Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/55a116ca-c2bb-4f88-b1eb-7865e2cab31e/54cfd96f-1d4f-3e11-b8bf-df963f99af68.roa
File:                     54cfd96f-1d4f-3e11-b8bf-df963f99af68.roa (raw, json)
Hash identifier:          aP1MJaWWFgW+nOgK6mRgEijAE6oMVa/3MJw2BPB0t/Q=
Subject key identifier:   7B:96:E7:75:C3:AF:BC:E4:59:08:69:B9:01:14:71:FD:D5:4C:7D:4E
Certificate issuer:       /CN=55a116ca-c2bb-4f88-b1eb-7865e2cab31e
Certificate serial:       010D0C9F43285838AB32C57515A15F1AB8720A80
Authority key identifier: AE:34:D1:F9:75:13:14:6C:15:7A:AF:45:66:AD:D0:29:95:CF:B7:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/55a116ca-c2bb-4f88-b1eb-7865e2cab31e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/55a116ca-c2bb-4f88-b1eb-7865e2cab31e/54cfd96f-1d4f-3e11-b8bf-df963f99af68.roa
Signing time:             Tue 19 Jan 2021 05:00:00 +0000
ROA not before:           Tue 19 Jan 2021 05:00:00 +0000
ROA not after:            Mon 24 Apr 2023 04:00:00 +0000
asID:                     32035
IP address blocks:        74.115.96.0/22 maxlen: 24
                          74.122.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ab:32:c5:75:15:a1:5f:1a:b8:72:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55a116ca-c2bb-4f88-b1eb-7865e2cab31e
        Validity
            Not Before: Jan 19 05:00:00 2021 GMT
            Not After : Apr 24 04:00:00 2023 GMT
        Subject: CN=8ee186c4-7655-4135-a3f5-241becf5eef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8a:25:65:1f:23:7c:8c:73:4e:85:29:50:14:
                    69:b5:e2:df:37:17:59:f7:e7:92:53:6d:f9:84:9d:
                    ed:dd:19:2c:58:76:f9:8a:0e:d8:7d:1e:ab:ae:e5:
                    56:20:ea:c2:67:ed:94:2d:cc:b6:5c:7d:77:95:65:
                    9e:ea:54:7e:33:0b:bb:bd:e1:c8:7f:e4:50:35:25:
                    89:68:e5:80:0a:c4:6d:53:54:5d:f1:db:48:4d:00:
                    f1:d0:d3:15:9a:a2:7a:bb:7d:35:30:84:77:c1:c0:
                    3f:be:10:91:a2:f3:1e:c4:40:29:12:d9:75:fe:e9:
                    b2:6c:b4:90:af:61:b0:ee:4d:6e:58:27:c7:a4:9e:
                    75:14:fd:ce:ec:80:e2:b9:48:66:db:42:06:50:06:
                    e3:88:52:d6:18:16:d5:15:a8:7e:39:79:3e:0e:38:
                    5b:92:6d:9e:94:12:1e:1e:97:58:2c:df:31:2c:d6:
                    25:77:b5:e0:75:91:d9:5f:8e:8b:5a:26:c7:67:9f:
                    11:98:f0:cd:0c:b4:0e:6b:5e:9f:e8:b1:f5:81:19:
                    7d:21:7b:c8:3b:ce:14:84:00:46:fa:3e:e8:d3:4c:
                    72:55:fc:2b:57:c9:9f:c3:f1:4b:e0:e3:43:61:15:
                    d1:54:66:1d:b7:2c:ac:83:3c:0d:17:7c:9c:a5:39:
                    02:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:96:E7:75:C3:AF:BC:E4:59:08:69:B9:01:14:71:FD:D5:4C:7D:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/55a116ca-c2bb-4f88-b1eb-7865e2cab31e/54cfd96f-1d4f-3e11-b8bf-df963f99af68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/55a116ca-c2bb-4f88-b1eb-7865e2cab31e/55a116ca-c2bb-4f88-b1eb-7865e2cab31e.crl

            X509v3 Authority Key Identifier:
