Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/11eeb723-4bd6-3bb5-a7eb-419f9ef39578.roa
File:                     11eeb723-4bd6-3bb5-a7eb-419f9ef39578.roa (raw, json)
Hash identifier:          /z2v0D63qcg1lArJIgUYS1hMtYG52pg5oiY+HXYvb5M=
Subject key identifier:   43:41:D5:A0:78:2E:29:71:6F:CD:16:C0:B5:BF:37:8E:5A:82:EA:99
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F34AF6055A6D2FFCFE6F0CB40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/11eeb723-4bd6-3bb5-a7eb-419f9ef39578.roa
Signing time:             Sat 10 Sep 2022 12:00:00 +0000
ROA not before:           Sat 10 Sep 2022 12:00:00 +0000
ROA not after:            Sun 16 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        65.0.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:34:af:60:55:a6:d2:ff:cf:e6:f0:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 10 12:00:00 2022 GMT
            Not After : Oct 16 04:00:00 2022 GMT
        Subject: CN=a8fbc6bf-cac6-4986-be73-653e6f6b20b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:24:7d:03:13:32:77:a4:90:84:28:8a:0a:1d:
                    41:93:be:54:72:6a:9e:7d:3f:e4:a7:2e:2b:a5:cd:
                    80:c2:17:2e:57:53:e6:2a:f5:b1:31:5b:a4:20:7e:
                    71:33:5e:16:94:25:b9:ba:cc:b0:1f:1a:36:8d:04:
                    bb:dc:94:b9:55:5c:d4:92:2e:f3:20:3b:af:6e:3c:
                    37:24:96:54:88:a5:fe:78:89:2f:da:3d:5e:f3:bd:
                    27:01:ae:0f:26:1c:1f:63:89:63:c5:df:92:f0:6f:
                    5b:ae:a4:0e:b8:93:81:dc:7c:69:9c:4f:22:a7:75:
                    39:80:7a:a1:63:be:93:da:b4:2e:ee:b2:0d:a0:cd:
                    20:04:9e:09:b4:1c:fd:f8:97:da:22:84:c7:e2:d2:
                    12:2c:25:b0:40:cb:3c:8d:9f:2d:40:95:b2:27:7c:
                    f8:68:6d:b7:57:1a:3d:83:31:6e:31:7b:02:c5:d7:
                    9e:c2:e6:cc:f3:c8:aa:3a:bf:f5:5e:cb:3e:c7:4c:
                    93:e3:9b:f9:c5:4d:0c:d1:1d:a7:d8:ee:34:1f:da:
                    9d:16:a2:13:39:25:9d:65:b0:59:88:91:97:ae:f1:
                    b9:58:e3:74:e7:8c:61:89:14:af:f7:bb:ec:d5:c0:
                    41:4b:d9:2b:33:b5:46:7c:63:a2:23:95:13:1b:3b:
                    79:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:41:D5:A0:78:2E:29:71:6F:CD:16:C0:B5:BF:37:8E:5A:82:EA:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/11eeb723-4bd6-3bb5-a7eb-419f9ef39578.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.0.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:5b:83:d2:4c:ed:d7:99:75:6c:ab:e3:55:c8:66:71:14:f0:
         68:30:0d:4a:15:a4:36:1e:ac:57:12:6e:67:9e:c5:be:8d:ed:
         c7:9c:14:e4:03:91:5c:59:d8:78:79:3a:cb:ce:68:bf:06:56:
         9f:c0:0f:1b:10:e0:b2:6b:8a:6c:01:1c:4f:37:65:59:2e:a5:
         0b:09:74:86:92:88:46:7a:99:be:d6:36:9e:36:f1:b9:89:d3:
         e0:ed:2e:69:c0:06:79:1a:bb:d3:9c:2f:32:2d:57:79:b5:70:
         57:89:a5:e4:46:fe:42:24:7b:7e:05:51:c4:8f:c1:c4:21:cf:
         9a:ce:86:1a:30:f5:3f:c1:06:0d:89:ca:71:3a:70:4c:4e:d7:
         39:42:34:df:a2:6d:51:fa:d5:db:8d:8a:de:3e:fa:23:53:0e:
         ee:57:37:0e:22:ba:c3:6a:26:6a:b1:b9:06:76:aa:61:9c:71:
         42:2d:4f:cb:74:47:48:ba:d6:cb:23:af:ec:61:9b:60:78:86:
         14:69:c8:e6:b3:33:8e:de:bc:44:2c:ba:bc:6f:c1:a1:f9:9b:
         a8:05:bd:46:74:e1:70:e4:76:78:d6:87:6d:78:74:67:d3:71:
         85:0e:1e:e7:ae:1b:ee:5c:5a:de:00:55:b4:2b:e5:0e:5b:ad:
         40:93:0d:7a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD80r2BVptL/z+bwy0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDkxMDEyMDAwMFoXDTIyMTAxNjA0MDAwMFowLzEtMCsGA1UEAxMk
YThmYmM2YmYtY2FjNi00OTg2LWJlNzMtNjUzZTZmNmIyMGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CR9AxMyd6SQhCiKCh1Bk75UcmqefT/kpy4r
pc2AwhcuV1PmKvWxMVukIH5xM14WlCW5usywHxo2jQS73JS5VVzUki7zIDuvbjw3
JJZUiKX+eIkv2j1e870nAa4PJhwfY4ljxd+S8G9brqQOuJOB3HxpnE8ip3U5gHqh
Y76T2rQu7rINoM0gBJ4JtBz9+JfaIoTH4tISLCWwQMs8jZ8tQJWyJ3z4aG23Vxo9
gzFuMXsCxdeewubM88iqOr/1Xss+x0yT45v5xU0M0R2n2O40H9qdFqITOSWdZbBZ
iJGXrvG5WON054xhiRSv97vs1cBBS9krM7VGfGOiI5UTGzt5ewIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFENB1aB4Lilxb80WwLW/N45aguqZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMTFlZWI3MjMtNGJkNi0z
YmI1LWE3ZWItNDE5ZjllZjM5NTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCQQAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAH1uD0kzt15l1bKvjVchmcRTwaDANShWkNh6sVxJuZ57Fvo3tx5wU5AOR
XFnYeHk6y85ovwZWn8APGxDgsmuKbAEcTzdlWS6lCwl0hpKIRnqZvtY2njbxuYnT
4O0uacAGeRq705wvMi1XebVwV4ml5Eb+QiR7fgVRxI/BxCHPms6GGjD1P8EGDYnK
cTpwTE7XOUI036JtUfrV242K3j76I1MO7lc3DiK6w2omarG5BnaqYZxxQi1Py3RH
SLrWyyOv7GGbYHiGFGnI5rMzjt68RCy6vG/BofmbqAW9RnThcOR2eNaHbXh0Z9Nx
hQ4e564b7lxa3gBVtCvlDlutQJMNeg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:00:38 2025 by rpki-client