Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0c7f172f-958f-32ff-a2f0-fdab5236dfe2.roa
File:                     0c7f172f-958f-32ff-a2f0-fdab5236dfe2.roa (raw, json)
Hash identifier:          r712S9pZYS3BoZqdxvduasUPnEoAYTBbjxthzzwpCOQ=
Subject key identifier:   53:5A:C6:D4:75:F8:BA:5D:6A:67:4A:23:3E:AB:3F:63:C0:5D:07:A1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F078D38E9E1A897BC2D1EEEE0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0c7f172f-958f-32ff-a2f0-fdab5236dfe2.roa
Signing time:             Thu 25 Aug 2022 12:00:00 +0000
ROA not before:           Thu 25 Aug 2022 12:00:00 +0000
ROA not after:            Fri 30 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.157.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:07:8d:38:e9:e1:a8:97:bc:2d:1e:ee:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 25 12:00:00 2022 GMT
            Not After : Sep 30 04:00:00 2022 GMT
        Subject: CN=ec148796-0b43-4ec6-b4a2-a14c3fdf9179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b3:a3:49:d3:58:16:44:c7:01:c7:f8:9f:33:
                    aa:c6:28:e6:86:81:5c:d1:94:4f:11:83:1a:b1:b0:
                    4e:84:2e:ac:05:24:27:d7:5a:3e:8f:38:36:7b:55:
                    c5:7b:f8:07:cc:d8:b5:96:e3:bc:ba:0c:d2:0b:ae:
                    a0:57:02:f9:e0:23:77:27:8c:93:43:d0:06:ac:c0:
                    84:9b:06:d1:ec:7a:7d:80:2f:ed:6b:58:41:29:a0:
                    26:54:56:2b:ed:5e:7f:74:c4:0c:52:3d:c0:6a:70:
                    6c:e9:24:89:12:42:31:d6:46:a4:00:ba:76:e4:1f:
                    9f:86:73:8c:46:48:e8:86:10:89:c9:d9:87:7a:ee:
                    3c:74:f0:ad:5d:c2:93:89:bb:9a:1d:72:15:02:4c:
                    da:e6:81:bf:8e:4b:78:fd:69:c9:73:69:ed:16:ad:
                    bc:bb:00:5b:24:af:b6:2d:35:cd:37:4d:a5:18:50:
                    4b:6e:eb:80:2b:64:bc:b1:01:07:25:04:28:32:8d:
                    02:22:30:f7:4e:9b:24:0f:ca:85:d9:31:dc:0d:3c:
                    d8:af:09:cc:e4:d5:1a:89:b0:c3:8e:da:ec:b5:49:
                    44:3a:f3:9e:19:f7:c9:4b:ab:34:1b:c3:fd:2c:d1:
                    11:2f:d0:c7:07:1e:7c:6e:72:cd:7b:12:55:e7:41:
                    c7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:5A:C6:D4:75:F8:BA:5D:6A:67:4A:23:3E:AB:3F:63:C0:5D:07:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0c7f172f-958f-32ff-a2f0-fdab5236dfe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.157.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:5c:84:84:17:55:f5:86:a5:89:42:d7:81:41:4d:24:80:53:
         1c:91:8c:a2:52:15:e9:d1:34:8a:b1:4f:2b:1f:41:84:09:91:
         b0:1c:be:1f:5a:5c:6b:fc:c3:25:69:99:1a:16:8e:fb:36:72:
         29:70:56:29:47:e3:53:41:c6:0f:d3:69:e0:da:f0:24:6e:cd:
         9a:f1:db:5b:6d:8e:77:8e:b2:9d:00:d6:7f:67:18:e5:83:5d:
         d3:c0:f5:1a:0a:9c:4c:df:e1:80:73:67:f4:c9:e5:3b:9e:79:
         38:be:2a:41:7c:cc:51:74:2d:d3:0c:0f:9a:95:c2:0c:75:fa:
         b4:6c:81:12:0f:37:1e:18:94:fd:6c:26:06:03:b0:36:a2:a7:
         c5:d7:c2:42:b4:cc:53:23:85:ec:83:54:30:4e:3c:13:cf:20:
         c3:8a:42:da:ae:b6:52:69:22:9c:69:47:78:f0:0a:9a:b0:2f:
         47:e0:36:aa:80:95:ff:43:91:7c:fd:f7:81:56:5a:5c:1a:aa:
         9a:dc:16:40:12:2c:c1:05:34:6a:97:ba:84:dc:3b:74:67:9d:
         55:88:79:f2:bc:96:50:4c:8c:95:5a:49:39:4b:62:43:f4:d0:
         a0:4a:4a:15:7b:06:a7:aa:9b:76:ca:cf:4c:74:e6:d9:e6:6f:
         35:55:70:b0
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8HjTjp4aiXvC0e7uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDgyNTEyMDAwMFoXDTIyMDkzMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZWMxNDg3OTYtMGI0My00ZWM2LWI0YTItYTE0YzNmZGY5MTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7OjSdNYFkTHAcf4nzOqxijmhoFc0ZRPEYMa
sbBOhC6sBSQn11o+jzg2e1XFe/gHzNi1luO8ugzSC66gVwL54CN3J4yTQ9AGrMCE
mwbR7Hp9gC/ta1hBKaAmVFYr7V5/dMQMUj3AanBs6SSJEkIx1kakALp25B+fhnOM
RkjohhCJydmHeu48dPCtXcKTibuaHXIVAkza5oG/jkt4/WnJc2ntFq28uwBbJK+2
LTXNN02lGFBLbuuAK2S8sQEHJQQoMo0CIjD3TpskD8qF2THcDTzYrwnM5NUaibDD
jtrstUlEOvOeGffJS6s0G8P9LNERL9DHBx58bnLNexJV50HHMwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFNaxtR1+LpdamdKIz6rP2PAXQehMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMGM3ZjE3MmYtOTU4Zi0z
MmZmLWEyZjAtZmRhYjUyMzZkZmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEJ0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEANVyEhBdV9YaliULXgUFNJIBTHJGMolIV6dE0irFPKx9BhAmRsBy+H1pc
a/zDJWmZGhaO+zZyKXBWKUfjU0HGD9Np4NrwJG7NmvHbW22Od46ynQDWf2cY5YNd
08D1GgqcTN/hgHNn9MnlO555OL4qQXzMUXQt0wwPmpXCDHX6tGyBEg83HhiU/Wwm
BgOwNqKnxdfCQrTMUyOF7INUME48E88gw4pC2q62UmkinGlHePAKmrAvR+A2qoCV
/0ORfP33gVZaXBqqmtwWQBIswQU0ape6hNw7dGedVYh58ryWUEyMlVpJOUtiQ/TQ
oEpKFXsGp6qbdsrPTHTm2eZvNVVwsA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:02 2025 by rpki-client