Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f57e016-3f00-4230-8751-484573ddf8de/7f03ce68-1af5-3cb4-8a25-291554cbcc51.roa
File:                     7f03ce68-1af5-3cb4-8a25-291554cbcc51.roa (raw, json)
Hash identifier:          /c/NKrfBI4y3X6u/LsnPqqHfJf2np6MmdQmvOfJQjRA=
Subject key identifier:   6C:C5:20:78:6E:4B:36:61:B1:73:9B:73:17:F6:8D:9D:F7:90:7B:31
Certificate issuer:       /CN=6f57e016-3f00-4230-8751-484573ddf8de
Certificate serial:       010D0C9F4328584152C826E4AC82BF03C5E32B48
Authority key identifier: B0:4A:AC:B4:CD:17:FC:FC:13:9D:45:27:73:67:CB:82:F6:62:48:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f57e016-3f00-4230-8751-484573ddf8de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f57e016-3f00-4230-8751-484573ddf8de/7f03ce68-1af5-3cb4-8a25-291554cbcc51.roa
Signing time:             Sat 18 Mar 2023 12:00:00 +0000
ROA not before:           Sat 18 Mar 2023 12:00:00 +0000
ROA not after:            Mon 26 Jun 2028 04:00:00 +0000
asID:                     32035
IP address blocks:        66.43.112.0/21 maxlen: 24
                          74.85.0.0/19 maxlen: 24
                          69.170.160.0/19 maxlen: 24
                          69.168.192.0/19 maxlen: 24
                          69.28.96.0/19 maxlen: 24
                          207.232.80.0/20 maxlen: 24
                          66.43.110.0/24 maxlen: 24
                          66.43.101.0/24 maxlen: 24
                          66.43.92.0/24 maxlen: 24
                          66.43.96.0/23 maxlen: 24
                          66.43.98.0/24 maxlen: 24
                          66.43.106.0/24 maxlen: 24
                          66.43.105.0/24 maxlen: 24
                          209.141.96.0/20 maxlen: 24
                          209.141.64.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:52:c8:26:e4:ac:82:bf:03:c5:e3:2b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f57e016-3f00-4230-8751-484573ddf8de
        Validity
            Not Before: Mar 18 12:00:00 2023 GMT
            Not After : Jun 26 04:00:00 2028 GMT
        Subject: CN=6fd12a99-cc87-445e-889a-686ab5fc932e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e7:1a:5e:c4:e3:21:96:07:e7:48:45:ed:d6:
                    3e:98:e2:82:8f:95:c2:69:79:65:b9:b3:bb:4c:5e:
                    84:5e:c9:38:53:ed:64:7f:cc:c6:7e:d8:1e:17:52:
                    3c:91:35:9e:58:1f:34:f0:e1:e3:73:43:dd:14:27:
                    86:b4:19:17:64:86:1b:78:1a:8b:88:0e:d3:5d:e8:
                    35:e1:0d:93:38:30:30:56:28:93:c6:3a:91:a2:fd:
                    55:bd:22:4b:90:74:74:37:a4:84:45:3d:38:bf:5e:
                    d2:84:02:58:ea:18:e4:76:89:1a:b8:aa:f9:0c:ba:
                    86:86:b9:9d:ce:73:8a:28:e5:38:81:c4:1e:f1:20:
                    d4:ad:b3:37:80:2f:38:fd:85:43:50:68:2d:42:d9:
                    c2:1a:2a:71:71:3f:97:f7:cb:fb:20:99:4a:24:b9:
                    80:33:16:6b:63:fe:41:c3:03:8f:17:b3:7c:98:5c:
                    04:b4:90:13:40:c1:07:9a:03:98:33:eb:41:99:2c:
                    d7:87:d5:d3:5a:29:bf:cd:d2:4b:66:ae:9a:9a:3f:
                    0a:84:04:11:ca:6d:68:9e:06:45:c2:2a:ec:a2:f2:
                    30:98:aa:af:82:06:02:88:71:d6:58:a8:bc:82:14:
                    86:91:df:9e:c7:5f:cf:a3:e1:0a:cb:4f:26:62:67:
                    b5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C5:20:78:6E:4B:36:61:B1:73:9B:73:17:F6:8D:9D:F7:90:7B:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f57e016-3f00-4230-8751-484573ddf8de/7f03ce68-1af5-3cb4-8a25-291554cbcc51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f57e016-3f00-4230-8751-484573ddf8de/6f57e016-3f00-4230-8751-484573ddf8de.crl

