Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c3e0065-2137-4495-8836-4a1420c6d42b/3bb84010-6710-37f4-a441-4117d964634b.roa
File:                     3bb84010-6710-37f4-a441-4117d964634b.roa (raw, json)
Hash identifier:          Q5hL+x9SNROn7llJKQRcK7CsrHpuSklUwaCsNQIT/Dw=
Subject key identifier:   E3:10:0A:0A:C2:17:39:12:79:5E:9A:A9:80:B1:57:65:C7:61:D5:53
Certificate issuer:       /CN=7c3e0065-2137-4495-8836-4a1420c6d42b
Certificate serial:       010D0C9F4328583DA34E740C3FE2B535435D0400
Authority key identifier: C8:94:35:86:89:93:3B:62:E9:CF:E4:EC:AF:DD:23:A3:F7:FD:11:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c3e0065-2137-4495-8836-4a1420c6d42b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c3e0065-2137-4495-8836-4a1420c6d42b/3bb84010-6710-37f4-a441-4117d964634b.roa
Signing time:             Wed 20 Apr 2022 15:18:32 +0000
ROA not before:           Wed 20 Apr 2022 15:18:32 +0000
ROA not after:            Tue 23 Jul 2024 04:00:00 +0000
asID:                     6
IP address blocks:        149.112.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a3:4e:74:0c:3f:e2:b5:35:43:5d:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3e0065-2137-4495-8836-4a1420c6d42b
        Validity
            Not Before: Apr 20 15:18:32 2022 GMT
            Not After : Jul 23 04:00:00 2024 GMT
        Subject: CN=07b511f3-1656-4ec2-ac37-bc8c6cb486f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:54:f0:8a:22:33:ef:92:ff:59:5f:b2:df:69:
                    e3:e2:e5:9b:f5:96:06:61:5e:ef:67:c7:f0:ce:b2:
                    b8:5e:a5:c2:e4:62:12:ef:b0:d4:13:91:45:df:21:
                    dc:72:b6:c7:2b:c4:c4:29:13:ea:28:a4:f2:21:44:
                    0a:77:a1:b1:01:8d:97:e9:52:50:ce:ba:83:de:8f:
                    c0:c2:ae:95:bd:a4:70:30:ea:79:f9:95:fa:c3:bb:
                    1c:ba:93:bb:1e:df:6d:56:99:d0:26:a4:9d:87:22:
                    a0:47:d4:2c:5f:d8:ea:42:1b:3f:ad:48:09:dc:a0:
                    8f:f1:3d:8f:b8:4c:ab:83:44:06:ac:64:ac:dd:09:
                    60:60:55:2f:ff:00:3c:6c:8f:14:20:b6:83:f2:6a:
                    c4:80:15:db:d6:54:5a:16:98:95:7a:52:01:53:f2:
                    3d:f4:a4:2f:6d:c4:e1:14:7d:9d:62:02:80:99:b6:
                    5a:d7:9f:f9:af:c0:c2:6e:1f:f1:c3:42:a7:91:8f:
                    10:b7:14:7b:02:9a:14:5e:50:ca:40:fb:9e:12:d5:
                    2f:9d:57:6f:f9:77:3a:21:85:58:07:d0:8e:4a:42:
                    42:cc:4e:23:3a:fb:42:15:de:18:ee:dd:52:03:5c:
                    d0:66:18:17:1c:4d:be:34:ef:9e:a0:9f:5c:31:d5:
                    9e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:10:0A:0A:C2:17:39:12:79:5E:9A:A9:80:B1:57:65:C7:61:D5:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c3e0065-2137-4495-8836-4a1420c6d42b/3bb84010-6710-37f4-a441-4117d964634b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c3e0065-2137-4495-8836-4a1420c6d42b/7c3e0065-2137-4495-8836-4a1420c6d42b.crl

