Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/819140cf-fbfc-49da-84dc-dd807ce1adbc/7b21a1e0-2d14-36e8-a2c1-61956bd99294.roa
File:                     7b21a1e0-2d14-36e8-a2c1-61956bd99294.roa (raw, json)
Hash identifier:          GwnjVJrVNXD5Vseeg6GdTIgl0KUPst+vt+o0LZO5d4M=
Subject key identifier:   79:BA:3F:D0:6D:73:D7:7E:07:AD:AF:31:82:3F:F2:F7:AD:54:06:FB
Certificate issuer:       /CN=819140cf-fbfc-49da-84dc-dd807ce1adbc
Certificate serial:       010D0C9F4328583B47A9EC83F366BC0ECF73E700
Authority key identifier: D8:EC:B9:C7:FC:30:6D:9E:93:54:8D:D1:06:84:1F:C9:8E:C6:32:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/819140cf-fbfc-49da-84dc-dd807ce1adbc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/819140cf-fbfc-49da-84dc-dd807ce1adbc/7b21a1e0-2d14-36e8-a2c1-61956bd99294.roa
Signing time:             Wed 15 Sep 2021 04:00:00 +0000
ROA not before:           Wed 15 Sep 2021 04:00:00 +0000
ROA not after:            Wed 20 Dec 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        157.53.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:47:a9:ec:83:f3:66:bc:0e:cf:73:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=819140cf-fbfc-49da-84dc-dd807ce1adbc
        Validity
            Not Before: Sep 15 04:00:00 2021 GMT
            Not After : Dec 20 05:00:00 2023 GMT
        Subject: CN=daad32dc-d3f3-4f8c-8272-d82751bbfd93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:d5:13:e8:24:fd:fb:76:9c:99:8f:75:e1:
                    84:13:fc:11:f2:95:60:d1:b1:1a:e3:7f:61:2a:19:
                    54:cb:7e:bd:98:b7:3b:cb:8e:2a:1f:d2:bf:ee:4d:
                    a6:af:51:f2:ca:82:86:0d:8d:28:f7:89:e1:d9:d1:
                    91:39:c1:4f:50:0f:58:d6:69:5d:45:3a:72:88:aa:
                    cd:37:32:88:56:4d:3a:ab:b4:49:da:1a:77:e6:be:
                    e1:31:04:77:0e:ea:a8:b5:b7:1a:08:06:6c:24:d0:
                    b6:95:e3:6e:a4:c3:3c:fc:11:cc:59:74:1e:64:96:
                    b1:60:c3:e1:e2:f4:30:75:3c:05:36:e6:ac:a8:2f:
                    60:10:24:46:6c:ff:ca:53:6b:ea:6e:7b:66:86:0b:
                    25:cf:58:c1:c1:aa:eb:a1:ed:5b:27:2d:7b:0b:86:
                    68:2b:00:b5:21:57:62:b5:77:90:d9:eb:9a:24:cb:
                    1e:38:fc:89:50:02:44:02:13:90:9e:13:60:6e:b1:
                    21:7d:00:39:73:22:ab:af:a6:95:a5:68:10:d9:18:
                    b4:fb:97:ed:cc:6b:1c:d5:b0:71:0a:fa:f8:b5:e8:
                    ab:88:90:19:5c:78:29:7f:a1:cd:e2:4c:ea:69:15:
                    70:ec:10:38:db:0a:fc:32:9c:23:0a:51:e9:07:0b:
                    c1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BA:3F:D0:6D:73:D7:7E:07:AD:AF:31:82:3F:F2:F7:AD:54:06:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/819140cf-fbfc-49da-84dc-dd807ce1adbc/7b21a1e0-2d14-36e8-a2c1-61956bd99294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/819140cf-fbfc-49da-84dc-dd807ce1adbc/819140cf-fbfc-49da-84dc-dd807ce1adbc.crl

            X509v3 Authority Key Identifier:
