Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aacd3976-025b-42e3-9558-71c5a795726e/447e9c46-8439-373e-8243-fe67fcf39b6e.roa
File:                     447e9c46-8439-373e-8243-fe67fcf39b6e.roa (raw, json)
Hash identifier:          gTyUf03NnC54sIMOmBt8i452Q3XotAOICbe3lwt3Xko=
Subject key identifier:   2F:49:C0:2E:7C:EA:C3:69:9C:17:43:25:DD:D2:56:C3:AC:FC:AE:4F
Certificate issuer:       /CN=aacd3976-025b-42e3-9558-71c5a795726e
Certificate serial:       010D0C9F4328583EC3C188703B9BD07674247E00
Authority key identifier: 99:B6:CC:0E:1F:42:D2:73:88:0F:E8:A5:47:C8:E5:EB:B6:1E:91:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aacd3976-025b-42e3-9558-71c5a795726e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aacd3976-025b-42e3-9558-71c5a795726e/447e9c46-8439-373e-8243-fe67fcf39b6e.roa
Signing time:             Mon 28 Mar 2022 20:45:35 +0000
ROA not before:           Mon 28 Mar 2022 20:45:35 +0000
ROA not after:            Mon 03 Nov 2031 05:00:00 +0000
asID:                     6653
IP address blocks:        162.219.204.0/22 maxlen: 24
                          208.64.76.0/22 maxlen: 24
                          208.85.176.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:c3:c1:88:70:3b:9b:d0:76:74:24:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aacd3976-025b-42e3-9558-71c5a795726e
        Validity
            Not Before: Mar 28 20:45:35 2022 GMT
            Not After : Nov  3 05:00:00 2031 GMT
        Subject: CN=87453c9e-960f-4e1f-9d77-e807f1b4e695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3b:68:3e:a6:b3:c5:8c:f6:6c:17:87:68:8b:
                    fc:92:95:5f:d0:06:38:ef:06:71:8b:39:d5:86:45:
                    45:86:f9:12:42:cb:bb:c8:17:db:0c:57:26:d5:9b:
                    0a:c4:2f:71:28:04:36:b2:ff:50:a6:67:d7:1e:d6:
                    52:5c:82:42:18:af:df:91:0a:e1:c2:8b:ea:f9:c0:
                    9c:b5:51:4a:c8:5b:26:ee:5c:5e:f9:8b:4d:6f:b1:
                    dc:7c:cc:7f:6b:de:48:cb:db:dc:45:e6:3c:e9:7c:
                    62:9d:f4:9c:ee:b8:8a:65:0c:5d:0d:06:6d:4b:24:
                    e2:f3:68:3b:e2:89:5e:e7:68:38:99:6d:56:4d:8c:
                    d1:1c:f4:9d:24:0a:ad:d6:70:72:51:e8:e9:85:32:
                    34:f7:8b:d5:d4:c2:6b:5a:89:3f:81:a9:b7:63:cb:
                    22:30:80:97:d9:f7:5c:95:70:8a:ef:fd:97:5c:fb:
                    d8:bc:85:18:7e:c8:d3:e7:51:50:34:a4:11:5b:83:
                    d5:df:83:01:1f:f7:95:d0:11:53:1a:42:a6:4a:68:
                    14:f4:6d:20:24:4a:3f:33:96:8a:2c:a8:bd:4e:1a:
                    6b:3d:ac:81:f8:ce:6b:9a:f5:af:7c:b4:50:c9:fc:
                    90:e7:57:b3:c7:59:1a:af:e3:cb:1c:b1:eb:ca:7e:
                    dd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:49:C0:2E:7C:EA:C3:69:9C:17:43:25:DD:D2:56:C3:AC:FC:AE:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aacd3976-025b-42e3-9558-71c5a795726e/447e9c46-8439-373e-8243-fe67fcf39b6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aacd3976-025b-42e3-9558-71c5a795726e/aacd3976-025b-42e3-9558-71c5a795726e.crl

            X509v3 Authority Key Identifier:
