ad:
         f9:ea:a5:29:2f:48:1b:13:4b:8b:10:67:fd:be:d6:20:eb:7c:
         d7:4f:76:66:ad:1d:bc:b0:76:89:86:9b:8b:ad:7d:7c:2d:ad:
         23:a7:67:10:58:eb:4d:62:08:e0:43:be:0f:bb:58:d9:0f:e3:
         89:2d:d2:45:9f:15:49:09:79:d5:e7:1f:ef:e6:fb:fa:82:67:
         18:29:8d:6c:ad:46:9b:2c:e5:c1:d2:5a:23:60:c9:6e:be:98:
         7e:28:46:3e:6f:65:26:49:1a:86:cc:bf:9e:eb:7c:a6:11:37:
         79:e0:30:32:9c:01:32:4e:5c:6f:55:a0:33:b2:77:1f:01:36:
         3f:34:39:db:1f:47:ed:ed:93:9b:62:49:53:7b:3e:51:b0:2a:
         6e:39:e8:d1:d6:de:39:71:b9:1e:45:3f:8e:c7:ba:cb:10:ac:
         7b:14:92:22:01:7a:c6:e3:9a:e9:6e:8b:d6:ef:bb:90:0d:7f:
         bd:7f:70:7a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEDRgyk4X7N0XrMEYYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDIwNTEyMDAwMFoXDTIzMDMxMzA0MDAwMFowLzEtMCsGA1UEAxMk
MmJlOWE3Y2QtZDRkMy00NTU3LWIyM2YtZDJiOTQ2OGNhM2JlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHQiTeWGDDlqcnFhsybN9jHOemxNkZjQKAVb
paINo2UM2f7qWf744nhySxv8cjTnfFR08NiOxG/KPXKifUC/dWolZbwQ6Za4R1fL
C/uIQgCCyM3sddJlZcdcvT7AaHjGx/25/MQKtP/+HihRvJKMcoqnGF5aau4cIvqb
xe5LpL/r3x/8Uat0AL977/FO/J1IyOWj7c8sBnYfrUgiFjk0NLhRaL0q6Wa2a2NO
UT7XNUljE9db2VxWaiR/NH9ZEbyDgjZbXWMDBLLTawZbiCYTtjtK6/eicMA7B1UU
Uj4ZhyzRPsl8wnZUcV04ug9NvI3i4PyB+h97HeTH8PtzgnrzJwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDTO6wU3UVscrxOnIy3HwEVsB7KVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjM0MjcwYTktMGZkMy0z
MmY4LTg2YTUtOWM5N2JiNDMxM2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBqMAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMkqruszBzsO1cSSAIs/MbOakzROfrHTW/u5xpgKZ5Vr56i7fgu8MvoLf
TDMxvQTFBFt4w+cc7yoLIXvft9D+2P5eu/gaESOt+eqlKS9IGxNLixBn/b7WIOt8
1092Zq0dvLB2iYabi619fC2tI6dnEFjrTWII4EO+D7tY2Q/jiS3SRZ8VSQl51ecf
7+b7+oJnGCmNbK1GmyzlwdJaI2DJbr6YfihGPm9lJkkahsy/nut8phE3eeAwMpwB
Mk5cb1WgM7J3HwE2PzQ52x9H7e2Tm2JJU3s+UbAqbjno0dbeOXG5HkU/jse6yxCs
exSSIgF6xuOa6W6L1u+7kA1/vX9weg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:57:21 2024 by rpki-client on console-fra.rpki-client.org