                keyid:D8:EC:B9:C7:FC:30:6D:9E:93:54:8D:D1:06:84:1F:C9:8E:C6:32:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/819140cf-fbfc-49da-84dc-dd807ce1adbc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.53.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:9b:74:b6:3b:d6:df:8b:3d:49:59:3e:21:9a:86:f4:cc:6d:
         50:ef:94:04:50:9f:84:1d:6c:0c:be:18:9f:90:20:f7:8f:ba:
         fe:13:29:fe:fa:3e:77:c2:56:e9:60:a7:d3:2a:7b:23:a0:88:
         9d:2b:84:bd:71:52:2b:c5:a4:fa:5c:f9:1f:78:cf:0e:85:84:
         d1:98:6c:cc:10:00:fe:15:f8:34:4d:28:55:aa:bf:dc:e1:8f:
         43:dd:cc:55:14:11:e7:be:ec:8c:d3:37:d6:f2:41:09:b9:a0:
         52:77:9c:d6:ac:64:49:68:87:b3:9b:01:6d:51:33:46:21:0b:
         db:bd:7a:00:7a:b6:b7:01:06:d5:cc:67:e6:cd:48:2b:f7:04:
         7c:82:b0:ba:b5:ef:8b:14:cc:66:9b:70:e8:cc:a2:b2:8f:6c:
         6c:85:39:a2:da:53:31:3d:c2:37:35:7d:e0:d6:51:d3:9b:e6:
         a9:31:70:d9:52:0a:a7:05:ec:f7:47:92:8b:38:47:bc:b2:f6:
         a2:00:4d:9e:d0:4c:63:ab:ef:8a:eb:70:67:75:6a:c6:d0:96:
         d8:86:44:e5:16:f3:b3:b0:d3:33:d4:e5:7e:4c:21:4d:41:3f:
         67:62:83:48:17:fe:37:5b:40:99:1b:be:e2:08:3b:88:ca:ad:
         c3:4f:86:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDtHqeyD82a8Ds9z5wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODE5MTQwY2YtZmJmYy00OWRhLTg0ZGMtZGQ4MDdjZTFh
ZGJjMB4XDTIxMDkxNTA0MDAwMFoXDTIzMTIyMDA1MDAwMFowLzEtMCsGA1UEAxMk
ZGFhZDMyZGMtZDNmMy00ZjhjLTgyNzItZDgyNzUxYmJmZDkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ/VE+gk/ft2nJmPdeGEE/wR8pVg0bEa439h
KhlUy369mLc7y44qH9K/7k2mr1HyyoKGDY0o94nh2dGROcFPUA9Y1mldRTpyiKrN
NzKIVk06q7RJ2hp35r7hMQR3DuqotbcaCAZsJNC2leNupMM8/BHMWXQeZJaxYMPh
4vQwdTwFNuasqC9gECRGbP/KU2vqbntmhgslz1jBwarroe1bJy17C4ZoKwC1IVdi
tXeQ2euaJMseOPyJUAJEAhOQnhNgbrEhfQA5cyKrr6aVpWgQ2Ri0+5ftzGsc1bBx
Cvr4teiriJAZXHgpf6HN4kzqaRVw7BA42wr8MpwjClHpBwvB1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHm6P9Btc9d+B62vMYI/8vetVAb7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MTkx
NDBjZi1mYmZjLTQ5ZGEtODRkYy1kZDgwN2NlMWFkYmMvN2IyMWExZTAtMmQxNC0z
NmU4LWEyYzEtNjE5NTZiZDk5Mjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODE5MTQwY2YtZmJmYy00OWRhLTg0
ZGMtZGQ4MDdjZTFhZGJjLzgxOTE0MGNmLWZiZmMtNDlkYS04NGRjLWRkODA3Y2Ux
YWRiYy5jcmwwHwYDVR0jBBgwFoAU2Oy5x/wwbZ6TVI3RBoQfyY7GMgQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84MTkxNDBjZi1mYmZjLTQ5ZGEtODRkYy1kZDgw
N2NlMWFkYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnTX/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJSbdLY71t+LPUlZPiGahvTMbVDvlARQn4QdbAy+GJ+QIPePuv4TKf76
PnfCVulgp9MqeyOgiJ0rhL1xUivFpPpc+R94zw6FhNGYbMwQAP4V+DRNKFWqv9zh
j0PdzFUUEee+7IzTN9byQQm5oFJ3nNasZEloh7ObAW1RM0YhC9u9egB6trcBBtXM
Z+bNSCv3BHyCsLq174sUzGabcOjMorKPbGyFOaLaUzE9wjc1feDWUdOb5qkxcNlS
CqcF7PdHkos4R7yy9qIATZ7QTGOr74rrcGd1asbQltiGROUW87Ow0zPU5X5MIU1B
P2dig0gX/jdbQJkbvuIIO4jKrcNPhkg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:40 2024 by rpki-client on console-ams.rpki-client.org