Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7610c78e-5229-41f2-9c50-5fa26c41e826/867fdeb1-5754-37c7-960a-bd92247cdf70.roa
File:                     867fdeb1-5754-37c7-960a-bd92247cdf70.roa (raw, json)
Hash identifier:          XFnO5Qv0JXu/4DdYtcv2XNvfhRGKQkaQaq4y5kxSLus=
Subject key identifier:   20:10:A9:B4:F2:C2:A3:44:4E:75:EA:A7:9A:B0:4D:32:AD:20:73:13
Certificate issuer:       /CN=7610c78e-5229-41f2-9c50-5fa26c41e826
Certificate serial:       010D0C9F43285845B38370803A4937AE70D3FC80
Authority key identifier: 22:BF:C7:47:F1:EF:E2:6A:14:37:1E:81:3F:A3:BD:04:0B:DF:C7:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7610c78e-5229-41f2-9c50-5fa26c41e826.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7610c78e-5229-41f2-9c50-5fa26c41e826/867fdeb1-5754-37c7-960a-bd92247cdf70.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     7896
IP address blocks:        64.89.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:70:80:3a:49:37:ae:70:d3:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7610c78e-5229-41f2-9c50-5fa26c41e826
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=7b593fc3-28c2-4747-b086-bc57d4d7c9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3e:eb:a1:9f:20:2a:cc:ac:37:c8:b3:12:80:
                    6d:f3:d1:bf:0c:87:0d:73:91:7e:52:e3:94:82:55:
                    7a:e8:5a:9c:26:15:38:25:a0:5f:28:90:56:68:14:
                    f4:47:60:e3:88:8d:3e:8e:1d:de:fc:d4:cf:97:82:
                    2b:94:4a:c3:e1:dc:40:eb:47:8c:b7:14:cd:df:90:
                    01:1b:a3:fe:1a:45:f4:ed:60:16:0b:62:4d:f2:00:
                    ba:09:38:e6:ed:8c:02:65:58:c0:72:bb:49:4e:02:
                    89:ee:36:f7:30:4a:2a:0c:c1:34:57:1c:3c:16:e3:
                    25:57:61:39:87:78:72:7f:d5:bd:5f:a9:ea:ca:08:
                    17:db:3d:c4:34:da:61:3c:81:00:30:bb:1e:44:49:
                    3b:8e:92:6d:b8:da:15:b1:b6:be:a4:3e:29:71:2c:
                    d9:14:1a:02:a0:93:9f:cb:a5:8f:33:93:77:1e:60:
                    e2:00:bd:8b:b4:ba:e9:8e:b1:af:11:66:5b:29:0c:
                    a2:a5:44:06:29:7d:58:1e:26:25:85:d7:0f:af:a4:
                    9e:d5:62:52:2a:f4:8d:ef:69:73:0a:4b:2e:90:c8:
                    2c:d1:1e:16:fc:62:dd:fe:3a:5d:b5:84:99:8e:d5:
                    ea:7e:76:ce:eb:d6:52:65:79:3c:53:e6:8f:63:55:
                    04:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:10:A9:B4:F2:C2:A3:44:4E:75:EA:A7:9A:B0:4D:32:AD:20:73:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7610c78e-5229-41f2-9c50-5fa26c41e826/867fdeb1-5754-37c7-960a-bd92247cdf70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7610c78e-5229-41f2-9c50-5fa26c41e826/7610c78e-5229-41f2-9c50-5fa26c41e826.crl

            X509v3 Authority Key Identifier:
