Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a743851-53fe-3c7e-b86a-4bdcfacae8e6.roa
File:                     0a743851-53fe-3c7e-b86a-4bdcfacae8e6.roa (raw, json)
Hash identifier:          /ZSiPReVS3sq+xBpknBltCaRm0dv9OO7fV9l/Jrr7lg=
Subject key identifier:   7B:45:A7:FE:72:D8:47:AE:07:89:D0:EB:E4:5D:E1:F2:D9:3D:BA:CE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FA5DDC1E9D22DF0E80D4DF500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a743851-53fe-3c7e-b86a-4bdcfacae8e6.roa
Signing time:             Fri 21 Oct 2022 16:30:08 +0000
ROA not before:           Fri 21 Oct 2022 16:30:08 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        155.134.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a5:dd:c1:e9:d2:2d:f0:e8:0d:4d:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 21 16:30:08 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=24889bf5-bb24-457c-93f9-a821304c4eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b6:52:f0:c2:68:b8:96:f7:26:db:3d:bd:bd:
                    f2:da:0d:98:93:da:22:f7:16:3c:99:3f:1b:18:38:
                    f5:76:95:2f:5d:62:93:df:ea:4b:27:23:d6:17:4b:
                    91:c0:0e:c5:d7:b2:b4:19:98:e3:5b:62:eb:86:78:
                    a8:69:ea:87:dc:96:5f:88:c9:8c:ef:99:80:f1:35:
                    ab:80:a4:eb:e4:25:7f:74:38:71:d0:4f:63:87:2b:
                    6f:f1:b2:1b:ed:75:c5:23:38:9c:3d:6c:de:96:34:
                    00:fb:d9:6b:5d:8f:22:e3:a6:6f:bb:5b:66:d6:bb:
                    64:f7:ad:0d:86:6b:f6:51:53:76:c8:38:ee:fa:10:
                    1b:05:68:61:ff:2e:65:ea:f3:76:bc:bc:4d:b4:10:
                    00:4b:ee:bb:24:42:b3:7e:58:85:79:1e:c9:e7:ee:
                    a3:f3:67:f4:0b:91:c2:99:03:c9:49:72:a5:dc:70:
                    e9:07:fe:8b:e6:e6:7a:88:25:f2:95:03:64:b9:97:
                    34:1b:a0:b5:80:5c:41:19:5d:21:68:ff:01:49:89:
                    31:9f:82:3c:4a:a0:09:11:08:af:8a:9c:cd:6e:25:
                    07:55:81:6d:24:be:78:c2:d5:4f:2d:d7:9d:7c:75:
                    77:b8:83:e7:58:b1:75:20:63:6b:db:8d:27:3b:9c:
                    78:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:45:A7:FE:72:D8:47:AE:07:89:D0:EB:E4:5D:E1:F2:D9:3D:BA:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a743851-53fe-3c7e-b86a-4bdcfacae8e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.134.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:62:f3:9d:89:8f:c3:dc:2a:10:cf:90:3b:31:99:6d:2d:47:
         d6:84:e3:f1:c7:9e:58:00:25:53:06:4c:a7:46:ad:8e:e7:67:
         5a:59:f2:6a:08:35:6c:77:89:f4:c8:2a:ee:db:70:ce:23:cf:
         6c:d7:0f:0b:a9:25:86:f2:45:d3:91:27:13:9f:44:db:ac:6a:
         e5:8f:74:1b:f2:a2:19:df:93:21:da:97:83:05:2a:2d:6b:65:
         ee:91:e6:d2:ae:3a:2f:6a:6b:a9:f5:3c:72:dd:0e:74:98:7b:
         24:fc:cf:42:68:03:0f:16:de:5d:49:b3:e2:6b:59:4b:a1:f9:
         86:b6:cb:b5:aa:93:d9:9b:da:4c:c4:d7:64:f7:ad:78:f7:4a:
         af:35:84:8f:8c:20:6e:04:76:d9:e7:54:b4:16:15:da:6b:e1:
         7b:94:43:e4:7f:4a:0a:ed:8d:f0:bb:8e:e6:c5:66:61:e8:5f:
         88:65:be:a9:4d:4f:6a:e2:26:94:9e:b8:91:28:b2:cb:a2:a2:
         ce:1e:1e:01:f3:6d:0c:53:9f:7b:58:ac:68:fb:5e:20:ab:dd:
         c2:cc:84:bb:ba:2d:1e:fc:40:59:94:25:31:2c:be:46:be:04:
         c1:6b:7d:ae:fa:45:43:48:08:2c:6e:54:dc:5b:6d:36:b0:19:
         04:4a:a5:a2
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+l3cHp0i3w6A1N9QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAyMTE2MzAwOFoXDTIyMTEyNTA1MDAwMFowLzEtMCsGA1UEAxMk
MjQ4ODliZjUtYmIyNC00NTdjLTkzZjktYTgyMTMwNGM0ZWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrZS8MJouJb3Jts9vb3y2g2Yk9oi9xY8mT8b
GDj1dpUvXWKT3+pLJyPWF0uRwA7F17K0GZjjW2LrhnioaeqH3JZfiMmM75mA8TWr
gKTr5CV/dDhx0E9jhytv8bIb7XXFIzicPWzeljQA+9lrXY8i46Zvu1tm1rtk960N
hmv2UVN2yDju+hAbBWhh/y5l6vN2vLxNtBAAS+67JEKzfliFeR7J5+6j82f0C5HC
mQPJSXKl3HDpB/6L5uZ6iCXylQNkuZc0G6C1gFxBGV0haP8BSYkxn4I8SqAJEQiv
ipzNbiUHVYFtJL54wtVPLdedfHV3uIPnWLF1IGNr240nO5x4sQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHtFp/5y2EeuB4nQ6+Rd4fLZPbrOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMGE3NDM4NTEtNTNmZS0z
YzdlLWI4NmEtNGJkY2ZhY2FlOGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAm4YwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAh2LznYmPw9wqEM+QOzGZbS1H1oTj8ceeWAAlUwZMp0atjudnWlnyagg1
bHeJ9Mgq7ttwziPPbNcPC6klhvJF05EnE59E26xq5Y90G/KiGd+TIdqXgwUqLWtl
7pHm0q46L2prqfU8ct0OdJh7JPzPQmgDDxbeXUmz4mtZS6H5hrbLtaqT2ZvaTMTX
ZPetePdKrzWEj4wgbgR22edUtBYV2mvhe5RD5H9KCu2N8LuO5sVmYehfiGW+qU1P
auImlJ64kSiyy6Kizh4eAfNtDFOfe1isaPteIKvdwsyEu7otHvxAWZQlMSy+Rr4E
wWt9rvpFQ0gILG5U3FttNrAZBEqlog==
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:02:06 2025 by rpki-client