            X509v3 Authority Key Identifier:
                keyid:C8:94:35:86:89:93:3B:62:E9:CF:E4:EC:AF:DD:23:A3:F7:FD:11:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c3e0065-2137-4495-8836-4a1420c6d42b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:5e:69:db:d9:6f:1b:09:f2:b3:bc:98:66:c1:73:45:13:4c:
         3e:79:3e:47:85:03:e0:52:fe:ed:cd:32:20:92:3b:f2:21:2b:
         94:0c:43:dc:79:c4:39:dd:6f:cf:27:19:d1:66:e1:b6:cf:71:
         2e:39:16:70:ab:00:94:28:f2:eb:fd:02:f7:97:1a:45:a1:41:
         f7:34:6b:93:01:42:5e:24:7d:d9:f9:66:48:91:8f:b7:79:6f:
         0e:09:b7:b4:25:98:8e:19:af:f7:d6:41:2a:56:36:30:82:6e:
         d8:25:d9:7d:53:c3:ef:9b:8f:58:98:31:c7:10:3a:21:d7:b1:
         c7:ac:fd:65:09:bc:a1:0a:5e:34:06:db:2a:ac:da:34:6f:cf:
         5d:f6:8f:c4:5f:6a:14:f4:d7:a9:69:bf:98:f9:65:55:59:35:
         2d:e8:7c:45:54:b6:07:1f:dd:2b:49:c5:e3:43:5a:c1:25:c0:
         6f:ff:cc:9c:f9:1e:76:55:57:a8:72:46:97:98:40:7d:01:5b:
         3a:08:cc:ee:2b:60:f8:f3:73:00:93:5c:2d:c3:2d:10:79:ee:
         7c:aa:9d:5b:9b:17:f2:da:f0:70:38:b6:12:1a:20:bb:58:ea:
         2e:b9:3b:02:c8:1f:33:3e:de:b5:ee:3e:d2:8f:da:d1:f7:7b:
         e7:4d:b3:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD2jTnQMP+K1NUNdBAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2MzZTAwNjUtMjEzNy00NDk1LTg4MzYtNGExNDIwYzZk
NDJiMB4XDTIyMDQyMDE1MTgzMloXDTI0MDcyMzA0MDAwMFowLzEtMCsGA1UEAxMk
MDdiNTExZjMtMTY1Ni00ZWMyLWFjMzctYmM4YzZjYjQ4NmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFTwiiIz75L/WV+y32nj4uWb9ZYGYV7vZ8fw
zrK4XqXC5GIS77DUE5FF3yHccrbHK8TEKRPqKKTyIUQKd6GxAY2X6VJQzrqD3o/A
wq6VvaRwMOp5+ZX6w7scupO7Ht9tVpnQJqSdhyKgR9QsX9jqQhs/rUgJ3KCP8T2P
uEyrg0QGrGSs3QlgYFUv/wA8bI8UILaD8mrEgBXb1lRaFpiVelIBU/I99KQvbcTh
FH2dYgKAmbZa15/5r8DCbh/xw0KnkY8QtxR7ApoUXlDKQPueEtUvnVdv+Xc6IYVY
B9COSkJCzE4jOvtCFd4Y7t1SA1zQZhgXHE2+NO+eoJ9cMdWehwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOMQCgrCFzkSeV6aqYCxV2XHYdVTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YzNl
MDA2NS0yMTM3LTQ0OTUtODgzNi00YTE0MjBjNmQ0MmIvM2JiODQwMTAtNjcxMC0z
N2Y0LWE0NDEtNDExN2Q5NjQ2MzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2MzZTAwNjUtMjEzNy00NDk1LTg4
MzYtNGExNDIwYzZkNDJiLzdjM2UwMDY1LTIxMzctNDQ5NS04ODM2LTRhMTQyMGM2
ZDQyYi5jcmwwHwYDVR0jBBgwFoAUyJQ1homTO2Lpz+Tsr90jo/f9EeIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83YzNlMDA2NS0yMTM3LTQ0OTUtODgzNi00YTE0
MjBjNmQ0MmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXCZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABxeadvZbxsJ8rO8mGbBc0UTTD55PkeFA+BS/u3NMiCSO/IhK5QMQ9x5
xDndb88nGdFm4bbPcS45FnCrAJQo8uv9AveXGkWhQfc0a5MBQl4kfdn5ZkiRj7d5
bw4Jt7QlmI4Zr/fWQSpWNjCCbtgl2X1Tw++bj1iYMccQOiHXsces/WUJvKEKXjQG
2yqs2jRvz132j8RfahT016lpv5j5ZVVZNS3ofEVUtgcf3StJxeNDWsElwG//zJz5
HnZVV6hyRpeYQH0BWzoIzO4rYPjzcwCTXC3DLRB57nyqnVubF/La8HA4thIaILtY
6i65OwLIHzM+3rXuPtKP2tH3e+dNs6I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:00 2024 by rpki-client on console-fra.rpki-client.org