Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/01665f62-6857-35b7-95d7-249a850d8627.roa
File:                     01665f62-6857-35b7-95d7-249a850d8627.roa (raw, json)
Hash identifier:          GR5UNJrgNfdnO8rs+q7PsIxrGpZOQTXdFw1scvaZCb0=
Subject key identifier:   5C:0C:E1:18:15:7C:36:71:74:74:53:3F:E1:5E:A4:C8:57:CE:7F:D8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E1CD07D913B76F4D4C8D2C680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/01665f62-6857-35b7-95d7-249a850d8627.roa
Signing time:             Thu 02 Jun 2022 12:00:00 +0000
ROA not before:           Thu 02 Jun 2022 12:00:00 +0000
ROA not after:            Fri 08 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.137.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1c:d0:7d:91:3b:76:f4:d4:c8:d2:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun  2 12:00:00 2022 GMT
            Not After : Jul  8 04:00:00 2022 GMT
        Subject: CN=f20639f1-06c9-423a-869f-8e6aa4255cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d7:ed:dc:13:7d:4a:38:18:f9:d9:92:ce:88:
                    43:49:32:f0:ee:5c:46:bb:a0:db:77:b4:09:e5:02:
                    7f:db:a5:c2:57:49:a4:ff:ad:21:d5:cd:a0:5f:b7:
                    ba:aa:d3:be:93:d9:79:8b:5f:0e:fd:34:c2:d1:cb:
                    84:9f:b4:21:40:42:62:b7:4b:0d:86:cf:2b:4c:79:
                    a5:85:8b:ad:8c:ec:15:fe:7e:fd:ef:82:a4:02:fc:
                    b3:68:8b:8b:4c:dd:25:cf:4b:b1:e2:fe:73:7d:f0:
                    58:80:13:4b:89:5a:be:aa:f2:21:dc:7c:c4:ca:f3:
                    10:40:66:51:2a:6d:94:49:5c:e6:25:06:e0:de:ba:
                    bb:7c:92:2e:7b:6f:bd:7b:20:d6:6e:86:80:d5:c8:
                    04:31:ce:3d:f1:af:5e:bf:11:31:6c:8b:dc:ea:f4:
                    d3:88:35:60:77:cd:22:85:56:f7:50:6f:87:9c:6b:
                    18:c4:b1:82:ad:eb:df:39:87:36:81:dc:b2:57:86:
                    d1:4c:d6:a0:2b:20:07:d3:49:0d:ac:94:86:66:c9:
                    ff:ad:99:66:f1:b4:c4:29:69:51:3d:59:28:0d:6d:
                    d6:04:b9:7e:d7:f4:19:2f:33:77:70:22:52:10:b9:
                    a6:07:d0:63:0c:1b:f7:6b:82:65:7b:a3:73:b7:16:
                    01:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0C:E1:18:15:7C:36:71:74:74:53:3F:E1:5E:A4:C8:57:CE:7F:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/01665f62-6857-35b7-95d7-249a850d8627.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.137.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:c1:dc:e7:f4:e1:ea:d0:2b:fe:2e:be:5e:fb:31:e9:c0:85:
         0b:29:e4:b9:80:5e:22:b0:83:61:1c:09:36:af:3b:b3:09:a8:
         1c:b2:15:4f:b6:53:c7:7f:d7:aa:92:7e:30:ae:1d:27:1c:22:
         1d:f8:9f:6f:6e:ed:db:3e:0f:f6:7e:44:d5:9a:31:ee:e4:8c:
         3d:35:f9:5c:6d:d3:c6:f7:18:36:4c:e4:d8:01:af:2a:37:b6:
         82:c1:78:b2:9b:27:7f:b0:d8:f1:6d:17:b6:36:c2:f3:1c:a7:
         ba:00:ea:8b:f3:ca:3a:25:0c:54:b1:40:a2:1b:37:d4:c6:37:
         1f:80:c6:59:53:97:9f:5e:0e:c1:73:03:74:ad:26:40:69:5e:
         55:2d:b2:cd:89:d3:5c:c8:de:48:a5:01:ea:d3:80:14:64:89:
         0f:40:2c:bf:35:cd:10:81:33:45:58:fb:ce:24:b7:d9:66:b2:
         5d:86:b6:b9:8e:1c:9c:1c:83:74:e9:df:ea:57:ce:43:e3:25:
         5e:39:e3:d7:f1:32:8e:92:91:40:51:f5:6c:71:21:21:30:d5:
         6f:52:70:e7:88:dc:1e:12:3d:d9:ac:42:89:35:1d:d1:8d:dc:
         39:9b:f7:8e:84:bd:81:59:86:5b:d6:66:27:49:11:a0:79:73:
         cf:d1:69:b4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4c0H2RO3b01MjSxoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYwMjEyMDAwMFoXDTIyMDcwODA0MDAwMFowLzEtMCsGA1UEAxMk
ZjIwNjM5ZjEtMDZjOS00MjNhLTg2OWYtOGU2YWE0MjU1Y2RhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNft3BN9SjgY+dmSzohDSTLw7lxGu6Dbd7QJ
5QJ/26XCV0mk/60h1c2gX7e6qtO+k9l5i18O/TTC0cuEn7QhQEJit0sNhs8rTHml
hYutjOwV/n7974KkAvyzaIuLTN0lz0ux4v5zffBYgBNLiVq+qvIh3HzEyvMQQGZR
Km2USVzmJQbg3rq7fJIue2+9eyDWboaA1cgEMc498a9evxExbIvc6vTTiDVgd80i
hVb3UG+HnGsYxLGCrevfOYc2gdyyV4bRTNagKyAH00kNrJSGZsn/rZlm8bTEKWlR
PVkoDW3WBLl+1/QZLzN3cCJSELmmB9BjDBv3a4Jle6NztxYBvQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFwM4RgVfDZxdHRTP+FepMhXzn/YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMDE2NjVmNjItNjg1Ny0z
NWI3LTk1ZDctMjQ5YTg1MGQ4NjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEIkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAcsHc5/Th6tAr/i6+Xvsx6cCFCynkuYBeIrCDYRwJNq87swmoHLIVT7ZT
x3/XqpJ+MK4dJxwiHfifb27t2z4P9n5E1Zox7uSMPTX5XG3TxvcYNkzk2AGvKje2
gsF4spsnf7DY8W0XtjbC8xynugDqi/PKOiUMVLFAohs31MY3H4DGWVOXn14OwXMD
dK0mQGleVS2yzYnTXMjeSKUB6tOAFGSJD0AsvzXNEIEzRVj7ziS32WayXYa2uY4c
nByDdOnf6lfOQ+MlXjnj1/EyjpKRQFH1bHEhITDVb1Jw54jcHhI92axCiTUd0Y3c
OZv3joS9gVmGW9ZmJ0kRoHlzz9FptA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:14 2025 by rpki-client