Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2/71ce7d90-52fb-3b9d-96cd-185dcf519256.roa
File:                     71ce7d90-52fb-3b9d-96cd-185dcf519256.roa (raw, json)
Hash identifier:          +OVWkUmgPff6bssPkjKhgMlFVs87/N6Ya/uBCE/Lr9E=
Subject key identifier:   A8:B1:FF:B1:3D:48:5C:A6:3F:BF:5B:6F:43:7E:87:EC:72:59:83:AD
Certificate issuer:       /CN=35342562-4b31-4754-a32b-c5eec744d4a2
Certificate serial:       010D0C9F43285842C158BAD07819E9C8DEE3CF80
Authority key identifier: ED:DE:39:DE:CF:88:EE:83:2E:4A:66:51:06:B4:E3:36:AB:86:0B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2/71ce7d90-52fb-3b9d-96cd-185dcf519256.roa
Signing time:             Wed 02 Aug 2023 21:35:03 +0000
ROA not before:           Wed 02 Aug 2023 21:35:03 +0000
ROA not after:            Tue 31 Oct 2023 21:35:03 +0000
asID:                     399970
IP address blocks:        149.112.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:c1:58:ba:d0:78:19:e9:c8:de:e3:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35342562-4b31-4754-a32b-c5eec744d4a2
        Validity
            Not Before: Aug  2 21:35:03 2023 GMT
            Not After : Oct 31 21:35:03 2023 GMT
        Subject: CN=f69f1879-812e-434a-b147-ef59a61a90ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:92:3d:9b:0f:39:f9:8a:93:d5:db:56:72:8f:
                    6c:7c:23:b0:9a:85:05:0b:c2:f7:86:71:a9:9b:82:
                    3b:a5:4b:e9:e6:b2:29:46:bd:db:c8:5e:e5:94:35:
                    e2:f7:c1:02:bf:1c:97:33:95:92:47:5c:22:e3:ef:
                    4b:12:31:f5:2c:3f:e1:7e:58:91:4e:5b:3e:fd:01:
                    17:cd:d9:24:5e:3f:20:71:3d:26:84:75:90:fe:e2:
                    0e:72:ac:46:25:03:d6:42:de:15:37:61:13:64:50:
                    11:d2:20:87:eb:d6:ef:22:fe:08:dd:68:bb:09:70:
                    45:5f:88:80:da:84:2d:29:59:26:be:90:a7:16:ae:
                    77:f9:2c:12:67:6f:f0:c6:79:9e:7c:73:e2:85:25:
                    e6:04:b0:82:ee:62:86:59:57:34:70:76:8c:af:fc:
                    b3:83:73:68:7b:a2:07:6e:f7:43:51:b7:0e:b4:22:
                    a3:fc:05:6f:a4:7f:7b:64:b4:8f:15:11:68:9e:9d:
                    f8:0a:cb:06:8f:6f:40:e0:b8:07:fa:bc:06:d4:e3:
                    1a:fe:0a:f1:e0:3e:e4:b5:c6:d1:c4:a4:c0:eb:18:
                    04:12:6d:b1:51:4c:5f:76:c0:a2:80:c6:f4:39:85:
                    57:9d:9c:d8:73:1b:dd:cf:c0:bd:b7:b4:a9:78:9d:
                    68:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B1:FF:B1:3D:48:5C:A6:3F:BF:5B:6F:43:7E:87:EC:72:59:83:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2/71ce7d90-52fb-3b9d-96cd-185dcf519256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2/35342562-4b31-4754-a32b-c5eec744d4a2.crl

            X509v3 Authority Key Identifier:
