Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/1/32332e3135302e382e302f32322d3234203d3e20393435.roa
File:                     32332e3135302e382e302f32322d3234203d3e20393435.roa (raw, json)
Hash identifier:          mG6A4i3/kHjF+vEHKtHPEx7P8wyhoil9R/saD0xM0tA=
Subject key identifier:   B0:D2:D9:9E:26:74:25:9F:9A:D1:93:D1:2F:B0:04:4B:2B:25:0F:1C
Certificate issuer:       /CN=a6201efd4c3d6ab6eabeac88e666d6448f4dece7f82ceafe38
Certificate serial:       5E23DD61651F39E1547D7CEFD09EA83773D5BB16
Authority key identifier: C6:88:B5:9E:42:2D:77:E9:32:AC:51:86:EC:BF:91:49:91:63:C0:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c3d6ab6eabeac88e666d6448f4dece7f82ceafe38.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/1/32332e3135302e382e302f32322d3234203d3e20393435.roa
Signing time:             Thu 27 Feb 2025 17:03:26 +0000
ROA not before:           Thu 27 Feb 2025 16:58:26 +0000
ROA not after:            Thu 26 Feb 2026 17:03:26 +0000
asID:                     945
IP address blocks:        23.150.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:23:dd:61:65:1f:39:e1:54:7d:7c:ef:d0:9e:a8:37:73:d5:bb:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6201efd4c3d6ab6eabeac88e666d6448f4dece7f82ceafe38
        Validity
            Not Before: Feb 27 16:58:26 2025 GMT
            Not After : Feb 26 17:03:26 2026 GMT
        Subject: CN=B0D2D99E2674259F9AD193D12FB0044B2B250F1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f5:bd:03:11:00:c6:fd:d0:95:91:21:91:57:
                    d7:0a:d5:ba:3f:8d:2c:f9:19:0b:d6:3b:64:7c:0e:
                    90:c8:a3:e8:4d:6c:38:b6:c0:51:9b:22:36:e1:98:
                    95:6b:0e:f5:4f:73:96:cb:28:b2:02:d9:55:50:37:
                    55:54:fa:7c:f0:af:eb:68:e1:ca:cf:56:e4:13:4e:
                    a9:fe:52:7c:37:2f:53:20:f0:69:43:a1:9a:f5:c9:
                    22:c9:e6:d5:a5:03:4c:f9:cb:93:98:96:a0:e0:bd:
                    e3:d4:a8:5d:de:ce:a1:91:a6:ff:5d:24:ed:16:22:
                    a0:8d:07:d4:ba:0e:59:63:a8:4c:94:79:33:e7:ce:
                    85:e7:cb:d4:9d:0d:9c:0c:2b:82:d8:88:fa:60:09:
                    e4:81:36:d1:9b:29:97:c0:d7:f6:0f:2a:f1:22:66:
                    3c:eb:8d:82:30:70:22:bc:0a:dd:bf:ef:fa:b1:cf:
                    b6:bd:9e:e2:cf:71:c3:8b:43:27:fc:fe:d5:58:33:
                    fe:c5:cb:50:ac:95:22:4e:ef:51:7a:4c:fb:97:2a:
                    61:d1:66:99:9a:c1:6d:05:2f:62:c1:bf:91:d7:6a:
                    6d:b2:45:18:b8:4a:05:97:95:dd:1a:94:e8:a4:4a:
                    16:4c:e7:bd:0f:be:01:1d:40:83:bc:4a:3a:06:1d:
                    70:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D2:D9:9E:26:74:25:9F:9A:D1:93:D1:2F:B0:04:4B:2B:25:0F:1C
            X509v3 Authority Key Identifier:
