Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/fb595916-c167-3825-a272-2e4894a7ef63.roa
File:                     fb595916-c167-3825-a272-2e4894a7ef63.roa (raw, json)
Hash identifier:          KQ3enykXYWEwFNTpUkbKVlw8Kqk83xDiBtA1L8X/2SY=
Subject key identifier:   19:10:71:5C:9F:D7:4B:2F:7A:6C:5E:1F:6A:81:F3:2F:1F:01:DC:C1
Certificate issuer:       /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial:       010D0C9F4328583D81B2D3939D1191CE9D93AD00
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/fb595916-c167-3825-a272-2e4894a7ef63.roa
Signing time:             Fri 08 Apr 2022 04:00:00 +0000
ROA not before:           Fri 08 Apr 2022 04:00:00 +0000
ROA not after:            Fri 13 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        199.255.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:81:b2:d3:93:9d:11:91:ce:9d:93:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
        Validity
            Not Before: Apr  8 04:00:00 2022 GMT
            Not After : May 13 04:00:00 2022 GMT
        Subject: CN=7ebe16fe-4d52-4200-b5ec-7f60a655ec6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e3:af:9e:98:a1:da:c6:de:42:37:77:31:39:
                    d3:d1:6f:14:23:79:6d:09:e2:fa:23:49:4d:4e:a0:
                    f6:fe:53:97:27:45:2c:17:e6:2a:b6:9f:1a:bc:a8:
                    0c:f8:d0:f4:a6:f1:9d:6b:78:05:dc:63:8c:3b:f6:
                    7e:eb:d4:20:b2:ed:c4:0b:13:94:f8:6e:c0:85:fa:
                    a3:15:86:27:7d:ae:41:5c:cb:12:81:3b:40:bb:af:
                    0c:5e:b0:6d:63:ae:64:6c:1e:c4:b7:07:63:4f:12:
                    8f:9e:2d:72:c5:15:c0:d1:d7:8a:8a:e4:3f:d5:15:
                    34:54:be:cc:d9:a1:43:b8:ab:55:43:9a:9b:18:c0:
                    69:3a:b1:13:f5:6e:5c:bf:3c:d5:a7:bb:20:87:ce:
                    c7:db:57:3e:01:ad:ac:54:ec:73:c0:0e:56:0f:44:
                    f1:fe:09:45:49:d4:df:95:5c:d0:a3:c1:05:fc:71:
                    5c:c7:98:24:06:7d:81:5b:bd:67:f6:4e:a2:a2:c4:
                    6a:90:9a:a7:1d:2f:65:a7:7b:84:22:8f:66:ae:73:
                    b7:17:db:e4:eb:ad:4a:5b:e0:7c:a3:09:81:4b:6f:
                    99:6b:9e:d3:23:93:dc:b1:a7:1d:3c:ae:9c:84:26:
                    b0:52:77:5a:60:93:06:9b:5f:04:b7:66:fb:d3:80:
                    c6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:10:71:5C:9F:D7:4B:2F:7A:6C:5E:1F:6A:81:F3:2F:1F:01:DC:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/fb595916-c167-3825-a272-2e4894a7ef63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b9:86:36:a8:71:ec:4b:e4:ed:0c:a9:0e:76:2b:10:93:aa:
         b7:89:64:64:75:b3:72:66:13:57:e1:34:10:1d:dd:2a:d0:16:
         1e:ee:12:74:37:17:32:27:c8:a9:9a:7d:14:c2:43:4b:53:59:
         9b:be:90:a2:ea:5d:a8:e9:45:4b:41:50:e9:78:a4:8c:07:50:
         00:b3:ea:95:3c:9b:ee:da:6a:09:44:33:9f:2f:00:00:3e:43:
         a8:7d:a7:45:44:71:a1:55:1f:b8:05:f7:10:c8:aa:37:b2:bb:
         33:0c:82:ae:f8:1d:6c:ea:77:4e:95:29:c7:dc:db:cc:c9:93:
         19:c8:37:04:5b:d4:e3:e8:65:88:5d:b6:d8:ff:90:a3:71:73:
         d1:5c:13:72:cf:96:80:9a:27:df:13:10:00:a6:59:3f:e8:9e:
         df:75:f8:34:75:c5:96:99:1c:33:6f:f9:e3:68:02:81:8d:1a:
         e7:0b:5e:8d:3f:dd:80:23:7c:b6:5b:a3:09:60:60:fe:ba:88:
         bd:82:2c:d0:ca:a7:97:b3:a3:50:f6:1a:58:99:b5:12:06:8c:
         98:23:f9:6c:0a:b8:d2:7d:6a:dc:1a:57:a3:34:20:18:61:d6:
         a5:f3:d4:5b:9a:a2:21:af:8d:4c:4f:16:73:5e:9f:56:34:0e:
         6c:b3:e7:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD2BstOTnRGRzp2TrQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQ4NzNmZjUtYzZkZS00MjhmLTk5ZWEtMTRlZWQ4YzVm
ZWRjMB4XDTIyMDQwODA0MDAwMFoXDTIyMDUxMzA0MDAwMFowLzEtMCsGA1UEAxMk
N2ViZTE2ZmUtNGQ1Mi00MjAwLWI1ZWMtN2Y2MGE2NTVlYzZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+Ovnpih2sbeQjd3MTnT0W8UI3ltCeL6I0lN
TqD2/lOXJ0UsF+Yqtp8avKgM+ND0pvGda3gF3GOMO/Z+69Qgsu3ECxOU+G7Ahfqj
FYYnfa5BXMsSgTtAu68MXrBtY65kbB7EtwdjTxKPni1yxRXA0deKiuQ/1RU0VL7M
2aFDuKtVQ5qbGMBpOrET9W5cvzzVp7sgh87H21c+Aa2sVOxzwA5WD0Tx/glFSdTf
lVzQo8EF/HFcx5gkBn2BW71n9k6iosRqkJqnHS9lp3uEIo9mrnO3F9vk661KW+B8
owmBS2+Za57TI5PcsacdPK6chCawUndaYJMGm18Et2b704DGYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBkQcVyf10svemxeH2qB8y8fAdzBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3
M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVlZDhjNWZlZGMvZmI1OTU5MTYtYzE2Ny0z
ODI1LWEyNzItMmU0ODk0YTdlZjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWQ4NzNmZjUtYzZkZS00MjhmLTk5
ZWEtMTRlZWQ4YzVmZWRjL2VkODczZmY1LWM2ZGUtNDI4Zi05OWVhLTE0ZWVkOGM1
ZmVkYy5jcmwwHwYDVR0jBBgwFoAUHLTMIzzDmH15qyl3uMU7Z2qmxrEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVl
ZDhjNWZlZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx//AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEC5hjaocexL5O0MqQ52KxCTqreJZGR1s3JmE1fhNBAd3SrQFh7uEnQ3
FzInyKmafRTCQ0tTWZu+kKLqXajpRUtBUOl4pIwHUACz6pU8m+7aaglEM58vAAA+
Q6h9p0VEcaFVH7gF9xDIqjeyuzMMgq74HWzqd06VKcfc28zJkxnINwRb1OPoZYhd
ttj/kKNxc9FcE3LPloCaJ98TEACmWT/ont91+DR1xZaZHDNv+eNoAoGNGucLXo0/
3YAjfLZbowlgYP66iL2CLNDKp5ezo1D2GliZtRIGjJgj+WwKuNJ9atwaV6M0IBhh
1qXz1FuaoiGvjUxPFnNen1Y0Dmyz5wI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:36 2023 by rpki-client on console-fra.rpki-client.org