Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/05e5aa9a-5d65-300c-856e-c5ad26ad319b.roa
File:                     05e5aa9a-5d65-300c-856e-c5ad26ad319b.roa (raw, json)
Hash identifier:          hVmrWvJM0L2RtgXkjnvc4afElB6X+vhl7vd2FWIy9VY=
Subject key identifier:   01:BA:41:30:CB:F9:CA:06:24:78:2B:A9:1B:83:86:16:B4:63:E9:BF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C95AE518BF3E6DF84EC3DE900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/05e5aa9a-5d65-300c-856e-c5ad26ad319b.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.135.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:95:ae:51:8b:f3:e6:df:84:ec:3d:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=0a15c937-4658-4d0e-85d1-c6ae453d04e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1e:b3:90:69:22:da:1b:b8:39:35:c1:75:57:
                    ef:7e:37:1f:20:3e:9f:d3:b4:9c:81:69:63:df:b8:
                    2c:3a:1e:51:aa:cd:61:07:4a:8c:d4:22:db:f0:10:
                    98:d5:61:10:30:3d:7b:31:3b:f6:45:bf:37:21:31:
                    df:39:7e:20:0b:8b:d4:58:38:34:a9:d0:da:fa:59:
                    df:1e:33:d5:09:55:35:be:0f:61:1d:c1:ad:5e:b1:
                    db:4f:5b:f1:2e:56:9a:aa:03:a7:66:ea:f0:ca:b9:
                    8f:08:95:d3:16:cb:17:ed:fc:3b:9d:8e:89:6a:01:
                    9f:d8:bf:d4:04:27:0b:47:e1:8b:1d:d4:ca:05:71:
                    72:dd:3f:35:06:ca:c3:d0:82:8c:7b:34:9c:65:bb:
                    fa:ee:a5:23:45:2c:ce:b1:68:c1:e8:c4:20:75:90:
                    f7:4e:de:72:50:97:4c:2a:74:0d:57:a3:22:02:4d:
                    98:32:79:f4:89:19:3f:8b:9b:db:0b:8c:b8:e0:60:
                    1b:1b:4d:48:86:a0:27:cd:dc:46:ba:59:c8:28:56:
                    a8:54:23:1c:64:a5:15:e8:86:33:02:d0:a8:37:b0:
                    7c:1e:1f:09:f3:d7:53:a0:f1:8e:d2:8c:96:e6:08:
                    7e:38:00:39:58:82:fd:67:df:14:9c:c0:78:c0:00:
                    1e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BA:41:30:CB:F9:CA:06:24:78:2B:A9:1B:83:86:16:B4:63:E9:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/05e5aa9a-5d65-300c-856e-c5ad26ad319b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.135.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:ab:17:20:21:9d:44:6c:d1:5a:79:07:dd:ec:7a:c3:4c:73:
         1a:37:44:9a:0e:87:dd:90:c1:71:ae:f5:15:b3:f6:6f:ca:8c:
         8b:92:60:02:3c:c4:56:0b:b9:ec:bd:44:ab:d4:b2:f0:01:b4:
         35:58:cd:db:c3:41:2d:dd:19:90:b9:b9:bb:ce:d6:11:06:9f:
         07:be:92:c2:94:5b:0b:2c:27:8e:49:df:40:72:31:44:df:81:
         44:46:9c:3e:04:d4:d8:34:fc:e6:ee:9b:76:40:32:59:99:e0:
         23:d0:98:57:2b:2e:87:cc:78:8d:63:06:7f:86:8a:15:4b:0a:
         4b:1f:08:1c:2a:e8:75:f9:25:2d:f1:35:da:7a:a1:a9:7f:42:
         51:39:9f:9b:93:bd:8a:2a:c7:b8:91:f0:2c:fc:88:4f:2d:e0:
         9f:a1:dd:0e:14:99:99:80:0d:18:a1:17:ef:98:a3:bc:68:4e:
         1e:af:a6:88:a3:70:ca:30:22:2c:3c:b3:1d:77:c6:fb:b3:a3:
         c1:30:30:62:44:d0:7a:6b:7b:4d:1f:b3:d1:26:2f:ce:56:62:
         15:89:55:86:8d:4f:bb:a6:71:5d:4c:00:19:f2:1c:d1:d1:73:
         77:a4:83:8b:f4:3e:6b:af:90:f3:45:b0:9b:a7:2c:29:bf:04:
         4f:95:c7:34
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDyVrlGL8+bfhOw96QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDExNDA1MDAwMFoXDTIyMDIxODA1MDAwMFowLzEtMCsGA1UEAxMk
MGExNWM5MzctNDY1OC00ZDBlLTg1ZDEtYzZhZTQ1M2QwNGU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx6zkGki2hu4OTXBdVfvfjcfID6f07ScgWlj
37gsOh5Rqs1hB0qM1CLb8BCY1WEQMD17MTv2Rb83ITHfOX4gC4vUWDg0qdDa+lnf
HjPVCVU1vg9hHcGtXrHbT1vxLlaaqgOnZurwyrmPCJXTFssX7fw7nY6JagGf2L/U
BCcLR+GLHdTKBXFy3T81BsrD0IKMezScZbv67qUjRSzOsWjB6MQgdZD3Tt5yUJdM
KnQNV6MiAk2YMnn0iRk/i5vbC4y44GAbG01IhqAnzdxGulnIKFaoVCMcZKUV6IYz
AtCoN7B8Hh8J89dToPGO0oyW5gh+OAA5WIL9Z98UnMB4wAAecQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAG6QTDL+coGJHgrqRuDhha0Y+m/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMDVlNWFhOWEtNWQ2NS0z
MDBjLTg1NmUtYzVhZDI2YWQzMTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEIcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATasXICGdRGzRWnkH3ex6w0xzGjdEmg6H3ZDBca71FbP2b8qMi5JgAjzE
Vgu57L1Eq9Sy8AG0NVjN28NBLd0ZkLm5u87WEQafB76SwpRbCywnjknfQHIxRN+B
REacPgTU2DT85u6bdkAyWZngI9CYVysuh8x4jWMGf4aKFUsKSx8IHCrodfklLfE1
2nqhqX9CUTmfm5O9iirHuJHwLPyITy3gn6HdDhSZmYANGKEX75ijvGhOHq+miKNw
yjAiLDyzHXfG+7OjwTAwYkTQemt7TR+z0SYvzlZiFYlVho1Pu6ZxXUwAGfIc0dFz
d6SDi/Q+a6+Q80Wwm6csKb8ET5XHNA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:32 2025 by rpki-client