                keyid:C6:88:B5:9E:42:2D:77:E9:32:AC:51:86:EC:BF:91:49:91:63:C0:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/1/C688B59E422D77E932AC5186ECBF91499163C0CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c3d6ab6eabeac88e666d6448f4dece7f82ceafe38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/1/32332e3135302e382e302f32322d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:76:44:6d:5c:5d:cd:45:42:38:7c:73:ab:9e:20:1a:3b:67:
         cd:99:e3:09:7e:41:38:37:19:17:36:b5:95:86:d4:38:43:56:
         0c:f6:49:ba:c6:33:88:32:12:ed:88:8d:65:e2:64:dd:fe:59:
         f7:df:a8:ec:c4:ca:d7:fb:58:33:81:3c:af:85:d5:ca:28:e3:
         ba:12:74:0e:60:29:b0:d4:93:dd:c7:74:5f:36:5c:2a:66:9e:
         42:40:23:0b:23:50:70:20:40:ac:e0:b8:eb:cc:2c:29:02:6c:
         ab:bc:7e:41:a2:de:08:ea:d9:4e:cd:1a:5a:67:af:40:9d:48:
         74:2d:51:c2:19:3a:08:00:02:df:69:50:5d:ea:7c:72:60:36:
         3f:8f:5c:91:63:32:f1:3a:bc:70:d1:1d:eb:d6:9b:93:6c:07:
         f5:3d:1f:09:93:df:35:46:5a:08:bf:18:96:3e:c8:54:21:46:
         3a:97:b3:81:af:52:61:22:0d:3f:f3:82:7d:57:d0:0b:65:03:
         2e:0f:96:76:07:ac:2f:d7:f4:85:10:b3:bb:d3:1c:2d:f6:a2:
         23:24:3c:a4:47:5a:ab:39:ba:a2:2b:3f:79:22:19:f0:d8:c6:
         38:e8:98:1f:e6:ae:8d:15:fc:74:97:95:9c:08:75:64:ed:e2:
         19:02:94:f3
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIUXiPdYWUfOeFUfXzv0J6oN3PVuxYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTYyMDFlZmQ0YzNkNmFiNmVhYmVhYzg4ZTY2NmQ2NDQ4
ZjRkZWNlN2Y4MmNlYWZlMzgwHhcNMjUwMjI3MTY1ODI2WhcNMjYwMjI2MTcwMzI2
WjAzMTEwLwYDVQQDEyhCMEQyRDk5RTI2NzQyNTlGOUFEMTkzRDEyRkIwMDQ0QjJC
MjUwRjFDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvW9AxEAxv3Q
lZEhkVfXCtW6P40s+RkL1jtkfA6QyKPoTWw4tsBRmyI24ZiVaw71T3OWyyiyAtlV
UDdVVPp88K/raOHKz1bkE06p/lJ8Ny9TIPBpQ6Ga9ckiyebVpQNM+cuTmJag4L3j
1Khd3s6hkab/XSTtFiKgjQfUug5ZY6hMlHkz586F58vUnQ2cDCuC2Ij6YAnkgTbR
mymXwNf2DyrxImY8642CMHAivArdv+/6sc+2vZ7iz3HDi0Mn/P7VWDP+xctQrJUi
Tu9Rekz7lyph0WaZmsFtBS9iwb+R12ptskUYuEoFl5XdGpTopEoWTOe9D74BHUCD
vEo6Bh1wCQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFLDS2Z4mdCWfmtGT0S+wBEsr
JQ8cMB8GA1UdIwQYMBaAFMaItZ5CLXfpMqxRhuy/kUmRY8DLMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzZhYjk2ZTdhNjEzMDQ5OGFhOTgxM2Q3ZWU1YmJlZDMxLzEv
QzY4OEI1OUU0MjJENzdFOTMyQUM1MTg2RUNCRjkxNDk5MTYzQzBDQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzQ2YzA3ZTc2LTY2ZDgtNDhkNy04MjZhLTg1ZGUyOWM2NmEyMi9hNjIw
MWVmZDRjM2Q2YWI2ZWFiZWFjODhlNjY2ZDY0NDhmNGRlY2U3ZjgyY2VhZmUzOC5j
ZXIwgZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzZhYjk2ZTdhNjEzMDQ5OGFhOTgxM2Q3
ZWU1YmJlZDMxLzEvMzIzMzJlMzEzNTMwMmUzODJlMzAyZjMyMzIyZDMyMzQyMDNk
M2UyMDM5MzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAheWCDANBgkqhkiG9w0BAQsFAAOCAQEAgnZE
bVxdzUVCOHxzq54gGjtnzZnjCX5BODcZFza1lYbUOENWDPZJusYziDIS7YiNZeJk
3f5Z99+o7MTK1/tYM4E8r4XVyijjuhJ0DmApsNST3cd0XzZcKmaeQkAjCyNQcCBA
rOC468wsKQJsq7x+QaLeCOrZTs0aWmevQJ1IdC1Rwhk6CAAC32lQXep8cmA2P49c
kWMy8Tq8cNEd69abk2wH9T0fCZPfNUZaCL8Ylj7IVCFGOpezga9SYSINP/OCfVfQ
C2UDLg+WdgesL9f0hRCzu9McLfaiIyQ8pEdaqzm6ois/eSIZ8NjGOOiYH+aujRX8
dJeVnAh1ZO3iGQKU8w==
-----END CERTIFICATE-----