Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/035949ce-5f09-332a-a603-90a6794b2649.roa
File:                     035949ce-5f09-332a-a603-90a6794b2649.roa (raw, json)
Hash identifier:          9JTwvFwLgkqZOrYgV16xrUz7a6zUSw1t/rfZQBrK+os=
Subject key identifier:   3B:0E:38:C5:A3:5E:14:09:B4:3B:37:0A:5C:57:88:A6:7A:40:9A:B5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EC7B0D9E992149536E338C380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/035949ce-5f09-332a-a603-90a6794b2649.roa
Signing time:             Tue 02 Aug 2022 12:00:00 +0000
ROA not before:           Tue 02 Aug 2022 12:00:00 +0000
ROA not after:            Wed 07 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        128.81.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:c7:b0:d9:e9:92:14:95:36:e3:38:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug  2 12:00:00 2022 GMT
            Not After : Sep  7 04:00:00 2022 GMT
        Subject: CN=8d8bb86c-5efa-4853-8c09-2a2f3d7749cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2c:0f:25:66:a5:18:9d:9e:5c:78:fc:14:cd:
                    a6:56:d2:17:02:ae:fe:31:cd:0f:2c:8a:ce:8d:60:
                    1d:b7:49:76:e6:72:51:cb:d2:e9:b7:ca:01:98:00:
                    79:b1:6a:23:59:d6:db:55:e0:a0:71:87:c1:cb:6d:
                    ee:78:c6:de:db:bc:ff:02:4c:c1:03:59:26:75:04:
                    1e:d4:6d:7b:6b:ef:4d:18:4e:d4:06:15:e6:58:5b:
                    80:2f:ef:4d:77:71:23:e0:bd:d1:00:5d:5e:93:90:
                    f0:10:34:05:b9:f7:ac:8a:04:f3:f9:36:a3:74:33:
                    bd:91:4f:c7:ce:5d:b7:75:45:c3:7e:50:bb:06:e7:
                    35:34:d5:e0:a5:6f:c1:b6:35:c2:8f:7f:33:d9:cd:
                    7d:c8:ca:f4:c4:74:f2:42:02:e5:9e:d4:7b:85:0c:
                    8c:15:d1:b0:e1:19:c8:fb:46:7a:e8:0d:28:fc:80:
                    1f:b9:4b:51:77:08:14:9b:28:1c:ab:b8:81:97:6d:
                    6d:28:a0:97:24:04:35:d3:15:58:b4:f5:9c:2b:44:
                    f8:a9:e9:ce:e7:84:ce:6a:26:97:f3:75:b7:72:59:
                    6d:d7:59:d1:d3:8f:55:b7:fb:8d:3a:dc:9d:34:53:
                    c2:76:aa:50:1d:4e:43:da:59:03:67:58:63:d3:b9:
                    87:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0E:38:C5:A3:5E:14:09:B4:3B:37:0A:5C:57:88:A6:7A:40:9A:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/035949ce-5f09-332a-a603-90a6794b2649.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.81.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:c7:00:1c:63:b2:8d:7c:27:e0:19:bc:39:5e:c5:1b:cf:cf:
         e6:47:0e:88:33:8d:f9:8b:c1:45:b6:e4:e9:6e:a5:9a:d8:bd:
         f0:8b:d3:93:d2:2c:46:e7:25:14:79:96:93:b0:0e:55:28:a2:
         d3:7e:73:26:e6:a0:17:de:1a:a8:04:56:d0:6d:37:4a:3d:b4:
         45:7f:f1:02:1c:58:7a:40:cb:56:f5:0a:9f:c9:1b:f5:11:62:
         05:8e:5c:c3:95:cb:23:e8:3a:30:17:4b:0a:83:84:68:dc:29:
         19:94:96:e8:df:99:45:15:93:3d:0e:d6:64:f6:8f:9a:2e:7a:
         ca:ea:bc:27:52:10:7d:45:e9:ee:38:a9:2c:57:69:4e:f4:37:
         41:34:27:c5:6d:c6:bd:b0:e8:df:62:f2:36:96:a3:84:ab:0e:
         70:cd:48:ed:35:37:67:9c:ee:63:53:3c:23:1f:db:15:78:33:
         88:72:de:ad:e5:31:4a:6b:6e:ee:08:cb:97:35:45:b7:27:d2:
         c6:19:47:df:16:8d:22:0b:60:e1:01:55:f6:9a:98:c8:05:fa:
         e4:94:bb:ff:c8:fe:f6:97:f8:78:89:4d:fa:01:4f:a9:33:d9:
         26:f8:f8:db:8b:99:68:12:fa:80:a0:8e:5b:0b:0d:5c:a4:ab:
         7b:0e:c4:b4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD7HsNnpkhSVNuM4w4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDgwMjEyMDAwMFoXDTIyMDkwNzA0MDAwMFowLzEtMCsGA1UEAxMk
OGQ4YmI4NmMtNWVmYS00ODUzLThjMDktMmEyZjNkNzc0OWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiwPJWalGJ2eXHj8FM2mVtIXAq7+Mc0PLIrO
jWAdt0l25nJRy9Lpt8oBmAB5sWojWdbbVeCgcYfBy23ueMbe27z/AkzBA1kmdQQe
1G17a+9NGE7UBhXmWFuAL+9Nd3Ej4L3RAF1ek5DwEDQFufesigTz+TajdDO9kU/H
zl23dUXDflC7Buc1NNXgpW/BtjXCj38z2c19yMr0xHTyQgLlntR7hQyMFdGw4RnI
+0Z66A0o/IAfuUtRdwgUmygcq7iBl21tKKCXJAQ10xVYtPWcK0T4qenO54TOaiaX
83W3cllt11nR049Vt/uNOtydNFPCdqpQHU5D2lkDZ1hj07mHowIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDsOOMWjXhQJtDs3ClxXiKZ6QJq1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMDM1OTQ5Y2UtNWYwOS0z
MzJhLWE2MDMtOTBhNjc5NGIyNjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgFEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEADMcAHGOyjXwn4Bm8OV7FG8/P5kcOiDON+YvBRbbk6W6lmti98IvTk9Is
RuclFHmWk7AOVSii035zJuagF94aqARW0G03Sj20RX/xAhxYekDLVvUKn8kb9RFi
BY5cw5XLI+g6MBdLCoOEaNwpGZSW6N+ZRRWTPQ7WZPaPmi56yuq8J1IQfUXp7jip
LFdpTvQ3QTQnxW3GvbDo32LyNpajhKsOcM1I7TU3Z5zuY1M8Ix/bFXgziHLereUx
Smtu7gjLlzVFtyfSxhlH3xaNIgtg4QFV9pqYyAX65JS7/8j+9pf4eIlN+gFPqTPZ
Jvj424uZaBL6gKCOWwsNXKSrew7EtA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:14:52 2025 by rpki-client