Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4/fcb80d6b-b948-3c12-9a8f-59561151ac02.roa
File:                     fcb80d6b-b948-3c12-9a8f-59561151ac02.roa (raw, json)
Hash identifier:          L8umGd2KPTa+OxmmPOMrlWumnhubz1tQpEb84kgUV2M=
Subject key identifier:   8A:5C:C1:56:F5:41:5C:9F:8D:97:03:73:00:F1:F7:1E:61:9E:7A:96
Certificate issuer:       /CN=37a572e9-4783-4234-bb28-e490155ccaf4
Certificate serial:       010D0C9F4328584965E9730DBDFD61272CF1D1A0
Authority key identifier: 67:A1:74:65:BB:4D:0B:AF:AA:CA:22:5B:F3:64:0B:AE:1C:86:08:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4/fcb80d6b-b948-3c12-9a8f-59561151ac02.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     400192
IP address blocks:        23.161.56.0/24 maxlen: 24
                          2606:b140::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:73:0d:bd:fd:61:27:2c:f1:d1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a572e9-4783-4234-bb28-e490155ccaf4
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=1ccd7e54-cb51-4a68-8b5f-97af34a38d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f9:fb:be:7c:00:b5:21:a8:90:78:ee:76:89:
                    d3:b2:41:04:d8:46:a4:16:80:07:cd:0b:9f:02:11:
                    fe:4a:b0:f8:cc:16:db:aa:36:d4:e9:be:e9:54:09:
                    db:89:82:91:26:37:8f:3f:e7:6a:9b:8d:34:19:ee:
                    14:ee:b9:28:f9:d3:03:fa:df:f8:8e:bb:f9:70:bd:
                    8f:0d:9e:67:e7:f0:53:70:2f:6f:52:cd:a6:05:fb:
                    a0:01:73:68:23:ab:4e:8a:d5:93:de:e3:b4:4d:57:
                    61:8c:34:24:bf:04:f2:e2:cb:1d:89:21:0b:63:54:
                    f4:fa:16:4d:49:8b:c6:fa:8b:67:80:74:43:37:f4:
                    74:0f:d5:12:90:85:af:57:60:4d:a9:88:4c:76:16:
                    9d:d9:5f:51:cc:32:ce:fd:71:68:40:bb:c6:49:61:
                    3c:6f:c8:43:6a:09:e3:dc:51:ab:30:a6:cd:92:9e:
                    f4:f2:48:ea:70:d2:09:18:96:ca:35:c4:8f:52:9f:
                    e0:39:ff:13:d6:9a:2e:a0:88:7a:ea:76:19:6f:47:
                    65:94:dc:8c:cd:ed:02:ff:25:fd:f8:ba:17:d9:90:
                    b0:30:33:93:5a:3d:96:96:55:97:c1:5b:8e:7a:c1:
                    e7:1a:66:46:ad:21:21:5d:97:b0:a9:79:7c:ea:b5:
                    80:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5C:C1:56:F5:41:5C:9F:8D:97:03:73:00:F1:F7:1E:61:9E:7A:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4/fcb80d6b-b948-3c12-9a8f-59561151ac02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4/37a572e9-4783-4234-bb28-e490155ccaf4.crl

            X509v3 Authority Key Identifier:
                keyid:67:A1:74:65:BB:4D:0B:AF:AA:CA:22:5B:F3:64:0B:AE:1C:86:08:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.56.0/24
