Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31/9848c02b-e2e9-3595-9092-341e97632891.roa
File:                     9848c02b-e2e9-3595-9092-341e97632891.roa (raw, json)
Hash identifier:          MxRtyKUIwucFQQo83796pcKmePNVTMEV/fvJ82QKKok=
Subject key identifier:   9B:7C:8E:33:D2:BD:BC:A5:21:3A:ED:85:BE:B6:BE:28:5D:DF:A6:E3
Certificate issuer:       /CN=6174d0f9-bf09-485e-8ae7-67987caa5c31
Certificate serial:       010D0C9F4328583D2E314770C46795EAE85B0700
Authority key identifier: E9:42:23:2E:46:59:C4:1D:2B:4D:9D:2C:D1:0A:0F:45:2F:C4:DD:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31/9848c02b-e2e9-3595-9092-341e97632891.roa
Signing time:             Wed 09 Mar 2022 05:00:00 +0000
ROA not before:           Wed 09 Mar 2022 05:00:00 +0000
ROA not after:            Sat 09 Mar 2030 05:00:00 +0000
asID:                     54004
IP address blocks:        167.206.96.0/20 maxlen: 24
                          167.206.46.0/23 maxlen: 24
                          167.206.64.0/19 maxlen: 24
                          167.206.40.0/22 maxlen: 24
                          167.206.0.0/19 maxlen: 24
                          167.206.16.0/20 maxlen: 24
                          167.206.32.0/21 maxlen: 24
                          167.206.45.0/24 maxlen: 24
                          167.206.48.0/20 maxlen: 24
                          167.206.80.0/20 maxlen: 24
                          167.206.112.0/22 maxlen: 24
                          167.206.116.0/23 maxlen: 24
                          167.206.118.0/24 maxlen: 24
                          167.206.121.0/24 maxlen: 24
                          167.206.124.0/22 maxlen: 24
                          167.206.128.0/17 maxlen: 24
                          167.206.144.0/20 maxlen: 24
                          167.206.160.0/20 maxlen: 24
                          167.206.176.0/20 maxlen: 24
                          167.206.192.0/20 maxlen: 24
                          167.206.208.0/20 maxlen: 24
                          167.206.224.0/20 maxlen: 24
                          167.206.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:2e:31:47:70:c4:67:95:ea:e8:5b:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6174d0f9-bf09-485e-8ae7-67987caa5c31
        Validity
            Not Before: Mar  9 05:00:00 2022 GMT
            Not After : Mar  9 05:00:00 2030 GMT
        Subject: CN=fca58111-f857-4a03-b1c9-726a5ffe662d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ae:e4:53:d3:f9:1c:3e:37:4c:b6:46:22:fa:
                    ea:a9:b1:9c:90:23:17:55:11:5a:42:f6:bd:ce:45:
                    fd:5b:82:92:a4:19:e1:60:95:e5:fc:d8:72:8f:17:
                    05:f0:5d:fd:44:b7:8a:0c:c9:4b:c7:7e:ba:62:25:
                    c7:50:26:4c:6a:59:16:1e:8f:a8:0b:12:e4:6b:d4:
                    13:22:9e:ab:bd:64:bf:2b:0b:ca:06:c9:4c:91:f8:
                    07:f5:0a:22:1f:6c:01:e7:0c:f3:8e:a5:d9:c4:8c:
                    89:08:eb:fd:15:bc:55:84:d7:4c:7a:8a:ea:fa:cf:
                    d1:b2:8f:10:36:f4:29:37:ab:14:fe:ee:63:89:4d:
                    6e:b6:90:e0:93:a2:3b:a0:b4:6f:b4:c2:97:4e:9d:
                    22:24:c7:4d:26:8a:a6:f7:27:07:c6:e7:f8:92:b1:
                    f4:aa:cf:ae:04:bf:05:f5:e7:c8:39:4d:ed:ce:8a:
                    38:2f:4e:0a:27:0e:18:03:4b:b2:80:34:78:28:3c:
                    8b:c6:5f:94:8b:25:39:b2:58:bd:89:77:34:28:79:
                    07:fa:4f:96:9d:4d:fe:f3:31:50:d4:55:37:03:d5:
                    0a:bb:f3:1d:e3:8b:af:7d:a3:b9:ca:72:d2:f0:0a:
                    ce:e1:52:ec:6b:ac:ce:cf:d8:4c:28:de:ec:84:41:
                    66:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7C:8E:33:D2:BD:BC:A5:21:3A:ED:85:BE:B6:BE:28:5D:DF:A6:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31/9848c02b-e2e9-3595-9092-341e97632891.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31/6174d0f9-bf09-485e-8ae7-67987caa5c31.crl

            X509v3 Authority Key Identifier:
                keyid:E9:42:23:2E:46:59:C4:1D:2B:4D:9D:2C:D1:0A:0F:45:2F:C4:DD:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6174d0f9-bf09-485e-8ae7-67987caa5c31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.206.0.0-167.206.43.255
                  167.206.45.0-167.206.118.255
                  167.206.121.0/24
                  167.206.124.0-167.206.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:58:b0:9e:d0:45:4c:f1:46:0d:5e:40:b5:35:21:8f:15:b6:
         bf:fa:c2:ca:04:ba:97:99:16:2a:eb:82:21:3a:a3:6d:44:c7:
         ad:4c:ac:b0:65:26:cb:25:fb:8b:ed:34:de:84:5f:50:88:92:
         f6:5c:f3:a9:f3:d5:09:f8:c6:17:7c:e9:6b:32:e0:14:95:af:
         1f:26:0f:73:22:28:bd:ce:2b:5e:4a:f6:77:a9:83:bf:46:31:
         da:10:4a:5d:e8:ac:03:fc:42:16:dd:0e:dd:91:e1:8c:63:7d:
         4f:6b:06:09:5d:10:a0:f8:ea:52:d9:c0:bf:64:d8:1f:aa:04:
         fd:0f:f1:44:9e:b1:35:ad:36:05:03:0b:86:d6:42:d2:5b:76:
         f3:cd:9a:78:3d:5e:db:45:37:e1:6c:9f:7f:da:30:99:6f:1a:
         35:8b:7a:73:7b:9e:e1:41:a8:a1:8a:b4:76:ac:b6:bb:70:be:
         23:f7:67:68:53:67:15:03:93:83:5a:32:2f:4d:e2:5b:d6:93:
         13:c1:48:5c:27:82:fd:5f:40:76:ad:dd:be:2d:23:ce:af:06:
         58:15:a7:61:b4:e0:c9:e5:99:b7:3d:80:a9:22:b5:ef:6a:68:
         78:a2:1a:cf:f8:42:d9:56:bc:ea:64:f3:a5:d2:8a:4f:ed:e2:
         aa:52:7a:8e
-----BEGIN CERTIFICATE-----
MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWD0uMUdwxGeV6uhbBwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE3NGQwZjktYmYwOS00ODVlLThhZTctNjc5ODdjYWE1
YzMxMB4XDTIyMDMwOTA1MDAwMFoXDTMwMDMwOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZmNhNTgxMTEtZjg1Ny00YTAzLWIxYzktNzI2YTVmZmU2NjJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq67kU9P5HD43TLZGIvrqqbGckCMXVRFaQva9
zkX9W4KSpBnhYJXl/NhyjxcF8F39RLeKDMlLx366YiXHUCZMalkWHo+oCxLka9QT
Ip6rvWS/KwvKBslMkfgH9QoiH2wB5wzzjqXZxIyJCOv9FbxVhNdMeorq+s/Rso8Q
NvQpN6sU/u5jiU1utpDgk6I7oLRvtMKXTp0iJMdNJoqm9ycHxuf4krH0qs+uBL8F
9efIOU3tzoo4L04KJw4YA0uygDR4KDyLxl+UiyU5sli9iXc0KHkH+k+WnU3+8zFQ
1FU3A9UKu/Md44uvfaO5ynLS8ArO4VLsa6zOz9hMKN7shEFmBwIDAQABo4IDfTCC
A3kwHQYDVR0OBBYEFJt8jjPSvbylITrthb62vihd36bjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MTc0
ZDBmOS1iZjA5LTQ4NWUtOGFlNy02Nzk4N2NhYTVjMzEvOTg0OGMwMmItZTJlOS0z
NTk1LTkwOTItMzQxZTk3NjMyODkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjE3NGQwZjktYmYwOS00ODVlLThh
ZTctNjc5ODdjYWE1YzMxLzYxNzRkMGY5LWJmMDktNDg1ZS04YWU3LTY3OTg3Y2Fh
NWMzMS5jcmwwHwYDVR0jBBgwFoAU6UIjLkZZxB0rTZ0s0QoPRS/E3aowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82MTc0ZDBmOS1iZjA5LTQ4NWUtOGFlNy02Nzk4
N2NhYTVjMzEuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAsDAwGnzgME
AqfOKDAMAwQAp84tAwQAp852AwQAp855MAsDBAKnznwDAwCnzjBUBgNVHSABAf8E
SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u
bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJ
WLCe0EVM8UYNXkC1NSGPFba/+sLKBLqXmRYq64IhOqNtRMetTKywZSbLJfuL7TTe
hF9QiJL2XPOp89UJ+MYXfOlrMuAUla8fJg9zIii9ziteSvZ3qYO/RjHaEEpd6KwD
/EIW3Q7dkeGMY31PawYJXRCg+OpS2cC/ZNgfqgT9D/FEnrE1rTYFAwuG1kLSW3bz
zZp4PV7bRTfhbJ9/2jCZbxo1i3pze57hQaihirR2rLa7cL4j92doU2cVA5ODWjIv
TeJb1pMTwUhcJ4L9X0B2rd2+LSPOrwZYFadhtODJ5Zm3PYCpIrXvamh4ohrP+ELZ
VrzqZPOl0opP7eKqUnqO
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:11 2023 by rpki-client on console-fra.rpki-client.org