            X509v3 Authority Key Identifier:
                keyid:B0:4A:AC:B4:CD:17:FC:FC:13:9D:45:27:73:67:CB:82:F6:62:48:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f57e016-3f00-4230-8751-484573ddf8de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.43.92.0/24
                  66.43.96.0-66.43.98.255
                  66.43.101.0/24
                  66.43.105.0-66.43.106.255
                  66.43.110.0/24
                  66.43.112.0/21
                  69.28.96.0/19
                  69.168.192.0/19
                  69.170.160.0/19
                  74.85.0.0/19
                  207.232.80.0/20
                  209.141.64.0-209.141.111.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:02:5f:7d:43:02:5d:f1:98:49:de:b9:02:55:a1:4d:df:d6:
         9e:c9:20:75:bc:43:8d:71:37:b0:d8:18:9f:32:ae:c0:38:28:
         a7:36:b8:c8:d7:08:09:b1:ba:fd:b0:81:ef:ec:8a:ac:77:6f:
         77:c4:7c:3f:9e:99:39:12:c7:9f:62:77:4d:60:ae:b7:53:4a:
         5a:38:0c:de:a7:33:6e:1b:6b:70:55:ab:2f:ca:c0:33:84:b9:
         88:7c:0c:4b:63:6e:58:71:7c:b4:ca:6f:c0:9c:54:8e:4e:e1:
         5f:86:2d:16:b1:bf:82:7d:89:6d:20:5c:d4:dd:0f:04:79:f8:
         4d:39:0c:44:f4:fe:2e:9d:07:d1:e8:a9:ae:53:07:7b:ea:36:
         03:40:5f:03:5a:2f:35:25:17:4f:87:04:95:1c:7a:ca:64:e1:
         13:e4:f2:d5:4e:8e:76:5f:d7:1a:71:19:f7:bf:24:6f:3c:38:
         8d:c5:5a:78:b0:ae:21:7b:36:6e:c5:59:1e:ac:0f:80:7d:d9:
         9e:68:82:67:51:00:42:d6:cf:79:ac:ca:af:7c:ff:a5:9f:43:
         3c:ad:f6:58:c9:c1:f6:84:9e:16:f0:e9:89:21:a8:fe:89:c0:
         7f:f9:1b:54:7b:5a:2d:3a:ec:09:4b:b0:93:12:b5:5d:74:09:
         67:64:e7:31
-----BEGIN CERTIFICATE-----
MIIGnTCCBYWgAwIBAgIUAQ0Mn0MoWEFSyCbkrIK/A8XjK0gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY1N2UwMTYtM2YwMC00MjMwLTg3NTEtNDg0NTczZGRm
OGRlMB4XDTIzMDMxODEyMDAwMFoXDTI4MDYyNjA0MDAwMFowLzEtMCsGA1UEAxMk
NmZkMTJhOTktY2M4Ny00NDVlLTg4OWEtNjg2YWI1ZmM5MzJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OcaXsTjIZYH50hF7dY+mOKCj5XCaXllubO7
TF6EXsk4U+1kf8zGftgeF1I8kTWeWB808OHjc0PdFCeGtBkXZIYbeBqLiA7TXeg1
4Q2TODAwViiTxjqRov1VvSJLkHR0N6SERT04v17ShAJY6hjkdokauKr5DLqGhrmd
znOKKOU4gcQe8SDUrbM3gC84/YVDUGgtQtnCGipxcT+X98v7IJlKJLmAMxZrY/5B
wwOPF7N8mFwEtJATQMEHmgOYM+tBmSzXh9XTWim/zdJLZq6amj8KhAQRym1ongZF
wirsovIwmKqvggYCiHHWWKi8ghSGkd+ex1/Po+EKy08mYme1FwIDAQABo4IDrzCC
A6swHQYDVR0OBBYEFGzFIHhuSzZhsXObcxf2jZ33kHsxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjU3
ZTAxNi0zZjAwLTQyMzAtODc1MS00ODQ1NzNkZGY4ZGUvN2YwM2NlNjgtMWFmNS0z
Y2I0LThhMjUtMjkxNTU0Y2JjYzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY1N2UwMTYtM2YwMC00MjMwLTg3
NTEtNDg0NTczZGRmOGRlLzZmNTdlMDE2LTNmMDAtNDIzMC04NzUxLTQ4NDU3M2Rk
ZjhkZS5jcmwwHwYDVR0jBBgwFoAUsEqstM0X/PwTnUUnc2fLgvZiSPMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjU3ZTAxNi0zZjAwLTQyMzAtODc1MS00ODQ1
NzNkZGY4ZGUuY2VyMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQAQitcMAwD
BAVCK2ADBABCK2IDBABCK2UwDAMEAEIraQMEAEIragMEAEIrbgMEA0IrcAMEBUUc
YAMEBUWowAMEBUWqoAMEBUpVAAMEBM/oUDAMAwQG0Y1AAwQE0Y1gMFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
AFACX31DAl3xmEneuQJVoU3f1p7JIHW8Q41xN7DYGJ8yrsA4KKc2uMjXCAmxuv2w
ge/siqx3b3fEfD+emTkSx59id01grrdTSlo4DN6nM24ba3BVqy/KwDOEuYh8DEtj
blhxfLTKb8CcVI5O4V+GLRaxv4J9iW0gXNTdDwR5+E05DET0/i6dB9Hoqa5TB3vq
NgNAXwNaLzUlF0+HBJUcespk4RPk8tVOjnZf1xpxGfe/JG88OI3FWniwriF7Nm7F
WR6sD4B92Z5ogmdRAELWz3msyq98/6WfQzyt9ljJwfaEnhbw6YkhqP6JwH/5G1R7
Wi067AlLsJMStV10CWdk5zE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:37 2023 by rpki-client on console-ams.rpki-client.org