Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0f9be062-d1be-360a-bc4e-ced5c88a5498.roa
File:                     0f9be062-d1be-360a-bc4e-ced5c88a5498.roa (raw, json)
Hash identifier:          Cf6J3Ufczi7Fn+Y9DI8Z1tZgO9Z3H3u/qxK9wy63i0o=
Subject key identifier:   1C:28:40:33:8C:FE:2A:A5:14:EB:53:9B:4E:47:28:6A:EC:9E:2B:8E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F7D2750DBAFF569F4CA5FA600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0f9be062-d1be-360a-bc4e-ced5c88a5498.roa
Signing time:             Thu 06 Oct 2022 12:00:00 +0000
ROA not before:           Thu 06 Oct 2022 12:00:00 +0000
ROA not after:            Fri 11 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.64.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7d:27:50:db:af:f5:69:f4:ca:5f:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  6 12:00:00 2022 GMT
            Not After : Nov 11 05:00:00 2022 GMT
        Subject: CN=51a33ec6-a101-497b-bcc6-bc955f8a1f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:57:46:9b:db:c2:ca:64:a5:9a:b5:e7:4e:fd:
                    85:df:81:54:9b:28:72:07:f2:e0:4a:c6:aa:57:7c:
                    e5:21:88:4b:ed:e0:32:2a:2f:d0:86:58:e9:d2:a2:
                    ad:7f:cc:1b:62:8d:e9:0c:ef:a9:5a:2e:7c:80:e6:
                    3e:20:0b:3a:ca:c8:a7:2b:ec:a4:d5:13:53:2d:28:
                    79:14:46:bf:f5:a2:20:92:e8:6a:d7:5a:c4:0b:7a:
                    e5:61:7a:92:e5:2d:8a:e8:e0:d1:d0:b5:30:39:61:
                    8e:1f:ec:e3:b5:84:e4:23:30:36:fa:d3:22:9c:73:
                    d8:18:eb:4c:44:26:7a:e1:af:de:b7:a4:9b:5c:eb:
                    53:c3:90:09:58:b1:8f:12:dc:d5:a4:90:dd:1d:d0:
                    d1:89:39:71:c9:35:76:6f:b2:9d:c4:70:09:14:01:
                    76:db:70:5b:1c:f8:74:52:43:a3:bc:52:de:de:3b:
                    3d:ff:03:68:f7:80:f0:f5:ae:d8:d2:48:ba:4b:e3:
                    88:67:68:1d:92:1e:b1:32:53:c9:38:11:1c:ec:3c:
                    23:29:21:fb:8e:88:d9:db:e5:45:bc:c3:19:2f:20:
                    fc:23:b2:20:e0:94:c6:92:e4:a6:00:7d:3e:20:cf:
                    8e:5d:43:be:fd:29:56:c3:a3:10:62:8a:6e:69:21:
                    6c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:28:40:33:8C:FE:2A:A5:14:EB:53:9B:4E:47:28:6A:EC:9E:2B:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0f9be062-d1be-360a-bc4e-ced5c88a5498.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.64.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:d1:85:1d:50:70:5a:c0:02:d0:00:ff:91:4b:c0:e2:28:47:
         01:ff:f1:95:54:0a:8b:26:a4:1c:7c:b2:fc:d5:fc:63:81:02:
         16:9b:55:9f:af:9b:07:36:c0:fe:2a:f4:c1:f5:0c:b0:bc:a2:
         d8:de:40:c4:51:da:9b:d6:a6:09:9f:83:77:12:78:b0:80:f2:
         a3:a2:23:33:be:8e:7d:95:79:07:d3:9a:21:64:70:17:64:be:
         9d:91:15:cf:a2:22:aa:cb:a5:81:bc:33:2f:43:93:b6:d9:32:
         da:d0:4a:47:a3:fa:1e:00:b1:8c:47:b3:d9:b1:a0:ea:56:c9:
         35:33:40:7b:af:23:e2:6b:7c:d7:22:a4:d0:c4:17:b7:12:41:
         c8:2f:fd:f2:68:fd:53:95:7c:96:90:e1:9e:de:91:a4:31:ab:
         c9:89:76:ac:f5:20:a2:e2:5d:65:a9:cc:8f:1d:0d:8f:46:48:
         c2:04:fa:b6:a7:c8:8e:77:66:c2:f3:e2:65:55:74:fc:61:10:
         8c:f3:e0:19:59:80:86:c8:02:35:6d:e8:91:1c:6e:d4:25:ab:
         02:30:0b:4c:5e:58:bc:64:9c:ea:64:bb:fd:69:cc:fb:87:99:
         85:64:c3:fb:7e:09:e8:dc:6c:95:bc:b6:35:53:26:1d:7b:e3:
         04:1e:ff:ec
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD99J1Dbr/Vp9MpfpgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAwNjEyMDAwMFoXDTIyMTExMTA1MDAwMFowLzEtMCsGA1UEAxMk
NTFhMzNlYzYtYTEwMS00OTdiLWJjYzYtYmM5NTVmOGExZjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1dGm9vCymSlmrXnTv2F34FUmyhyB/LgSsaq
V3zlIYhL7eAyKi/Qhljp0qKtf8wbYo3pDO+pWi58gOY+IAs6ysinK+yk1RNTLSh5
FEa/9aIgkuhq11rEC3rlYXqS5S2K6ODR0LUwOWGOH+zjtYTkIzA2+tMinHPYGOtM
RCZ64a/et6SbXOtTw5AJWLGPEtzVpJDdHdDRiTlxyTV2b7KdxHAJFAF223BbHPh0
UkOjvFLe3js9/wNo94Dw9a7Y0ki6S+OIZ2gdkh6xMlPJOBEc7DwjKSH7jojZ2+VF
vMMZLyD8I7Ig4JTGkuSmAH0+IM+OXUO+/SlWw6MQYopuaSFsKwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBwoQDOM/iqlFOtTm05HKGrsniuOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMGY5YmUwNjItZDFiZS0z
NjBhLWJjNGUtY2VkNWM4OGE1NDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEEAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAL9GFHVBwWsAC0AD/kUvA4ihHAf/xlVQKiyakHHyy/NX8Y4ECFptVn6+b
BzbA/ir0wfUMsLyi2N5AxFHam9amCZ+DdxJ4sIDyo6IjM76OfZV5B9OaIWRwF2S+
nZEVz6IiqsulgbwzL0OTttky2tBKR6P6HgCxjEez2bGg6lbJNTNAe68j4mt81yKk
0MQXtxJByC/98mj9U5V8lpDhnt6RpDGryYl2rPUgouJdZanMjx0Nj0ZIwgT6tqfI
jndmwvPiZVV0/GEQjPPgGVmAhsgCNW3okRxu1CWrAjALTF5YvGSc6mS7/WnM+4eZ
hWTD+34J6Nxslby2NVMmHXvjBB7/7A==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:02:04 2025 by rpki-client