Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/88ab1712-fb39-32c0-9d04-977a302120d3.roa
File:                     88ab1712-fb39-32c0-9d04-977a302120d3.roa (raw, json)
Hash identifier:          zO8OihL62DjwR6ujJXz3HayiriuSDiJfW/kIypwBVOY=
Subject key identifier:   3A:03:A1:06:FC:4E:30:2B:40:42:DC:2B:98:EB:A3:99:91:2A:07:79
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328584004A1419BAE28FE9BF8DC7E00
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/88ab1712-fb39-32c0-9d04-977a302120d3.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     398465
IP address blocks:        104.234.54.0/24 maxlen: 24
                          104.234.65.0/24 maxlen: 24
                          104.234.73.0/24 maxlen: 24
                          104.234.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:04:a1:41:9b:ae:28:fe:9b:f8:dc:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=a16eb2af-5542-41fd-929e-3dea61395515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8d:c5:9e:27:05:82:6e:97:cc:f7:fa:86:37:
                    56:0c:7d:b3:88:57:e4:36:af:6f:e3:87:a9:a8:0a:
                    8c:37:f1:27:65:77:be:e9:4e:0f:53:97:9c:41:0c:
                    f1:8d:46:5d:e0:84:b2:62:28:cd:af:7e:cf:46:60:
                    48:3c:7a:dd:bd:0c:4b:b9:2f:12:a1:b6:c0:18:a4:
                    ee:ae:00:d3:cc:f0:75:d2:d3:11:16:08:ae:1f:12:
                    75:51:62:bb:12:40:c8:ea:8e:29:b8:79:e0:cb:a2:
                    9e:a3:6e:00:33:ca:d6:17:12:4d:41:f9:51:29:24:
                    e4:81:6b:d3:b6:af:ac:4c:d4:a5:52:27:4e:dd:88:
                    fb:7d:55:0f:ed:af:4f:cb:9a:b1:89:81:8c:8c:d6:
                    e3:cc:1d:dc:4e:c8:01:bd:c4:8e:55:20:43:cc:e2:
                    69:cf:31:fa:f5:5e:e8:15:f1:9c:12:de:e6:8b:9c:
                    31:51:63:36:9b:db:07:e7:4b:ea:0f:ac:dc:a4:85:
                    bb:60:8f:38:e4:e4:a2:28:24:f7:5e:7a:0b:ef:2e:
                    ce:1e:ae:32:c4:ea:91:9d:18:ec:5f:99:49:2b:b3:
                    8a:ab:0e:c8:45:22:d7:df:f3:8e:68:7b:de:35:d0:
                    4c:11:ad:3e:73:82:b4:a9:8e:5b:c4:ba:89:e2:55:
                    23:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:03:A1:06:FC:4E:30:2B:40:42:DC:2B:98:EB:A3:99:91:2A:07:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/88ab1712-fb39-32c0-9d04-977a302120d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.54.0/24
                  104.234.65.0/24
                  104.234.73.0/24
                  104.234.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:6d:ca:44:fa:4a:c6:8d:c9:54:fd:6e:26:98:a3:48:9b:3f:
         44:47:52:02:18:03:5b:4b:4a:34:8a:1d:63:b4:8d:3f:22:5e:
