Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a6d95ed-60dd-4766-aaa3-2d0bbdfb227f/28852728-3bcd-3819-8d8d-f2236493c4f0.roa
File:                     28852728-3bcd-3819-8d8d-f2236493c4f0.roa (raw, json)
Hash identifier:          T766pS8SonisEXm1PMBtJZTxkFxzZI+NTQ2IgyD68Vg=
Subject key identifier:   3F:3C:E7:E4:20:DA:C9:B9:84:D4:F5:F4:9C:89:B0:D2:3E:A9:CC:F3
Certificate issuer:       /CN=6a6d95ed-60dd-4766-aaa3-2d0bbdfb227f
Certificate serial:       010D0C9F43285841F7B87E7DF07044667AAC5580
Authority key identifier: 85:37:06:75:08:24:44:0E:0E:5C:56:72:2A:36:AB:4B:20:8E:CB:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a6d95ed-60dd-4766-aaa3-2d0bbdfb227f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a6d95ed-60dd-4766-aaa3-2d0bbdfb227f/28852728-3bcd-3819-8d8d-f2236493c4f0.roa
Signing time:             Mon 22 May 2023 16:14:43 +0000
ROA not before:           Mon 22 May 2023 16:14:43 +0000
ROA not after:            Sun 20 Aug 2023 16:14:43 +0000
asID:                     61317
IP address blocks:        199.91.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:f7:b8:7e:7d:f0:70:44:66:7a:ac:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a6d95ed-60dd-4766-aaa3-2d0bbdfb227f
        Validity
            Not Before: May 22 16:14:43 2023 GMT
            Not After : Aug 20 16:14:43 2023 GMT
        Subject: CN=386a03c9-1b4d-479f-af51-eece45fbb268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9c:79:c8:8a:cb:2f:a4:13:4e:c7:97:60:05:
                    41:55:14:2a:86:2c:a6:0b:c1:e8:23:55:37:5a:b0:
                    6d:93:d5:0b:54:9f:c3:b7:d2:89:e9:01:b3:d0:02:
                    0a:82:4b:78:34:cc:86:5b:26:e7:b5:16:3b:4d:ba:
                    01:c4:ff:7b:6f:19:df:50:01:f9:ef:22:22:fe:e7:
                    ce:2a:e8:aa:ad:d1:a7:59:21:68:f4:04:2d:97:77:
                    6d:82:46:a9:bb:c4:86:84:b1:4c:dd:20:17:b1:b2:
                    cb:ef:86:92:07:7d:64:87:7b:62:9c:31:ab:bf:a3:
                    53:d8:48:59:d3:e6:87:dc:f5:cd:76:d8:67:3b:2e:
                    31:71:2d:62:30:60:22:69:5f:02:e8:cc:92:73:92:
                    a2:cf:33:ff:f6:dd:3c:c9:17:30:ca:8e:d5:52:83:
                    40:2b:e8:11:3c:30:47:e2:a6:1b:80:67:b7:b3:d8:
                    08:af:e1:c0:11:12:1d:d6:fd:66:df:aa:c2:f5:24:
                    44:59:45:ca:bf:8e:14:ec:55:5c:ed:e4:95:85:0c:
                    8f:9e:bd:1e:88:25:46:e9:fb:cb:f5:d1:60:be:a1:
                    9d:c9:81:d0:2d:62:83:ac:49:f0:b4:15:98:66:5f:
                    1d:c6:ba:54:4d:8d:fc:f2:d9:1f:1a:a5:80:a4:5a:
                    27:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3C:E7:E4:20:DA:C9:B9:84:D4:F5:F4:9C:89:B0:D2:3E:A9:CC:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a6d95ed-60dd-4766-aaa3-2d0bbdfb227f/28852728-3bcd-3819-8d8d-f2236493c4f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a6d95ed-60dd-4766-aaa3-2d0bbdfb227f/6a6d95ed-60dd-4766-aaa3-2d0bbdfb227f.crl

