Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c4e3d42c-dcc9-4388-9b3d-a69d1bf0d2dd/c6977191-7d28-31a9-be34-c171d32f6fe7.roa
File:                     c6977191-7d28-31a9-be34-c171d32f6fe7.roa (raw, json)
Hash identifier:          ICt72zKGSz5mS/qRjHRo4P7g3h010afFa2zoGM4tQ0E=
Subject key identifier:   22:7D:A6:43:48:71:63:5E:7E:B4:35:6E:92:A5:40:20:29:01:E0:32
Certificate issuer:       /CN=c4e3d42c-dcc9-4388-9b3d-a69d1bf0d2dd
Certificate serial:       010D0C9F43285843A650111F125B54700AE12F80
Authority key identifier: C4:59:A6:8F:10:6E:BB:7F:D6:78:E7:9A:83:0E:85:F9:31:AA:1A:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c4e3d42c-dcc9-4388-9b3d-a69d1bf0d2dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c4e3d42c-dcc9-4388-9b3d-a69d1bf0d2dd/c6977191-7d28-31a9-be34-c171d32f6fe7.roa
Signing time:             Mon 23 Oct 2023 21:57:43 +0000
ROA not before:           Mon 23 Oct 2023 21:57:43 +0000
ROA not after:            Sun 21 Jan 2024 22:57:43 +0000
asID:                     49195
IP address blocks:        23.164.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:a6:50:11:1f:12:5b:54:70:0a:e1:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4e3d42c-dcc9-4388-9b3d-a69d1bf0d2dd
        Validity
            Not Before: Oct 23 21:57:43 2023 GMT
            Not After : Jan 21 22:57:43 2024 GMT
        Subject: CN=b607cbc0-5780-4a36-b1e8-f7df05411ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c7:98:4a:a0:75:3e:5a:03:9e:0f:f7:c6:78:
                    af:16:9c:9e:34:d2:08:33:6e:0b:b3:57:96:5d:dd:
                    57:71:b8:58:bd:ae:21:29:9f:0e:12:44:39:11:97:
                    df:38:5a:d4:70:a0:3c:fb:4a:1d:f4:ab:25:b1:57:
                    c9:b1:84:a6:2d:5a:23:68:75:a8:23:d6:e4:3f:61:
                    8a:ca:a8:c4:44:98:55:77:01:c8:38:95:d9:ed:3b:
                    3a:84:44:de:12:5c:9c:9e:6c:6f:a0:2e:67:4c:45:
                    be:58:29:2f:50:c6:a3:ac:33:5b:32:88:08:ae:fa:
                    41:d5:12:98:b7:02:66:44:2d:0d:69:40:67:86:8a:
                    06:dd:56:34:f4:e9:5e:98:c8:82:5a:a3:31:1b:04:
                    f3:16:30:91:c0:93:97:36:30:70:00:42:c3:e2:21:
                    d8:82:d6:2e:bf:28:b2:0a:d9:cf:0e:3e:50:7a:7c:
                    a3:46:ea:82:1e:cd:da:a0:e2:62:b3:e6:4a:45:36:
                    5b:89:5b:ba:34:ca:0a:94:d8:a5:07:ec:52:c3:ac:
                    cf:1f:9b:fc:d4:81:26:66:fa:c0:d6:49:6d:e3:93:
                    10:4b:a1:a6:76:ca:1b:82:14:24:ee:86:44:6b:77:
                    98:34:86:b2:6b:b0:5b:27:64:0c:5e:c8:0e:28:52:
                    6c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7D:A6:43:48:71:63:5E:7E:B4:35:6E:92:A5:40:20:29:01:E0:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c4e3d42c-dcc9-4388-9b3d-a69d1bf0d2dd/c6977191-7d28-31a9-be34-c171d32f6fe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c4e3d42c-dcc9-4388-9b3d-a69d1bf0d2dd/c4e3d42c-dcc9-4388-9b3d-a69d1bf0d2dd.crl