                IPv6:
                  2606:b140::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:39:64:53:bf:ab:04:99:83:d6:85:7e:59:31:da:e4:05:e3:
         62:58:d5:01:3e:69:67:0e:53:f9:ba:8b:e3:7f:e6:49:4f:95:
         7b:10:81:71:de:93:44:fa:5e:5b:8e:d2:2b:b1:72:05:a7:76:
         49:5c:5c:ac:83:a0:2e:b8:57:79:d6:69:a2:7e:e5:28:73:8a:
         96:67:60:01:52:25:e1:e2:5a:28:a6:36:96:90:34:d7:2a:36:
         9d:b2:67:ca:09:0c:3e:71:07:2b:e0:69:97:76:d2:6f:18:f8:
         8a:ec:5b:ba:91:bc:57:1d:8b:03:f2:f5:9d:11:cd:15:e4:53:
         e4:04:8a:c9:03:c9:07:a5:2b:cc:25:8e:58:13:dd:d5:66:a6:
         ef:43:1c:eb:43:6b:54:c0:14:fe:57:e2:8e:2c:7c:7a:0c:be:
         50:c3:41:89:ca:f0:14:1f:fd:5b:20:5f:3d:91:78:22:22:5c:
         19:dc:15:d1:b8:6d:b3:9f:7b:04:7f:6b:f7:32:ef:a4:19:d2:
         13:9b:d7:1f:f6:a5:74:61:54:4b:aa:ec:67:e8:3a:d8:94:3d:
         06:18:83:04:13:4e:29:bd:62:9f:10:92:54:47:fa:6a:a3:b1:
         8f:5a:0b:28:aa:38:93:98:07:d0:14:31:a5:b6:eb:e0:4c:eb:
         d3:5f:b7:b1
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEll6XMNvf1hJyzx0aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzdhNTcyZTktNDc4My00MjM0LWJiMjgtZTQ5MDE1NWNj
YWY0MB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk
MWNjZDdlNTQtY2I1MS00YTY4LThiNWYtOTdhZjM0YTM4ZDk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfn7vnwAtSGokHjudonTskEE2EakFoAHzQuf
AhH+SrD4zBbbqjbU6b7pVAnbiYKRJjePP+dqm400Ge4U7rko+dMD+t/4jrv5cL2P
DZ5n5/BTcC9vUs2mBfugAXNoI6tOitWT3uO0TVdhjDQkvwTy4ssdiSELY1T0+hZN
SYvG+otngHRDN/R0D9USkIWvV2BNqYhMdhad2V9RzDLO/XFoQLvGSWE8b8hDagnj
3FGrMKbNkp708kjqcNIJGJbKNcSPUp/gOf8T1pouoIh66nYZb0dllNyMze0C/yX9
+LoX2ZCwMDOTWj2WllWXwVuOesHnGmZGrSEhXZewqXl86rWAcQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFIpcwVb1QVyfjZcDcwDx9x5hnnqWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zN2E1
NzJlOS00NzgzLTQyMzQtYmIyOC1lNDkwMTU1Y2NhZjQvZmNiODBkNmItYjk0OC0z
YzEyLTlhOGYtNTk1NjExNTFhYzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzdhNTcyZTktNDc4My00MjM0LWJi
MjgtZTQ5MDE1NWNjYWY0LzM3YTU3MmU5LTQ3ODMtNDIzNC1iYjI4LWU0OTAxNTVj
Y2FmNC5jcmwwHwYDVR0jBBgwFoAUZ6F0ZbtNC6+qyiJb82QLrhyGCGgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zN2E1NzJlOS00NzgzLTQyMzQtYmIyOC1lNDkw
MTU1Y2NhZjQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF6E4MA0E
AgACMAcDBQAmBrFAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAHg5ZFO/qwSZg9aFflkx2uQF42JY1QE+aWcO
U/m6i+N/5klPlXsQgXHek0T6XluO0iuxcgWndklcXKyDoC64V3nWaaJ+5ShzipZn
YAFSJeHiWiimNpaQNNcqNp2yZ8oJDD5xByvgaZd20m8Y+IrsW7qRvFcdiwPy9Z0R
zRXkU+QEiskDyQelK8wljlgT3dVmpu9DHOtDa1TAFP5X4o4sfHoMvlDDQYnK8BQf
/VsgXz2ReCIiXBncFdG4bbOfewR/a/cy76QZ0hOb1x/2pXRhVEuq7GfoOtiUPQYY
gwQTTim9Yp8QklRH+mqjsY9aCyiqOJOYB9AUMaW26+BM69Nft7E=
-----END CERTIFICATE-----