                keyid:ED:DE:39:DE:CF:88:EE:83:2E:4A:66:51:06:B4:E3:36:AB:86:0B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:44:03:ef:82:0e:94:87:c5:26:20:5b:e7:f2:86:57:5d:40:
         8a:09:06:3c:44:2a:eb:09:1e:a5:76:9a:0d:d4:09:ba:04:63:
         b1:aa:d4:d9:01:4a:8e:64:7c:3c:dc:81:e6:99:96:69:81:17:
         0d:93:57:2b:b8:26:91:0a:8f:ad:d4:30:61:64:7e:40:7a:13:
         ed:3d:50:b0:61:e2:2d:8e:ae:d6:a6:8c:62:10:a6:01:bb:4e:
         29:7e:4e:4f:2f:19:25:54:83:3f:2b:1a:9f:b3:6d:b6:c0:8b:
         86:3d:6a:bd:dc:7f:5f:ad:ae:c5:02:83:f1:bc:4c:4f:11:83:
         0f:aa:40:85:d3:99:62:38:bc:ff:55:3d:f0:48:df:10:34:ea:
         55:c8:e3:dc:4b:7a:c7:47:df:73:32:22:75:64:a9:5b:38:07:
         90:46:fc:4d:29:39:6b:3c:29:68:c1:e5:50:c7:3c:f6:01:8c:
         27:33:06:51:16:8b:77:68:f9:16:4b:bf:c8:33:31:f8:41:0b:
         80:40:03:d4:30:73:42:4e:19:d1:2c:42:37:31:78:96:5a:07:
         81:1e:b0:68:38:69:18:df:7e:75:b6:21:f8:d7:7e:26:c3:1d:
         36:f7:15:c8:8a:99:1c:fd:06:ef:e0:d6:6a:63:af:ca:4f:6e:
         db:ea:bb:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWELBWLrQeBnpyN7jz4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzUzNDI1NjItNGIzMS00NzU0LWEzMmItYzVlZWM3NDRk
NGEyMB4XDTIzMDgwMjIxMzUwM1oXDTIzMTAzMTIxMzUwM1owLzEtMCsGA1UEAxMk
ZjY5ZjE4NzktODEyZS00MzRhLWIxNDctZWY1OWE2MWE5MGFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJI9mw85+YqT1dtWco9sfCOwmoUFC8L3hnGp
m4I7pUvp5rIpRr3byF7llDXi98ECvxyXM5WSR1wi4+9LEjH1LD/hfliRTls+/QEX
zdkkXj8gcT0mhHWQ/uIOcqxGJQPWQt4VN2ETZFAR0iCH69bvIv4I3Wi7CXBFX4iA
2oQtKVkmvpCnFq53+SwSZ2/wxnmefHPihSXmBLCC7mKGWVc0cHaMr/yzg3Noe6IH
bvdDUbcOtCKj/AVvpH97ZLSPFRFonp34CssGj29A4LgH+rwG1OMa/grx4D7ktcbR
xKTA6xgEEm2xUUxfdsCigMb0OYVXnZzYcxvdz8C9t7SpeJ1oBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKix/7E9SFymP79bb0N+h+xyWYOtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNTM0
MjU2Mi00YjMxLTQ3NTQtYTMyYi1jNWVlYzc0NGQ0YTIvNzFjZTdkOTAtNTJmYi0z
YjlkLTk2Y2QtMTg1ZGNmNTE5MjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzUzNDI1NjItNGIzMS00NzU0LWEz
MmItYzVlZWM3NDRkNGEyLzM1MzQyNTYyLTRiMzEtNDc1NC1hMzJiLWM1ZWVjNzQ0
ZDRhMi5jcmwwHwYDVR0jBBgwFoAU7d453s+I7oMuSmZRBrTjNquGC8EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNTM0MjU2Mi00YjMxLTQ3NTQtYTMyYi1jNWVl
Yzc0NGQ0YTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClXCYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALhEA++CDpSHxSYgW+fyhlddQIoJBjxEKusJHqV2mg3UCboEY7Gq1NkB
So5kfDzcgeaZlmmBFw2TVyu4JpEKj63UMGFkfkB6E+09ULBh4i2OrtamjGIQpgG7
Til+Tk8vGSVUgz8rGp+zbbbAi4Y9ar3cf1+trsUCg/G8TE8Rgw+qQIXTmWI4vP9V
PfBI3xA06lXI49xLesdH33MyInVkqVs4B5BG/E0pOWs8KWjB5VDHPPYBjCczBlEW
i3do+RZLv8gzMfhBC4BAA9Qwc0JOGdEsQjcxeJZaB4EesGg4aRjffnW2IfjXfibD
HTb3FciKmRz9Bu/g1mpjr8pPbtvquwc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:13 2024 by rpki-client on console-fra.rpki-client.org