Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/cb8c0ac1-ad62-320b-96a2-866d8ef819a3.roa
File:                     cb8c0ac1-ad62-320b-96a2-866d8ef819a3.roa (raw, json)
Hash identifier:          gO3jw14fel6cj4YZPLsxrL6TXA/fs8kvbYusj4/Feo4=
Subject key identifier:   27:52:6E:02:33:58:B4:79:D5:94:E8:55:BE:69:4D:CA:1D:59:4D:43
Certificate issuer:       /CN=5054a223-c485-46b0-b02c-2fdc3bfe26bc
Certificate serial:       010D0C9F4328583EFFFB1845DF086C771974B900
Authority key identifier: 8B:F7:51:E2:E3:D2:43:13:56:DE:2E:5A:0B:B4:F8:A0:BA:4D:40:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/cb8c0ac1-ad62-320b-96a2-866d8ef819a3.roa
Signing time:             Fri 24 Jun 2022 17:36:07 +0000
ROA not before:           Fri 24 Jun 2022 17:36:07 +0000
ROA not after:            Mon 25 Nov 2030 05:00:00 +0000
asID:                     924
IP address blocks:        23.134.88.0/24 maxlen: 24
                          216.146.24.0/24 maxlen: 24
                          216.146.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:ff:fb:18:45:df:08:6c:77:19:74:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5054a223-c485-46b0-b02c-2fdc3bfe26bc
        Validity
            Not Before: Jun 24 17:36:07 2022 GMT
            Not After : Nov 25 05:00:00 2030 GMT
        Subject: CN=7450e848-ac9d-448c-a651-309ed9a248ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e2:6a:7c:32:02:ec:fd:0e:1c:e2:d3:f7:91:
                    1c:d8:d1:07:61:67:2b:02:b7:5c:d9:e7:53:d4:3a:
                    a0:84:f5:f6:da:09:29:ee:98:45:ac:af:16:4f:c7:
                    e2:e2:92:e8:20:73:ad:85:94:25:9a:c7:57:ab:67:
                    63:c8:cc:30:4a:c7:6a:df:f8:54:c5:1c:1e:95:1f:
                    29:0b:79:df:f6:6c:16:96:e0:39:80:25:57:a0:9f:
                    4c:ad:cc:3d:ed:6d:7d:55:5c:8a:35:2b:71:3e:01:
                    b5:0f:56:37:5e:57:a9:b6:4f:fc:4a:53:2d:47:bc:
                    dc:c1:cd:bd:d9:75:97:93:1a:03:97:ed:bf:b6:43:
                    76:6a:cf:92:d8:53:5f:ed:82:55:e6:61:5d:f9:4b:
                    13:53:b1:ae:72:5d:96:85:a2:cf:e3:00:0f:4b:e5:
                    7d:5f:36:99:54:49:b0:07:5a:79:8c:68:8d:f8:0e:
                    02:91:be:94:d7:16:e6:28:16:57:70:4a:a6:56:39:
                    2a:6a:ee:e6:3e:5b:63:7f:65:72:e2:8a:13:85:7f:
                    f9:94:99:14:65:e0:87:fd:b8:ad:95:bd:3f:3c:80:
                    5b:96:cf:7e:3f:01:1b:fd:96:cf:f3:3b:26:69:82:
                    0d:37:f8:10:b9:c9:9b:b3:da:54:3a:a5:c1:64:11:
                    68:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:52:6E:02:33:58:B4:79:D5:94:E8:55:BE:69:4D:CA:1D:59:4D:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/cb8c0ac1-ad62-320b-96a2-866d8ef819a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/5054a223-c485-46b0-b02c-2fdc3bfe26bc.crl

            X509v3 Authority Key Identifier:
