Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/08058aa8-7552-3cac-ae5a-81b522a4876e.roa
File:                     08058aa8-7552-3cac-ae5a-81b522a4876e.roa (raw, json)
Hash identifier:          VTxq2FgAahHfFJN1SouW+ObX271kRyKf6Xl+85IIEGg=
Subject key identifier:   2C:7F:E5:9D:E2:E9:BA:FD:5F:78:3C:B2:D6:05:D2:F7:ED:42:0B:A5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE4C044F51AC848685FF61F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/08058aa8-7552-3cac-ae5a-81b522a4876e.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        75.3.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e4:c0:44:f5:1a:c8:48:68:5f:f6:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=ee6a42c3-375e-4684-a3a3-42b1d0534007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:70:a8:db:c0:e5:17:e2:f6:68:63:6c:72:87:
                    c1:9f:b2:56:4a:3d:11:60:c6:5f:12:55:b2:ea:32:
                    f1:99:b3:79:2e:ff:26:de:82:2a:84:f8:98:19:72:
                    2c:f6:62:ed:90:de:36:f5:bd:37:66:bb:8a:e8:e5:
                    ed:cc:9f:28:22:36:19:b0:ff:5c:65:c7:ca:bd:a6:
                    d1:bd:e9:28:93:0a:e0:f1:6e:0d:f6:c2:ba:fa:5f:
                    bf:68:b1:48:1e:30:cc:7c:d4:82:7e:be:c7:af:81:
                    ec:60:b1:8e:19:f9:91:03:95:3f:e6:cd:db:cb:fd:
                    b9:dc:af:d7:c0:64:99:98:78:d0:24:d4:db:2d:ff:
                    d8:b7:9a:5e:9e:ed:d5:1c:0d:02:8a:6f:d7:05:c9:
                    08:37:59:5e:6e:75:26:93:6a:59:ea:ef:92:df:ad:
                    cd:89:d7:16:52:7f:80:b8:0b:3d:c3:e6:f6:58:3f:
                    2d:6f:10:5b:94:09:b8:1a:5b:d3:e0:ec:e7:7b:6a:
                    0e:77:72:63:ae:bf:1b:41:e6:b8:71:97:cb:c7:31:
                    7a:da:49:0a:28:2c:b5:93:57:93:08:48:01:93:c2:
                    84:21:31:b5:67:48:e4:92:9a:28:dd:dc:03:dc:78:
                    35:1b:23:16:0d:74:12:9d:a7:5e:c4:f4:d2:d9:8b:
                    26:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7F:E5:9D:E2:E9:BA:FD:5F:78:3C:B2:D6:05:D2:F7:ED:42:0B:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/08058aa8-7552-3cac-ae5a-81b522a4876e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.3.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:79:0d:de:8d:84:1c:67:31:cf:36:6b:2b:1f:e1:e6:92:85:
         31:59:ed:43:1b:99:06:b9:b0:65:81:c0:be:5e:aa:25:cb:1e:
         ea:1f:cb:48:90:7d:f5:dd:ce:2f:7d:81:7f:cb:68:cc:b7:41:
         00:18:3c:8e:c7:2c:71:c1:42:14:2e:aa:c1:32:ab:bb:48:c9:
         5a:bd:b2:48:0c:65:75:6f:d1:c2:26:b2:16:34:99:ed:7f:92:
         8d:aa:db:81:a7:b0:d5:4e:53:73:91:0c:c3:95:8f:f2:88:b6:
         af:fe:3b:cd:6d:77:9d:92:d3:f9:42:09:a3:5b:7f:bc:ec:33:
         8b:3b:73:34:ce:f4:95:3b:f9:98:ed:c7:4f:63:6a:52:72:b1:
         72:28:d4:24:16:80:de:b0:51:4d:4a:46:c0:7d:fd:e4:b4:32:
         c3:88:a5:4d:27:fb:23:63:0f:ab:57:6d:a8:3b:54:fe:94:56:
         cf:6d:6f:d6:83:97:a5:bb:5d:b6:02:19:46:2c:6d:61:53:5b:
         c8:ad:7a:2b:48:5f:bf:ad:d5:8f:51:15:75:f0:8e:ee:87:1c:
         a1:21:fe:6e:47:75:52:98:21:9d:6a:1d:a8:cc:3b:93:aa:fc:
         84:af:46:2b:d6:26:45:3d:59:0d:86:ed:7a:a4:8e:93:3a:eb:
         8f:34:3d:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDzkwET1GshIaF/2H4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDIxMTA1MDAwMFoXDTIyMDMxODA0MDAwMFowLzEtMCsGA1UEAxMk
ZWU2YTQyYzMtMzc1ZS00Njg0LWEzYTMtNDJiMWQwNTM0MDA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnCo28DlF+L2aGNscofBn7JWSj0RYMZfElWy
6jLxmbN5Lv8m3oIqhPiYGXIs9mLtkN429b03ZruK6OXtzJ8oIjYZsP9cZcfKvabR
vekokwrg8W4N9sK6+l+/aLFIHjDMfNSCfr7Hr4HsYLGOGfmRA5U/5s3by/253K/X
wGSZmHjQJNTbLf/Yt5penu3VHA0Cim/XBckIN1lebnUmk2pZ6u+S363NidcWUn+A
uAs9w+b2WD8tbxBblAm4GlvT4Ozne2oOd3Jjrr8bQea4cZfLxzF62kkKKCy1k1eT
CEgBk8KEITG1Z0jkkpoo3dwD3Hg1GyMWDXQSnadexPTS2YsmgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCx/5Z3i6br9X3g8stYF0vftQgulMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMDgwNThhYTgtNzU1Mi0z
Y2FjLWFlNWEtODFiNTIyYTQ4NzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSwMAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACF5Dd6NhBxnMc82aysf4eaShTFZ7UMbmQa5sGWBwL5eqiXLHuofy0iQ
ffXdzi99gX/LaMy3QQAYPI7HLHHBQhQuqsEyq7tIyVq9skgMZXVv0cImshY0me1/
ko2q24GnsNVOU3ORDMOVj/KItq/+O81td52S0/lCCaNbf7zsM4s7czTO9JU7+Zjt
x09jalJysXIo1CQWgN6wUU1KRsB9/eS0MsOIpU0n+yNjD6tXbag7VP6UVs9tb9aD
l6W7XbYCGUYsbWFTW8iteitIX7+t1Y9RFXXwju6HHKEh/m5HdVKYIZ1qHajMO5Oq
/ISvRivWJkU9WQ2G7XqkjpM66480Pbw=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:38 2025 by rpki-client