Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/093641f2-dc01-3acb-8ffa-96c4742eac39.roa
File:                     093641f2-dc01-3acb-8ffa-96c4742eac39.roa (raw, json)
Hash identifier:          UGEr2w5Tbg1dUU9c4V5pCVObzCGzi1Zpev7kAoXu3d4=
Subject key identifier:   E5:BE:0E:CF:9E:8B:B1:82:AE:4A:B4:83:65:97:71:57:38:EF:8C:1C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F346C4A3F856E2F7663FB0360
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/093641f2-dc01-3acb-8ffa-96c4742eac39.roa
Signing time:             Sat 10 Sep 2022 12:00:00 +0000
ROA not before:           Sat 10 Sep 2022 12:00:00 +0000
ROA not after:            Sun 16 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.162.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:34:6c:4a:3f:85:6e:2f:76:63:fb:03:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 10 12:00:00 2022 GMT
            Not After : Oct 16 04:00:00 2022 GMT
        Subject: CN=23ffffd6-02e1-4183-8056-64c2a3f711cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d7:ad:32:26:0f:50:4b:93:47:05:80:59:83:
                    0c:28:f6:be:56:a3:a6:db:fa:db:92:29:d2:2a:47:
                    9d:08:dd:72:ed:81:18:59:e8:b0:f5:e4:ac:c7:58:
                    5e:bc:7a:56:55:22:e5:10:51:0a:af:7a:c8:9e:4c:
                    ed:c9:97:a0:85:c2:49:74:dc:6b:59:82:65:eb:97:
                    39:fb:3b:66:b4:0d:87:ea:6e:9d:86:14:d3:ae:ca:
                    f1:2e:47:82:fd:8a:df:c1:54:71:61:1c:b6:46:c9:
                    d3:e0:72:b7:61:f1:a3:0d:5d:a2:41:d8:b9:13:87:
                    03:78:02:e7:a0:5f:60:b0:2b:f7:d1:aa:f0:2d:4f:
                    06:45:39:f0:7d:9c:6c:63:74:72:b0:b2:1b:b2:48:
                    d7:5b:eb:aa:8c:42:d7:99:4f:09:df:3e:76:f4:25:
                    7c:6c:b7:0c:30:69:cf:79:53:49:47:b3:83:cb:bf:
                    f9:85:a6:f1:8f:5c:5c:44:77:66:69:ea:fa:cd:36:
                    5d:38:57:7b:ee:61:8f:04:34:9e:b9:44:5d:57:4f:
                    41:43:d8:72:ba:36:de:08:04:67:b4:14:04:08:ad:
                    67:f5:52:f9:f3:10:f9:0e:fc:fc:cf:08:23:44:aa:
                    45:9f:bd:73:05:dd:b1:9b:1d:91:dc:58:bf:7d:f1:
                    ac:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BE:0E:CF:9E:8B:B1:82:AE:4A:B4:83:65:97:71:57:38:EF:8C:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/093641f2-dc01-3acb-8ffa-96c4742eac39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.162.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:87:ef:cf:f3:05:fe:b3:83:f7:d5:2a:f0:5b:72:d4:d9:51:
         8c:72:b6:1d:71:6f:65:d4:74:52:f3:3e:c1:33:c8:1f:16:a3:
         cc:2e:ba:7b:af:e3:7a:7b:99:0a:c6:0d:58:8c:40:f9:4c:37:
         62:7b:80:8a:20:76:37:e6:6a:af:fc:ce:d9:05:12:ca:a9:8c:
         81:0f:8a:44:f3:50:74:8d:cd:bb:84:67:f4:86:41:3b:31:a5:
         31:b9:af:ff:25:d6:b8:6c:3f:76:d2:2b:f9:12:48:df:c0:d5:
         96:5f:d9:bb:12:fd:5b:1c:0f:25:bc:07:df:72:d3:30:eb:de:
         ae:45:47:c7:7e:d7:b0:b3:b4:d0:b2:ca:e9:45:6d:80:74:3b:
         09:d0:fa:85:10:84:5f:75:4b:77:f0:08:ea:e5:22:5c:d4:07:
         dc:83:f2:b3:fb:8e:92:1e:a3:96:4d:a0:81:b2:1d:8d:ac:49:
         17:ac:a5:a8:91:a5:ee:3b:eb:ff:66:ce:82:c4:a8:7c:e3:d9:
         b4:a3:5d:29:50:ca:4d:7c:4e:1e:36:13:84:ac:7b:72:6d:11:
         39:f8:fa:e7:2d:db:c0:9a:9c:a1:19:68:21:c2:67:09:a9:75:
         84:a4:af:99:71:fc:0e:f1:cc:ef:c4:20:3f:91:ce:f4:83:70:
         5d:7c:94:b3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD80bEo/hW4vdmP7A2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDkxMDEyMDAwMFoXDTIyMTAxNjA0MDAwMFowLzEtMCsGA1UEAxMk
MjNmZmZmZDYtMDJlMS00MTgzLTgwNTYtNjRjMmEzZjcxMWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtetMiYPUEuTRwWAWYMMKPa+VqOm2/rbkinS
KkedCN1y7YEYWeiw9eSsx1hevHpWVSLlEFEKr3rInkztyZeghcJJdNxrWYJl65c5
+ztmtA2H6m6dhhTTrsrxLkeC/YrfwVRxYRy2RsnT4HK3YfGjDV2iQdi5E4cDeALn
oF9gsCv30arwLU8GRTnwfZxsY3RysLIbskjXW+uqjELXmU8J3z529CV8bLcMMGnP
eVNJR7ODy7/5habxj1xcRHdmaer6zTZdOFd77mGPBDSeuURdV09BQ9hyujbeCARn
tBQECK1n9VL58xD5Dvz8zwgjRKpFn71zBd2xmx2R3Fi/ffGsmQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOW+Ds+ei7GCrkq0g2WXcVc474wcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMDkzNjQxZjItZGMwMS0z
YWNiLThmZmEtOTZjNDc0MmVhYzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEKIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEARIfvz/MF/rOD99Uq8Fty1NlRjHK2HXFvZdR0UvM+wTPIHxajzC66e6/j
enuZCsYNWIxA+Uw3YnuAiiB2N+Zqr/zO2QUSyqmMgQ+KRPNQdI3Nu4Rn9IZBOzGl
Mbmv/yXWuGw/dtIr+RJI38DVll/ZuxL9WxwPJbwH33LTMOverkVHx37XsLO00LLK
6UVtgHQ7CdD6hRCEX3VLd/AI6uUiXNQH3IPys/uOkh6jlk2ggbIdjaxJF6ylqJGl
7jvr/2bOgsSofOPZtKNdKVDKTXxOHjYThKx7cm0ROfj65y3bwJqcoRloIcJnCal1
hKSvmXH8DvHM78QgP5HO9INwXXyUsw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:32 2025 by rpki-client