            X509v3 Authority Key Identifier:
                keyid:85:37:06:75:08:24:44:0E:0E:5C:56:72:2A:36:AB:4B:20:8E:CB:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a6d95ed-60dd-4766-aaa3-2d0bbdfb227f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:52:f3:2a:0e:4e:c5:a9:f8:5d:3f:94:fb:b1:aa:5c:f2:cf:
         52:e0:b9:a4:ce:f3:b0:82:b5:27:0e:12:be:2d:d2:a1:a2:9e:
         e3:9f:5a:1a:f7:6d:66:12:4c:4f:01:79:2a:51:5a:d0:a6:3a:
         de:65:37:90:38:cd:86:24:10:99:43:2c:88:be:30:9e:2a:5b:
         74:27:fe:60:92:15:31:b4:8c:93:66:c8:ca:b7:68:44:3b:ef:
         13:94:7e:60:db:da:32:84:99:ca:5e:79:8a:cd:73:d9:c9:34:
         b1:5a:75:aa:fa:d9:d2:27:64:17:56:0c:01:c9:fc:2b:ee:f3:
         8d:98:d0:f2:9d:9c:d2:01:d7:c0:65:3e:a3:a6:b5:ce:b3:f0:
         12:79:4e:8d:8d:e1:82:77:6a:80:2d:bf:63:69:bc:86:9e:c9:
         11:11:72:13:98:53:d2:59:16:1b:d6:6e:0d:eb:f6:4f:51:48:
         5d:29:03:9c:61:2c:38:bb:b5:d3:72:f6:18:77:45:6c:b0:d4:
         6c:58:9d:a4:3e:5a:f6:d4:50:06:64:2a:db:c8:74:ce:cc:83:
         e4:ee:2a:d2:9f:38:c8:0a:e8:28:b2:e8:53:5f:ab:2d:d0:06:
         4d:84:e7:43:06:f0:11:f7:39:e4:9e:59:b1:91:0e:9c:9e:96:
         40:e0:ff:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEH3uH598HBEZnqsVYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmE2ZDk1ZWQtNjBkZC00NzY2LWFhYTMtMmQwYmJkZmIy
MjdmMB4XDTIzMDUyMjE2MTQ0M1oXDTIzMDgyMDE2MTQ0M1owLzEtMCsGA1UEAxMk
Mzg2YTAzYzktMWI0ZC00NzlmLWFmNTEtZWVjZTQ1ZmJiMjY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJx5yIrLL6QTTseXYAVBVRQqhiymC8HoI1U3
WrBtk9ULVJ/Dt9KJ6QGz0AIKgkt4NMyGWybntRY7TboBxP97bxnfUAH57yIi/ufO
KuiqrdGnWSFo9AQtl3dtgkapu8SGhLFM3SAXsbLL74aSB31kh3tinDGrv6NT2EhZ
0+aH3PXNdthnOy4xcS1iMGAiaV8C6MySc5KizzP/9t08yRcwyo7VUoNAK+gRPDBH
4qYbgGe3s9gIr+HAERId1v1m36rC9SREWUXKv44U7FVc7eSVhQyPnr0eiCVG6fvL
9dFgvqGdyYHQLWKDrEnwtBWYZl8dxrpUTY388tkfGqWApFonmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD885+Qg2sm5hNT19JyJsNI+qczzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTZk
OTVlZC02MGRkLTQ3NjYtYWFhMy0yZDBiYmRmYjIyN2YvMjg4NTI3MjgtM2JjZC0z
ODE5LThkOGQtZjIyMzY0OTNjNGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmE2ZDk1ZWQtNjBkZC00NzY2LWFh
YTMtMmQwYmJkZmIyMjdmLzZhNmQ5NWVkLTYwZGQtNDc2Ni1hYWEzLTJkMGJiZGZi
MjI3Zi5jcmwwHwYDVR0jBBgwFoAUhTcGdQgkRA4OXFZyKjarSyCOy9IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82YTZkOTVlZC02MGRkLTQ3NjYtYWFhMy0yZDBi
YmRmYjIyN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1tlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAZS8yoOTsWp+F0/lPuxqlzyz1LguaTO87CCtScOEr4t0qGinuOfWhr3
bWYSTE8BeSpRWtCmOt5lN5A4zYYkEJlDLIi+MJ4qW3Qn/mCSFTG0jJNmyMq3aEQ7
7xOUfmDb2jKEmcpeeYrNc9nJNLFadar62dInZBdWDAHJ/Cvu842Y0PKdnNIB18Bl
PqOmtc6z8BJ5To2N4YJ3aoAtv2NpvIaeyRERchOYU9JZFhvWbg3r9k9RSF0pA5xh
LDi7tdNy9hh3RWyw1GxYnaQ+WvbUUAZkKtvIdM7Mg+TuKtKfOMgK6Ciy6FNfqy3Q
Bk2E50MG8BH3OeSeWbGRDpyelkDg/zA=
-----END CERTIFICATE-----