Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/82921404-8de0-34cc-be39-ba3b09751e78.roa
File:                     82921404-8de0-34cc-be39-ba3b09751e78.roa (raw, json)
Hash identifier:          A2OkL0+eqitRn3YyLg+woWJMKQvkR5jQ39jxKB/fMiM=
Subject key identifier:   20:E0:98:6C:0E:3A:30:02:7A:1F:0F:F4:3A:62:DE:B0:AF:30:55:CD
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840952BB9881C661FA0B7FD9240
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/82921404-8de0-34cc-be39-ba3b09751e78.roa
Signing time:             Sat 14 Jan 2023 12:00:00 +0000
ROA not before:           Sat 14 Jan 2023 12:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        35.176.0.0/13 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:95:2b:b9:88:1c:66:1f:a0:b7:fd:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 14 12:00:00 2023 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=7a621cee-4461-445d-bf2a-fd495f2b2b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e4:7a:8f:ce:90:8a:de:d6:9f:c3:a6:b4:7a:
                    b0:f7:fe:40:14:8f:94:6c:36:b4:b7:2d:32:57:d3:
                    75:52:a9:bd:38:47:20:a3:94:96:cb:8f:01:04:fd:
                    3c:df:16:6d:3d:6f:35:7d:39:da:2a:17:22:35:70:
                    25:5e:fe:b7:cb:6b:24:f8:94:c9:53:35:e8:8a:29:
                    d9:32:2c:88:bb:86:98:cc:ee:ea:a6:f4:41:06:b4:
                    9a:27:3a:eb:81:ec:1f:db:80:2c:10:2f:50:b2:e6:
                    fe:db:f4:8b:2b:5c:d4:38:f4:16:24:ea:37:44:81:
                    c9:83:4c:6c:59:24:d4:6d:04:56:7f:7b:b7:c1:21:
                    d2:7f:74:c4:37:7e:1a:b2:81:7c:0e:45:1f:8a:ad:
                    b4:bc:da:5a:06:0c:4c:b8:ee:ce:4e:4a:4f:17:12:
                    84:e6:ce:39:25:73:17:46:41:ac:7a:cd:3b:d2:7c:
                    0e:28:8e:1c:5f:76:ec:a9:81:c5:9a:1e:ff:55:a0:
                    ca:7f:2f:3b:64:32:76:69:8c:06:6b:c7:b2:7c:bd:
                    2c:8b:1c:26:cb:fd:b4:10:be:1f:79:24:a7:e1:02:
                    5a:fa:e3:69:47:dd:95:38:e7:45:d8:8e:cd:8f:76:
                    f0:cb:dd:b6:2f:17:a7:80:1e:56:91:e6:6c:77:87:
                    ce:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E0:98:6C:0E:3A:30:02:7A:1F:0F:F4:3A:62:DE:B0:AF:30:55:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/82921404-8de0-34cc-be39-ba3b09751e78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.176.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:c2:55:8b:08:cf:89:19:cc:ed:ee:d3:42:76:a3:ff:33:0d:
         a8:2c:39:65:4c:31:7b:b6:46:82:92:08:9d:47:fe:72:f6:6f:
         ab:e6:9e:77:6d:b4:39:7e:d5:68:a5:ab:8a:3a:75:79:f9:d7:
         ec:26:4f:7e:f5:9c:69:4d:69:3b:dc:78:0a:cf:40:3a:41:73:
         a4:9b:34:db:aa:39:d8:a3:84:7a:fd:66:02:b9:e2:50:3b:6b:
         05:b2:4f:d7:8e:da:3a:80:ea:fe:b0:1a:bf:45:b2:1b:7d:9b:
         05:75:21:44:0e:08:04:ac:31:e4:01:e3:58:3d:ed:4c:bd:96:
         8f:e8:73:c4:b9:9f:6f:2d:e8:9d:51:e5:fa:eb:02:03:b6:5b:
         aa:80:5d:19:14:8a:74:24:0c:3f:5f:6e:4c:e9:14:87:37:7d:
         e0:42:8e:c6:7d:79:9b:71:fb:ae:ac:13:fc:91:bc:74:87:ff:
         bd:b7:c9:6d:21:c2:2b:a1:e1:22:df:5e:58:0b:3f:4b:3c:e0:
         73:ba:e7:9b:3c:a2:99:18:ab:78:26:14:30:9f:5e:89:79:a9:
         81:87:44:44:cd:17:59:a0:20:d0:e5:f0:0f:14:b4:7b:e0:dc:
         30:ed:2f:11:07:a8:a9:d5:0f:98:cd:b6:a0:1d:d9:24:0f:cd:
         12:db:2e:f1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECVK7mIHGYfoLf9kkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDExNDEyMDAwMFoXDTIzMDIxOTA1MDAwMFowLzEtMCsGA1UEAxMk
N2E2MjFjZWUtNDQ2MS00NDVkLWJmMmEtZmQ0OTVmMmIyYjMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieR6j86Qit7Wn8OmtHqw9/5AFI+UbDa0ty0y
V9N1Uqm9OEcgo5SWy48BBP083xZtPW81fTnaKhciNXAlXv63y2sk+JTJUzXoiinZ
MiyIu4aYzO7qpvRBBrSaJzrrgewf24AsEC9Qsub+2/SLK1zUOPQWJOo3RIHJg0xs
WSTUbQRWf3u3wSHSf3TEN34asoF8DkUfiq20vNpaBgxMuO7OTkpPFxKE5s45JXMX
RkGses070nwOKI4cX3bsqYHFmh7/VaDKfy87ZDJ2aYwGa8eyfL0sixwmy/20EL4f
eSSn4QJa+uNpR92VOOdF2I7Nj3bwy922LxengB5WkeZsd4fOdQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCDgmGwOOjACeh8P9Dpi3rCvMFXNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvODI5MjE0MDQtOGRlMC0z
NGNjLWJlMzktYmEzYjA5NzUxZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDI7AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZ8JViwjPiRnM7e7TQnaj/zMNqCw5ZUwxe7ZGgpIInUf+cvZvq+aed220
OX7VaKWrijp1efnX7CZPfvWcaU1pO9x4Cs9AOkFzpJs026o52KOEev1mArniUDtr
BbJP147aOoDq/rAav0WyG32bBXUhRA4IBKwx5AHjWD3tTL2Wj+hzxLmfby3onVHl
+usCA7ZbqoBdGRSKdCQMP19uTOkUhzd94EKOxn15m3H7rqwT/JG8dIf/vbfJbSHC
K6HhIt9eWAs/Szzgc7rnmzyimRireCYUMJ9eiXmpgYdERM0XWaAg0OXwDxS0e+Dc
MO0vEQeoqdUPmM22oB3ZJA/NEtsu8Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:33:11 2023 by rpki-client on console-fra.rpki-client.org