                keyid:8B:F7:51:E2:E3:D2:43:13:56:DE:2E:5A:0B:B4:F8:A0:BA:4D:40:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.88.0/24
                  216.146.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:c4:0f:4a:e7:09:a5:7f:3d:ee:1a:ca:d5:70:4e:62:6b:e0:
         26:19:d7:3e:4a:a8:d3:aa:bc:58:99:4e:bf:3a:ac:8c:7c:3b:
         b7:10:c1:16:92:9b:45:a4:63:04:72:93:87:a1:01:14:12:fe:
         96:2e:0a:80:10:c4:f8:18:d1:81:78:8d:22:08:e4:f4:60:19:
         b4:97:c5:7e:55:78:12:55:32:95:a7:8f:59:50:0a:b7:cf:4a:
         8d:9c:c9:30:c7:55:b6:ce:65:70:96:4b:f7:4f:c7:1c:fe:88:
         aa:c7:ce:f2:78:54:5d:b1:53:93:bf:4e:1c:84:02:ef:32:c7:
         b1:3d:0b:1c:2f:4f:ab:79:08:18:f7:ff:a8:e9:fb:37:eb:ed:
         eb:39:65:13:a3:5e:db:4b:cb:c5:55:9d:73:ac:a0:0e:1a:49:
         2c:46:36:60:a9:db:6d:7a:9c:62:2e:42:ba:87:23:df:d5:5c:
         3c:bd:24:9d:3c:a0:cf:78:73:69:bd:d9:a3:2d:d0:be:9e:b6:
         b4:dd:b2:24:29:e4:99:c1:64:68:75:2c:50:8a:5e:57:78:e4:
         71:96:1d:ee:a9:65:4b:93:11:93:6e:df:6b:fc:82:f4:70:3f:
         12:60:b3:a4:17:ef:dc:f9:bd:d1:99:d8:03:d4:43:2a:6e:53:
         5e:9c:dd:9b
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWD7/+xhF3whsdxl0uQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTA1NGEyMjMtYzQ4NS00NmIwLWIwMmMtMmZkYzNiZmUy
NmJjMB4XDTIyMDYyNDE3MzYwN1oXDTMwMTEyNTA1MDAwMFowLzEtMCsGA1UEAxMk
NzQ1MGU4NDgtYWM5ZC00NDhjLWE2NTEtMzA5ZWQ5YTI0OGFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OJqfDIC7P0OHOLT95Ec2NEHYWcrArdc2edT
1DqghPX22gkp7phFrK8WT8fi4pLoIHOthZQlmsdXq2djyMwwSsdq3/hUxRwelR8p
C3nf9mwWluA5gCVXoJ9Mrcw97W19VVyKNStxPgG1D1Y3Xleptk/8SlMtR7zcwc29
2XWXkxoDl+2/tkN2as+S2FNf7YJV5mFd+UsTU7Gucl2WhaLP4wAPS+V9XzaZVEmw
B1p5jGiN+A4Ckb6U1xbmKBZXcEqmVjkqau7mPltjf2Vy4ooThX/5lJkUZeCH/bit
lb0/PIBbls9+PwEb/ZbP8zsmaYINN/gQucmbs9pUOqXBZBFocwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFCdSbgIzWLR51ZToVb5pTcodWU1DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81MDU0
YTIyMy1jNDg1LTQ2YjAtYjAyYy0yZmRjM2JmZTI2YmMvY2I4YzBhYzEtYWQ2Mi0z
MjBiLTk2YTItODY2ZDhlZjgxOWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTA1NGEyMjMtYzQ4NS00NmIwLWIw
MmMtMmZkYzNiZmUyNmJjLzUwNTRhMjIzLWM0ODUtNDZiMC1iMDJjLTJmZGMzYmZl
MjZiYy5jcmwwHwYDVR0jBBgwFoAUi/dR4uPSQxNW3i5aC7T4oLpNQNEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81MDU0YTIyMy1jNDg1LTQ2YjAtYjAyYy0yZmRj
M2JmZTI2YmMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4ZYAwQB
2JIYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACLED0rnCaV/Pe4aytVwTmJr4CYZ1z5KqNOqvFiZTr86rIx8
O7cQwRaSm0WkYwRyk4ehARQS/pYuCoAQxPgY0YF4jSII5PRgGbSXxX5VeBJVMpWn
j1lQCrfPSo2cyTDHVbbOZXCWS/dPxxz+iKrHzvJ4VF2xU5O/ThyEAu8yx7E9Cxwv
T6t5CBj3/6jp+zfr7es5ZROjXttLy8VVnXOsoA4aSSxGNmCp2216nGIuQrqHI9/V
XDy9JJ08oM94c2m92aMt0L6etrTdsiQp5JnBZGh1LFCKXld45HGWHe6pZUuTEZNu
32v8gvRwPxJgs6QX79z5vdGZ2APUQypuU16c3Zs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:06:48 2024 by rpki-client on console-fra.rpki-client.org