                keyid:AE:34:D1:F9:75:13:14:6C:15:7A:AF:45:66:AD:D0:29:95:CF:B7:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/55a116ca-c2bb-4f88-b1eb-7865e2cab31e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.96.0/22
                  74.122.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:5c:c3:c1:35:82:3a:43:1d:97:eb:8b:19:f7:43:c0:14:5a:
         8d:51:2b:33:8b:21:70:7d:bb:06:80:2b:a6:76:4a:36:d6:2b:
         d3:54:ee:6f:ce:21:a1:2c:61:50:62:9f:2c:37:13:b8:78:61:
         96:5e:c2:0c:5f:eb:a8:d9:50:e6:47:8b:99:57:b3:fa:0f:c9:
         f9:35:ab:a5:53:65:a4:4d:b8:b5:3b:76:d5:a1:71:bd:ad:a1:
         06:44:45:45:c3:80:80:cf:b3:61:61:c4:36:ff:f2:a8:5e:9a:
         d1:a4:de:f9:81:bf:79:67:86:5b:dc:ff:74:b7:61:cf:51:be:
         28:e1:6b:14:5e:9c:fc:96:b2:4e:23:5f:12:b7:8e:39:a0:ee:
         8d:c8:af:dd:cb:b3:06:86:1e:a2:c7:fc:82:89:bc:53:a7:cc:
         25:8d:7b:8a:eb:55:01:b1:52:a6:74:5f:3b:13:ef:d1:97:b0:
         11:29:72:2f:34:3d:a5:8e:80:e3:b7:68:07:a7:77:5f:60:35:
         16:d6:7c:b6:f3:9b:aa:13:dd:09:1f:4d:0a:cb:2b:f5:16:5a:
         50:94:18:09:21:14:6e:80:f5:67:29:1a:63:48:31:2a:9b:3d:
         77:39:02:fd:6e:f8:28:a4:40:15:81:cf:4c:b3:7b:66:83:33:
         1c:9e:ca:d9
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWDirMsV1FaFfGrhyCoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTVhMTE2Y2EtYzJiYi00Zjg4LWIxZWItNzg2NWUyY2Fi
MzFlMB4XDTIxMDExOTA1MDAwMFoXDTIzMDQyNDA0MDAwMFowLzEtMCsGA1UEAxMk
OGVlMTg2YzQtNzY1NS00MTM1LWEzZjUtMjQxYmVjZjVlZWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYolZR8jfIxzToUpUBRpteLfNxdZ9+eSU235
hJ3t3RksWHb5ig7YfR6rruVWIOrCZ+2ULcy2XH13lWWe6lR+Mwu7veHIf+RQNSWJ
aOWACsRtU1Rd8dtITQDx0NMVmqJ6u301MIR3wcA/vhCRovMexEApEtl1/umybLSQ
r2Gw7k1uWCfHpJ51FP3O7IDiuUhm20IGUAbjiFLWGBbVFah+OXk+Djhbkm2elBIe
HpdYLN8xLNYld7XgdZHZX46LWibHZ58RmPDNDLQOa16f6LH1gRl9IXvIO84UhABG
+j7o00xyVfwrV8mfw/FL4ONDYRXRVGYdtyysgzwNF3ycpTkCTQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFHuW53XDr7zkWQhpuQEUcf3VTH1OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NWEx
MTZjYS1jMmJiLTRmODgtYjFlYi03ODY1ZTJjYWIzMWUvNTRjZmQ5NmYtMWQ0Zi0z
ZTExLWI4YmYtZGY5NjNmOTlhZjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTVhMTE2Y2EtYzJiYi00Zjg4LWIx
ZWItNzg2NWUyY2FiMzFlLzU1YTExNmNhLWMyYmItNGY4OC1iMWViLTc4NjVlMmNh
YjMxZS5jcmwwHwYDVR0jBBgwFoAUrjTR+XUTFGwVeq9FZq3QKZXPtzwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS81NWExMTZjYS1jMmJiLTRmODgtYjFlYi03ODY1
ZTJjYWIzMWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCSnNgAwQC
Snp0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABFcw8E1gjpDHZfrixn3Q8AUWo1RKzOLIXB9uwaAK6Z2SjbW
K9NU7m/OIaEsYVBinyw3E7h4YZZewgxf66jZUOZHi5lXs/oPyfk1q6VTZaRNuLU7
dtWhcb2toQZERUXDgIDPs2FhxDb/8qhemtGk3vmBv3lnhlvc/3S3Yc9RvijhaxRe
nPyWsk4jXxK3jjmg7o3Ir93LswaGHqLH/IKJvFOnzCWNe4rrVQGxUqZ0XzsT79GX
sBEpci80PaWOgOO3aAend19gNRbWfLbzm6oT3QkfTQrLK/UWWlCUGAkhFG6A9Wcp
GmNIMSqbPXc5Av1u+CikQBWBz0yze2aDMxyeytk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:35 2023 by rpki-client on console-fra.rpki-client.org