Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/06c2ac1e-fd3f-334a-aec2-ec77c27c26a9.roa
File:                     06c2ac1e-fd3f-334a-aec2-ec77c27c26a9.roa (raw, json)
Hash identifier:          3E6vQP9RFg9ba44d3n4MaDzEVmCmcEbevvcAYhBQJS8=
Subject key identifier:   F5:38:D8:F4:54:D6:91:A8:B6:3B:AA:97:D9:E0:FD:61:8A:7B:A5:60
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E1E5AEF2169C2F59F2CAB6600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/06c2ac1e-fd3f-334a-aec2-ec77c27c26a9.roa
Signing time:             Thu 02 Jun 2022 12:00:00 +0000
ROA not before:           Thu 02 Jun 2022 12:00:00 +0000
ROA not after:            Fri 08 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        100.20.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1e:5a:ef:21:69:c2:f5:9f:2c:ab:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun  2 12:00:00 2022 GMT
            Not After : Jul  8 04:00:00 2022 GMT
        Subject: CN=82670d79-c8b3-42fb-9a50-dec713b1ed30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:56:1d:07:da:8b:71:9b:3e:1e:a9:72:c7:0e:
                    e3:c6:25:a6:07:2c:d6:d2:c3:78:cd:e9:ad:a6:c6:
                    91:bb:64:f2:a3:53:4e:10:36:37:fe:a5:59:07:2d:
                    71:f7:26:f5:dd:4c:81:29:fc:e7:1f:6a:1e:42:b1:
                    8d:cc:a9:0a:8a:9a:31:c3:4c:08:cc:20:2b:04:a6:
                    fb:bf:99:93:b3:07:79:e4:c6:cf:8f:41:09:c0:6a:
                    b8:62:76:aa:e5:c5:f4:bf:64:d9:1e:cd:e5:01:9c:
                    82:0c:36:34:52:90:bb:09:b6:04:e2:14:77:df:7a:
                    08:f9:75:a6:99:d3:fb:fa:16:a5:f4:08:a4:ad:8d:
                    b5:fc:81:aa:ee:44:43:93:8f:8c:d8:54:99:5e:b2:
                    c0:fc:35:fb:0f:a5:16:aa:45:49:60:3f:e4:21:db:
                    58:41:10:fd:99:ad:b8:38:ab:a5:a5:f2:b4:6a:62:
                    63:35:52:db:fd:f9:f7:57:37:95:22:a9:11:40:12:
                    db:d0:c9:4a:33:6b:42:24:4a:04:23:c4:f2:e9:67:
                    8d:15:d3:52:be:5d:2d:1a:42:1f:17:cf:d0:25:cf:
                    b8:d8:1d:b6:48:a6:a4:35:9c:33:e1:d7:4b:24:29:
                    aa:2e:60:02:08:d6:1b:3b:69:ef:f6:e9:fc:d9:43:
                    a3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:38:D8:F4:54:D6:91:A8:B6:3B:AA:97:D9:E0:FD:61:8A:7B:A5:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/06c2ac1e-fd3f-334a-aec2-ec77c27c26a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.20.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ff:b3:3b:b7:93:13:55:79:19:59:ae:e8:07:2b:eb:9b:01:
         36:57:ac:ef:7e:61:e8:71:49:70:e1:c9:3b:78:e9:f8:e5:8e:
         54:8b:c5:47:cd:53:15:9a:ef:9b:1e:1f:b0:56:89:77:9b:e6:
         c6:b2:be:41:9b:19:7a:34:00:98:b7:83:2e:1f:57:0b:76:fb:
         ef:ac:ad:73:31:6f:46:51:88:c6:97:17:88:ce:18:a1:63:ec:
         40:cb:b0:56:cf:ee:b3:2c:90:f1:7c:8c:07:fe:cb:cf:50:e9:
         09:54:93:ad:bf:0b:3b:49:62:05:ee:82:b5:68:a3:8c:de:01:
         9f:45:85:12:4a:4f:7b:53:9f:e2:fb:39:0c:6f:bd:2c:57:3a:
         af:11:59:0f:8c:91:d4:18:50:0a:61:c7:40:86:42:66:0b:e5:
         11:d6:4a:1a:f9:10:91:2a:52:bf:a6:97:e4:72:1b:de:58:61:
         80:92:7d:2e:22:d4:e9:46:47:ae:ae:10:4d:5a:39:13:84:61:
         53:bf:e0:ac:2b:11:b6:89:3b:5a:39:3e:1e:ca:64:ad:bb:08:
         83:a4:de:c2:4f:c6:2f:12:83:a6:cc:c7:1e:3a:47:2b:f8:47:
         23:69:ac:b3:8c:18:f1:4a:6a:cf:20:5c:bf:6f:62:49:ff:91:
         20:1e:a9:3e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4eWu8hacL1nyyrZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYwMjEyMDAwMFoXDTIyMDcwODA0MDAwMFowLzEtMCsGA1UEAxMk
ODI2NzBkNzktYzhiMy00MmZiLTlhNTAtZGVjNzEzYjFlZDMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVYdB9qLcZs+Hqlyxw7jxiWmByzW0sN4zemt
psaRu2Tyo1NOEDY3/qVZBy1x9yb13UyBKfznH2oeQrGNzKkKipoxw0wIzCArBKb7
v5mTswd55MbPj0EJwGq4Ynaq5cX0v2TZHs3lAZyCDDY0UpC7CbYE4hR333oI+XWm
mdP7+hal9AikrY21/IGq7kRDk4+M2FSZXrLA/DX7D6UWqkVJYD/kIdtYQRD9ma24
OKulpfK0amJjNVLb/fn3VzeVIqkRQBLb0MlKM2tCJEoEI8Ty6WeNFdNSvl0tGkIf
F8/QJc+42B22SKakNZwz4ddLJCmqLmACCNYbO2nv9un82UOjMwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPU42PRU1pGotjuql9ng/WGKe6VgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMDZjMmFjMWUtZmQzZi0z
MzRhLWFlYzItZWM3N2MyN2MyNmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCZBQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEABP+zO7eTE1V5GVmu6Acr65sBNles735h6HFJcOHJO3jp+OWOVIvFR81T
FZrvmx4fsFaJd5vmxrK+QZsZejQAmLeDLh9XC3b776ytczFvRlGIxpcXiM4YoWPs
QMuwVs/usyyQ8XyMB/7Lz1DpCVSTrb8LO0liBe6CtWijjN4Bn0WFEkpPe1Of4vs5
DG+9LFc6rxFZD4yR1BhQCmHHQIZCZgvlEdZKGvkQkSpSv6aX5HIb3lhhgJJ9LiLU
6UZHrq4QTVo5E4RhU7/grCsRtok7Wjk+HspkrbsIg6Tewk/GLxKDpszHHjpHK/hH
I2mss4wY8UpqzyBcv29iSf+RIB6pPg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:03:34 2025 by rpki-client