Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/f48de526-02bd-3bb6-bcb5-4bd0da40770e.roa
File:                     f48de526-02bd-3bb6-bcb5-4bd0da40770e.roa (raw, json)
Hash identifier:          mtZ/gi+fiJ+4B+6EhOkoIlFmJrJ3IYaCLzVGcU4/tBU=
Subject key identifier:   1B:5F:8F:93:A9:7D:1A:5D:CA:4B:E9:97:57:37:94:3B:2F:CD:5A:B5
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583DD1DF9D0A75B634F7DDC97340
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/f48de526-02bd-3bb6-bcb5-4bd0da40770e.roa
Signing time:             Fri 06 May 2022 12:00:00 +0000
ROA not before:           Fri 06 May 2022 12:00:00 +0000
ROA not after:            Sat 11 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        76.223.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d1:df:9d:0a:75:b6:34:f7:dd:c9:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: May  6 12:00:00 2022 GMT
            Not After : Jun 11 04:00:00 2022 GMT
        Subject: CN=5bdd6736-3ccd-4c9e-a777-172540900a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6b:5f:f0:83:6c:8e:64:2d:a1:d8:08:31:d8:
                    5a:ab:59:9b:0b:ad:5f:b1:dd:9e:46:c6:a3:3b:c5:
                    9c:39:c3:4b:45:05:20:88:4f:f8:79:03:b4:e4:bc:
                    39:dc:ba:d3:f1:43:88:79:1e:91:6a:e6:b0:6a:8e:
                    00:45:cc:88:eb:20:bd:ab:79:52:a1:6c:5c:31:a9:
                    bb:38:04:ee:55:44:06:f3:58:80:1e:4a:32:e6:2d:
                    84:05:9f:bd:70:0e:94:e0:47:c3:30:04:25:2d:dc:
                    cf:ee:26:23:ad:1c:a4:b3:55:39:fc:ae:f4:b9:33:
                    57:b0:cf:3c:84:55:a5:8d:68:20:6e:19:ed:9f:df:
                    55:69:6f:85:89:5c:03:e0:51:c1:7d:e2:97:65:e8:
                    93:16:6f:79:89:86:9e:a7:df:8a:5d:16:3f:c6:ac:
                    ee:6b:40:f8:d3:18:5b:c8:b1:45:24:7b:a2:ec:8b:
                    51:72:38:63:8d:0d:96:42:46:ee:bf:0a:7a:75:e7:
                    17:a6:d5:a2:e8:78:e0:88:61:50:d1:d1:28:6f:5b:
                    d6:ef:0d:77:cc:e6:d3:93:a3:85:1c:90:69:48:fa:
                    bd:87:38:a5:1d:ce:aa:94:d2:da:5f:18:f3:d8:04:
                    39:ea:13:93:95:c0:67:37:ce:db:bc:14:64:d3:27:
                    70:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5F:8F:93:A9:7D:1A:5D:CA:4B:E9:97:57:37:94:3B:2F:CD:5A:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/f48de526-02bd-3bb6-bcb5-4bd0da40770e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:da:75:50:29:2f:2a:e9:e4:95:a1:99:75:2b:6e:7f:86:7f:
         bd:be:81:ce:f0:5e:eb:e5:a1:5c:4f:88:e7:28:dd:00:3d:68:
         3f:88:cb:45:eb:eb:5a:b4:ec:04:91:a5:43:ca:b8:d6:e1:73:
         b5:aa:e1:89:c1:2b:bd:ae:5e:08:b9:34:ed:22:8b:cb:a4:8f:
         54:00:59:0d:a2:92:a7:dd:40:01:de:c9:21:df:26:14:aa:d0:
         b6:a9:b9:60:29:55:ea:f8:38:68:b1:86:6b:c5:73:62:8a:25:
         8d:72:67:94:19:fa:19:b4:06:13:25:bf:dc:01:90:49:72:8c:
         c3:71:7c:be:30:c0:f9:00:7d:31:69:3c:07:c5:0d:2f:e7:21:
         b8:ba:f9:e9:cc:a1:5e:4e:fe:2d:b4:76:6a:bd:db:b0:e1:58:
         e1:2d:98:c4:87:30:a5:d3:b8:03:1b:8d:1c:34:9f:5c:fe:11:
         06:dc:1e:57:89:dc:12:58:b2:37:ca:41:b7:f9:61:35:4c:a4:
         dc:50:4d:4c:34:e4:9a:2e:d2:60:ab:dd:39:50:aa:69:42:15:
         0d:63:03:c7:aa:2f:a8:d6:4e:c4:8d:7c:47:f1:90:e4:6e:72:
         50:b0:af:6c:54:6b:aa:f4:1a:47:76:ba:2d:d7:7f:45:3c:26:
         f6:e8:e1:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3R350KdbY0993Jc0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQ4NzNmZjUtYzZkZS00MjhmLTk5ZWEtMTRlZWQ4YzVm
ZWRjMB4XDTIyMDUwNjEyMDAwMFoXDTIyMDYxMTA0MDAwMFowLzEtMCsGA1UEAxMk
NWJkZDY3MzYtM2NjZC00YzllLWE3NzctMTcyNTQwOTAwYTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWtf8INsjmQtodgIMdhaq1mbC61fsd2eRsaj
O8WcOcNLRQUgiE/4eQO05Lw53LrT8UOIeR6Rauawao4ARcyI6yC9q3lSoWxcMam7
OATuVUQG81iAHkoy5i2EBZ+9cA6U4EfDMAQlLdzP7iYjrRyks1U5/K70uTNXsM88
hFWljWggbhntn99VaW+FiVwD4FHBfeKXZeiTFm95iYaep9+KXRY/xqzua0D40xhb
yLFFJHui7ItRcjhjjQ2WQkbuvwp6decXptWi6HjgiGFQ0dEob1vW7w13zObTk6OF
HJBpSPq9hzilHc6qlNLaXxjz2AQ56hOTlcBnN87bvBRk0ydwEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBtfj5OpfRpdykvpl1c3lDsvzVq1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3
M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVlZDhjNWZlZGMvZjQ4ZGU1MjYtMDJiZC0z
YmI2LWJjYjUtNGJkMGRhNDA3NzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWQ4NzNmZjUtYzZkZS00MjhmLTk5
ZWEtMTRlZWQ4YzVmZWRjL2VkODczZmY1LWM2ZGUtNDI4Zi05OWVhLTE0ZWVkOGM1
ZmVkYy5jcmwwHwYDVR0jBBgwFoAUHLTMIzzDmH15qyl3uMU7Z2qmxrEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVl
ZDhjNWZlZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETN+wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADPadVApLyrp5JWhmXUrbn+Gf72+gc7wXuvloVxPiOco3QA9aD+Iy0Xr
61q07ASRpUPKuNbhc7Wq4YnBK72uXgi5NO0ii8ukj1QAWQ2ikqfdQAHeySHfJhSq
0LapuWApVer4OGixhmvFc2KKJY1yZ5QZ+hm0BhMlv9wBkElyjMNxfL4wwPkAfTFp
PAfFDS/nIbi6+enMoV5O/i20dmq927DhWOEtmMSHMKXTuAMbjRw0n1z+EQbcHleJ
3BJYsjfKQbf5YTVMpNxQTUw05Jou0mCr3TlQqmlCFQ1jA8eqL6jWTsSNfEfxkORu
clCwr2xUa6r0Gkd2ui3Xf0U8Jvbo4f8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:35 2023 by rpki-client on console-fra.rpki-client.org