Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/10586779-0675-3c86-9846-6a30f9d1c634.roa
File:                     10586779-0675-3c86-9846-6a30f9d1c634.roa (raw, json)
Hash identifier:          /br5bwp7MkXOlEZU5uzLKHokgaXlc/z4vx9WQYOX1XM=
Subject key identifier:   8D:93:1C:2D:0E:E8:11:FA:E9:72:CC:93:6A:B6:3E:65:65:B6:1D:96
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EBF1CD7A9D928DD9596E33800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/10586779-0675-3c86-9846-6a30f9d1c634.roa
Signing time:             Sat 30 Jul 2022 12:00:00 +0000
ROA not before:           Sat 30 Jul 2022 12:00:00 +0000
ROA not after:            Sun 04 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.130.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:bf:1c:d7:a9:d9:28:dd:95:96:e3:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 30 12:00:00 2022 GMT
            Not After : Sep  4 04:00:00 2022 GMT
        Subject: CN=e787ac63-f233-49fa-b74e-9c0bce232114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:79:d2:dd:61:f5:e9:23:25:01:33:a8:51:85:
                    ca:99:2b:0c:6f:5d:42:2c:43:df:f2:6f:43:cd:87:
                    90:db:33:7b:6e:1a:a2:38:d7:87:16:9f:97:80:5c:
                    b1:73:4c:d8:53:83:20:50:55:53:bd:ea:83:fa:59:
                    cc:01:97:42:f0:ae:9d:28:9b:24:f1:78:b5:da:7a:
                    92:23:95:58:50:37:3d:e2:18:e1:f4:a9:e7:fa:4e:
                    a5:66:fe:c6:79:9a:14:ae:07:b5:94:8d:49:b4:dd:
                    0c:c9:19:ce:3a:6c:3c:76:d8:68:4d:99:24:69:38:
                    0f:99:e4:2b:ff:72:50:f0:31:e8:a1:2c:a1:b2:6b:
                    54:4b:ce:ea:42:8f:6e:ce:23:ff:19:c9:f4:b6:f6:
                    8f:03:25:5d:86:4f:48:14:70:c9:50:e9:31:5d:19:
                    83:0a:6b:89:4e:82:57:b1:0d:f9:61:52:40:5b:19:
                    b2:b7:e4:ad:b9:84:97:91:d6:ba:f8:03:3e:71:12:
                    4e:78:b6:33:11:17:0a:5c:cd:b6:94:a0:70:77:a9:
                    e4:76:82:d9:3f:c1:1b:86:b0:5f:98:8a:a1:1c:2f:
                    61:c5:9d:f7:08:27:98:85:11:bd:db:28:f2:ca:5f:
                    3b:ce:1a:e0:cc:f4:06:4c:e4:d0:17:43:b2:81:91:
                    8e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:93:1C:2D:0E:E8:11:FA:E9:72:CC:93:6A:B6:3E:65:65:B6:1D:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/10586779-0675-3c86-9846-6a30f9d1c634.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.130.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:86:cc:e5:58:48:a3:de:b9:a8:3c:a4:d5:0c:7d:bc:b4:58:
         1e:b3:f8:c0:ab:61:3f:b5:ec:5d:63:e7:3e:98:30:5b:83:89:
         0e:73:de:38:15:e6:dc:eb:33:8a:09:28:02:7e:64:fc:d8:93:
         80:06:7a:ec:57:bb:27:62:86:10:44:56:01:ca:4d:b8:69:ca:
         fc:7f:5f:4c:1d:1b:f1:bc:7e:f0:22:40:9b:62:62:cf:ad:22:
         52:70:69:da:06:c2:98:9c:d2:c7:a3:74:8e:88:f0:7e:0f:3f:
         55:fd:45:c3:24:67:06:59:2c:67:20:96:c4:e1:62:3e:9b:90:
         7f:0e:fc:c1:b2:e0:82:c6:83:62:bc:c0:5a:a0:13:08:88:b2:
         0d:4d:f7:d2:ca:d7:f2:09:74:80:9d:d8:e6:e1:65:c7:2d:be:
         88:c3:cb:fc:f6:83:06:e2:fa:ba:77:82:da:f1:0c:f7:7d:7a:
         9f:df:1d:c0:29:da:c8:62:0f:17:4c:da:c4:72:40:9e:59:89:
         bd:bb:fa:83:54:31:f7:44:b6:29:0f:af:b9:46:67:fa:bf:f0:
         6f:6d:fd:a2:91:a8:2f:6f:80:e4:03:be:9c:6b:53:bf:cb:5d:
         f7:dd:3e:9f:ea:74:69:eb:95:77:a6:ea:7d:fe:2f:51:fb:e1:
         dc:1b:25:d7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6/HNep2SjdlZbjOAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDczMDEyMDAwMFoXDTIyMDkwNDA0MDAwMFowLzEtMCsGA1UEAxMk
ZTc4N2FjNjMtZjIzMy00OWZhLWI3NGUtOWMwYmNlMjMyMTE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnnS3WH16SMlATOoUYXKmSsMb11CLEPf8m9D
zYeQ2zN7bhqiONeHFp+XgFyxc0zYU4MgUFVTveqD+lnMAZdC8K6dKJsk8Xi12nqS
I5VYUDc94hjh9Knn+k6lZv7GeZoUrge1lI1JtN0MyRnOOmw8dthoTZkkaTgPmeQr
/3JQ8DHooSyhsmtUS87qQo9uziP/Gcn0tvaPAyVdhk9IFHDJUOkxXRmDCmuJToJX
sQ35YVJAWxmyt+StuYSXkda6+AM+cRJOeLYzERcKXM22lKBwd6nkdoLZP8EbhrBf
mIqhHC9hxZ33CCeYhRG92yjyyl87zhrgzPQGTOTQF0OygZGOcwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFI2THC0O6BH66XLMk2q2PmVlth2WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMTA1ODY3NzktMDY3NS0z
Yzg2LTk4NDYtNmEzMGY5ZDFjNjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEIIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACYbM5VhIo965qDyk1Qx9vLRYHrP4wKthP7XsXWPnPpgwW4OJDnPeOBXm
3OszigkoAn5k/NiTgAZ67Fe7J2KGEERWAcpNuGnK/H9fTB0b8bx+8CJAm2Jiz60i
UnBp2gbCmJzSx6N0jojwfg8/Vf1FwyRnBlksZyCWxOFiPpuQfw78wbLggsaDYrzA
WqATCIiyDU330srX8gl0gJ3Y5uFlxy2+iMPL/PaDBuL6uneC2vEM9316n98dwCna
yGIPF0zaxHJAnlmJvbv6g1Qx90S2KQ+vuUZn+r/wb239opGoL2+A5AO+nGtTv8td
990+n+p0aeuVd6bqff4vUfvh3Bsl1w==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:00 2025 by rpki-client