            X509v3 Authority Key Identifier:
                keyid:C4:59:A6:8F:10:6E:BB:7F:D6:78:E7:9A:83:0E:85:F9:31:AA:1A:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c4e3d42c-dcc9-4388-9b3d-a69d1bf0d2dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:0b:6d:91:2d:33:11:8b:b3:61:a1:9d:9b:af:f2:eb:3c:da:
         33:30:78:f1:d7:aa:f4:fe:e1:cc:dc:af:da:0f:9b:4d:04:53:
         08:7b:7c:f9:a9:c3:15:74:e1:46:43:f1:ce:66:24:f3:89:d3:
         7d:7a:07:10:9e:84:d8:0a:83:bb:30:d1:82:4d:80:8d:5e:40:
         1c:40:32:8e:99:cd:19:12:96:20:4d:4b:26:74:9f:4b:b5:9c:
         b1:b5:21:bf:1d:56:e7:df:e5:dd:9d:a6:72:6c:60:fa:b5:e0:
         37:9d:5c:89:e0:ca:aa:87:00:e3:73:33:eb:2e:b6:dd:97:53:
         11:40:cb:29:5b:eb:a4:41:c3:5b:d5:7e:ef:a1:5d:66:24:34:
         41:ed:1f:6d:bf:8f:75:f6:85:f9:25:7e:fd:a6:3c:12:ca:0c:
         33:f4:39:4d:88:e6:80:7c:06:bf:b7:7f:6a:9c:d5:c0:4d:b3:
         67:6c:57:1d:51:ee:46:cc:05:97:bd:c5:e4:ff:0f:7b:54:8b:
         ab:6e:b9:91:61:a2:ea:17:bd:99:91:ae:6c:57:34:34:1e:9d:
         fc:9e:5e:92:99:ec:88:ec:c1:db:0e:fc:4f:2b:b0:ba:9e:b8:
         6a:71:29:b6:4a:62:dc:d2:06:6a:99:0e:60:c6:35:54:07:47:
         0f:a2:84:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOmUBEfEltUcArhL4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzRlM2Q0MmMtZGNjOS00Mzg4LTliM2QtYTY5ZDFiZjBk
MmRkMB4XDTIzMTAyMzIxNTc0M1oXDTI0MDEyMTIyNTc0M1owLzEtMCsGA1UEAxMk
YjYwN2NiYzAtNTc4MC00YTM2LWIxZTgtZjdkZjA1NDExZmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8eYSqB1PloDng/3xnivFpyeNNIIM24Ls1eW
Xd1XcbhYva4hKZ8OEkQ5EZffOFrUcKA8+0od9KslsVfJsYSmLVojaHWoI9bkP2GK
yqjERJhVdwHIOJXZ7Ts6hETeElycnmxvoC5nTEW+WCkvUMajrDNbMogIrvpB1RKY
twJmRC0NaUBnhooG3VY09OlemMiCWqMxGwTzFjCRwJOXNjBwAELD4iHYgtYuvyiy
CtnPDj5QenyjRuqCHs3aoOJis+ZKRTZbiVu6NMoKlNilB+xSw6zPH5v81IEmZvrA
1klt45MQS6GmdsobghQk7oZEa3eYNIaya7BbJ2QMXsgOKFJs7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCJ9pkNIcWNefrQ1bpKlQCApAeAyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jNGUz
ZDQyYy1kY2M5LTQzODgtOWIzZC1hNjlkMWJmMGQyZGQvYzY5NzcxOTEtN2QyOC0z
MWE5LWJlMzQtYzE3MWQzMmY2ZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzRlM2Q0MmMtZGNjOS00Mzg4LTli
M2QtYTY5ZDFiZjBkMmRkL2M0ZTNkNDJjLWRjYzktNDM4OC05YjNkLWE2OWQxYmYw
ZDJkZC5jcmwwHwYDVR0jBBgwFoAUxFmmjxBuu3/WeOeagw6F+TGqGoEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jNGUzZDQyYy1kY2M5LTQzODgtOWIzZC1hNjlk
MWJmMGQyZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6RIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABQLbZEtMxGLs2GhnZuv8us82jMwePHXqvT+4czcr9oPm00EUwh7fPmp
wxV04UZD8c5mJPOJ0316BxCehNgKg7sw0YJNgI1eQBxAMo6ZzRkSliBNSyZ0n0u1
nLG1Ib8dVuff5d2dpnJsYPq14DedXIngyqqHAONzM+sutt2XUxFAyylb66RBw1vV
fu+hXWYkNEHtH22/j3X2hfklfv2mPBLKDDP0OU2I5oB8Br+3f2qc1cBNs2dsVx1R
7kbMBZe9xeT/D3tUi6tuuZFhouoXvZmRrmxXNDQenfyeXpKZ7IjswdsO/E8rsLqe
uGpxKbZKYtzSBmqZDmDGNVQHRw+ihEo=
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:09 2024 by rpki-client on console.sobornost.net