                keyid:99:B6:CC:0E:1F:42:D2:73:88:0F:E8:A5:47:C8:E5:EB:B6:1E:91:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aacd3976-025b-42e3-9558-71c5a795726e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.204.0/22
                  208.64.76.0/22
                  208.85.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:f8:ee:de:94:f6:cc:7a:05:d7:77:8c:f9:8f:08:d1:f8:25:
         86:c0:2f:1a:83:52:91:20:14:11:bf:e9:19:54:58:39:fc:1d:
         6e:23:b1:8e:ad:c9:8c:43:8a:6c:5b:01:ce:b5:2c:b1:c8:94:
         18:99:e3:e8:50:dc:d0:f7:30:40:b6:1e:89:90:0b:cd:54:2a:
         c0:5a:f8:14:f4:7c:60:3b:f0:4b:6f:db:16:0b:98:7d:ea:15:
         06:a8:3d:6d:a5:ed:45:e7:24:d3:ab:6a:86:f6:dc:1a:cd:c4:
         5f:22:6a:22:9a:db:c6:8b:a3:1b:97:5c:5c:0c:95:f4:66:64:
         18:6f:dc:23:0b:9b:8f:07:a8:6c:c1:8f:30:17:d4:92:5c:17:
         37:59:12:48:99:28:16:25:f1:7d:f3:f8:67:0b:3e:e6:6f:33:
         c5:13:82:9e:9f:c5:4e:75:a1:b2:42:9d:6d:6b:63:4f:b8:e8:
         25:a3:5e:25:97:39:a4:18:33:1d:e7:d9:c0:db:06:6f:9b:38:
         ea:29:f3:70:69:09:a6:e6:db:2b:45:de:4b:f4:1d:cd:4f:e7:
         3e:63:e6:9c:b5:b2:1f:6b:43:ac:95:13:17:9a:12:e5:23:7a:
         26:9f:64:4c:e1:1e:a5:fd:5e:2e:cc:52:ce:b8:76:ee:42:d2:
         47:76:c9:f0
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWD7DwYhwO5vQdnQkfgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFjZDM5NzYtMDI1Yi00MmUzLTk1NTgtNzFjNWE3OTU3
MjZlMB4XDTIyMDMyODIwNDUzNVoXDTMxMTEwMzA1MDAwMFowLzEtMCsGA1UEAxMk
ODc0NTNjOWUtOTYwZi00ZTFmLTlkNzctZTgwN2YxYjRlNjk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DtoPqazxYz2bBeHaIv8kpVf0AY47wZxiznV
hkVFhvkSQsu7yBfbDFcm1ZsKxC9xKAQ2sv9QpmfXHtZSXIJCGK/fkQrhwovq+cCc
tVFKyFsm7lxe+YtNb7HcfMx/a95Iy9vcReY86XxinfSc7riKZQxdDQZtSyTi82g7
4ole52g4mW1WTYzRHPSdJAqt1nByUejphTI094vV1MJrWok/gam3Y8siMICX2fdc
lXCK7/2XXPvYvIUYfsjT51FQNKQRW4PV34MBH/eV0BFTGkKmSmgU9G0gJEo/M5aK
LKi9ThprPayB+M5rmvWvfLRQyfyQ51ezx1kar+PLHLHryn7dbwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFC9JwC586sNpnBdDJd3SVsOs/K5PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYWNk
Mzk3Ni0wMjViLTQyZTMtOTU1OC03MWM1YTc5NTcyNmUvNDQ3ZTljNDYtODQzOS0z
NzNlLTgyNDMtZmU2N2ZjZjM5YjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWFjZDM5NzYtMDI1Yi00MmUzLTk1
NTgtNzFjNWE3OTU3MjZlL2FhY2QzOTc2LTAyNWItNDJlMy05NTU4LTcxYzVhNzk1
NzI2ZS5jcmwwHwYDVR0jBBgwFoAUmbbMDh9C0nOID+ilR8jl67YekZ0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hYWNkMzk3Ni0wMjViLTQyZTMtOTU1OC03MWM1
YTc5NTcyNmUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCotvMAwQC
0EBMAwQD0FWwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAG347t6U9sx6Bdd3jPmPCNH4JYbALxqDUpEgFBG/
6RlUWDn8HW4jsY6tyYxDimxbAc61LLHIlBiZ4+hQ3ND3MEC2HomQC81UKsBa+BT0
fGA78Etv2xYLmH3qFQaoPW2l7UXnJNOraob23BrNxF8iaiKa28aLoxuXXFwMlfRm
ZBhv3CMLm48HqGzBjzAX1JJcFzdZEkiZKBYl8X3z+GcLPuZvM8UTgp6fxU51obJC
nW1rY0+46CWjXiWXOaQYMx3n2cDbBm+bOOop83BpCabm2ytF3kv0Hc1P5z5j5py1
sh9rQ6yVExeaEuUjeiafZEzhHqX9Xi7MUs64du5C0kd2yfA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:03 2024 by rpki-client on console-fra.rpki-client.org