                keyid:22:BF:C7:47:F1:EF:E2:6A:14:37:1E:81:3F:A3:BD:04:0B:DF:C7:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7610c78e-5229-41f2-9c50-5fa26c41e826.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.89.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:21:41:17:e1:4b:87:42:7f:10:22:08:ec:02:41:20:23:9d:
         5c:52:fd:59:67:45:45:4d:4a:d5:e3:8d:cc:d0:d4:4a:bd:2d:
         eb:10:24:23:cf:fb:d5:ec:a4:3c:9a:cf:a1:c0:d1:b0:85:05:
         fd:c1:ea:c2:c0:3a:e4:1e:43:5d:22:14:4d:4d:4b:0a:b6:90:
         68:e0:d6:a8:89:b8:17:35:31:97:66:e2:f2:00:de:c6:b8:43:
         99:b3:a2:b4:16:67:80:ff:2a:36:31:ac:a8:e1:d0:83:8e:8f:
         40:ec:52:4f:b3:50:06:cd:fb:a4:d9:42:24:a1:b9:4c:18:26:
         44:b6:59:a9:01:e2:52:9f:bd:54:8a:b1:3b:dc:7f:c3:8d:f5:
         55:12:a5:34:6e:ec:17:81:20:72:67:95:11:a8:6c:37:77:a8:
         5b:44:41:89:e2:0c:69:12:f9:a7:7b:8f:6a:52:59:a0:2d:e6:
         78:f7:27:28:90:75:65:3f:69:fc:a7:49:d6:6e:a8:57:ee:33:
         a7:19:1f:81:98:1d:17:89:a7:c1:86:2a:98:59:40:d8:cd:8b:
         b1:84:ab:d6:a1:51:4d:e6:03:1a:4b:ed:c6:b3:cc:40:0a:be:
         ae:2f:e8:6b:7e:ba:43:9c:18:6a:b3:4c:29:1b:fe:fa:e0:29:
         21:3b:7b:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWzg3CAOkk3rnDT/IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzYxMGM3OGUtNTIyOS00MWYyLTljNTAtNWZhMjZjNDFl
ODI2MB4XDTI0MDQyOTAxMDAyNVoXDTI0MDcyODAxMDAyNVowLzEtMCsGA1UEAxMk
N2I1OTNmYzMtMjhjMi00NzQ3LWIwODYtYmM1N2Q0ZDdjOWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj7roZ8gKsysN8izEoBt89G/DIcNc5F+UuOU
glV66FqcJhU4JaBfKJBWaBT0R2DjiI0+jh3e/NTPl4IrlErD4dxA60eMtxTN35AB
G6P+GkX07WAWC2JN8gC6CTjm7YwCZVjAcrtJTgKJ7jb3MEoqDME0Vxw8FuMlV2E5
h3hyf9W9X6nqyggX2z3ENNphPIEAMLseREk7jpJtuNoVsba+pD4pcSzZFBoCoJOf
y6WPM5N3HmDiAL2LtLrpjrGvEWZbKQyipUQGKX1YHiYlhdcPr6Se1WJSKvSN72lz
CksukMgs0R4W/GLd/jpdtYSZjtXqfnbO69ZSZXk8U+aPY1UEZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCAQqbTywqNETnXqp5qwTTKtIHMTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83NjEw
Yzc4ZS01MjI5LTQxZjItOWM1MC01ZmEyNmM0MWU4MjYvODY3ZmRlYjEtNTc1NC0z
N2M3LTk2MGEtYmQ5MjI0N2NkZjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzYxMGM3OGUtNTIyOS00MWYyLTlj
NTAtNWZhMjZjNDFlODI2Lzc2MTBjNzhlLTUyMjktNDFmMi05YzUwLTVmYTI2YzQx
ZTgyNi5jcmwwHwYDVR0jBBgwFoAUIr/HR/Hv4moUNx6BP6O9BAvfx2IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83NjEwYzc4ZS01MjI5LTQxZjItOWM1MC01ZmEy
NmM0MWU4MjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQFmwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADQhQRfhS4dCfxAiCOwCQSAjnVxS/VlnRUVNStXjjczQ1Eq9LesQJCPP
+9XspDyaz6HA0bCFBf3B6sLAOuQeQ10iFE1NSwq2kGjg1qiJuBc1MZdm4vIA3sa4
Q5mzorQWZ4D/KjYxrKjh0IOOj0DsUk+zUAbN+6TZQiShuUwYJkS2WakB4lKfvVSK
sTvcf8ON9VUSpTRu7BeBIHJnlRGobDd3qFtEQYniDGkS+ad7j2pSWaAt5nj3JyiQ
dWU/afynSdZuqFfuM6cZH4GYHReJp8GGKphZQNjNi7GEq9ahUU3mAxpL7cazzEAK
vq4v6Gt+ukOcGGqzTCkb/vrgKSE7ezo=
-----END CERTIFICATE-----