         a7:ea:cb:ba:d3:29:5d:eb:f2:f0:4a:ce:45:ec:09:44:3d:36:
         e7:22:51:3e:d9:de:2b:78:76:81:50:01:68:32:86:e5:ec:37:
         af:86:be:3e:ab:56:c1:a9:86:0b:cd:a6:97:b5:e6:06:e7:f0:
         80:6c:cf:2a:04:2f:a4:99:26:02:52:d7:fe:7f:18:70:91:fd:
         89:71:89:2d:e0:b0:54:ae:0a:98:14:fc:5f:a3:0e:bb:94:24:
         f9:b6:b6:00:f0:7d:44:a0:23:b7:18:2f:c0:25:36:f0:38:2b:
         4c:48:cc:c2:3e:c1:af:60:7f:c4:6b:f9:9d:74:55:11:ef:88:
         52:77:f6:4b:ed:3b:e7:62:83:79:d4:78:f6:b5:86:2d:85:a1:
         f4:f2:c2:db:06:a6:fb:e2:f1:20:8c:86:83:b1:3f:16:f1:00:
         38:79:30:b1:fa:3c:38:f2:91:16:03:a8:3e:46:0d:eb:73:7f:
         4b:46:34:5c:95:36:e0:d1:3e:b8:f4:df:3a:9e:ad:5e:4d:66:
         c1:a6:e7:dd:c6:86:be:25:f3:ed:66:b9:bb:0b:28:a1:2e:cc:
         3d:28:25:73
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEAEoUGbrij+m/jcfgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmY2ZjZkYmQtNWExZi00OGIxLWFjN2EtN2I3YzAzNmM3
MGYwMB4XDTIxMTIxMzE1MTgwMFoXDTI0MDEzMTA1MDAwMFowLzEtMCsGA1UEAxMk
YTE2ZWIyYWYtNTU0Mi00MWZkLTkyOWUtM2RlYTYxMzk1NTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhY3FnicFgm6XzPf6hjdWDH2ziFfkNq9v44ep
qAqMN/EnZXe+6U4PU5ecQQzxjUZd4ISyYijNr37PRmBIPHrdvQxLuS8SobbAGKTu
rgDTzPB10tMRFgiuHxJ1UWK7EkDI6o4puHngy6Keo24AM8rWFxJNQflRKSTkgWvT
tq+sTNSlUidO3Yj7fVUP7a9Py5qxiYGMjNbjzB3cTsgBvcSOVSBDzOJpzzH69V7o
FfGcEt7mi5wxUWM2m9sH50vqD6zcpIW7YI845OSiKCT3XnoL7y7OHq4yxOqRnRjs
X5lJK7OKqw7IRSLX3/OOaHveNdBMEa0+c4K0qY5bxLqJ4lUjswIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFDoDoQb8TjArQELcK5jro5mRKgd5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZjZm
NmRiZC01YTFmLTQ4YjEtYWM3YS03YjdjMDM2YzcwZjAvODhhYjE3MTItZmIzOS0z
MmMwLTlkMDQtOTc3YTMwMjEyMGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmY2ZjZkYmQtNWExZi00OGIxLWFj
N2EtN2I3YzAzNmM3MGYwL2ZmNmY2ZGJkLTVhMWYtNDhiMS1hYzdhLTdiN2MwMzZj
NzBmMC5jcmwwHwYDVR0jBBgwFoAUtiZZXutxL1WTpJ9RO8h8b3R0PQUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mZjZmNmRiZC01YTFmLTQ4YjEtYWM3YS03Yjdj
MDM2YzcwZjAuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAaOo2AwQA
aOpBAwQAaOpJAwQAaOpNMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBADttykT6SsaNyVT9biaYo0ibP0RHUgIY
A1tLSjSKHWO0jT8iXqfqy7rTKV3r8vBKzkXsCUQ9NuciUT7Z3it4doFQAWgyhuXs
N6+Gvj6rVsGphgvNppe15gbn8IBszyoEL6SZJgJS1/5/GHCR/YlxiS3gsFSuCpgU
/F+jDruUJPm2tgDwfUSgI7cYL8AlNvA4K0xIzMI+wa9gf8Rr+Z10VRHviFJ39kvt
O+dig3nUePa1hi2FofTywtsGpvvi8SCMhoOxPxbxADh5MLH6PDjykRYDqD5GDetz
f0tGNFyVNuDRPrj03zqerV5NZsGm593Ghr4l8+1mubsLKKEuzD0oJXM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:49 2023 by rpki-client on console-ams.rpki-client.org