Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/155fba7e-1239-32cb-b955-be9ddad36309.roa
File:                     155fba7e-1239-32cb-b955-be9ddad36309.roa (raw, json)
Hash identifier:          JVMGLITem1SS4ghpZis6Q/DuPpwdJeA2sNMZ0LTiyZ0=
Subject key identifier:   40:A7:1D:27:81:7B:4B:0E:93:10:7D:2D:14:CC:C2:0E:7A:6D:71:51
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F184E7F287980A8BBD9905780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/155fba7e-1239-32cb-b955-be9ddad36309.roa
Signing time:             Wed 31 Aug 2022 12:00:00 +0000
ROA not before:           Wed 31 Aug 2022 12:00:00 +0000
ROA not after:            Thu 06 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        128.212.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:18:4e:7f:28:79:80:a8:bb:d9:90:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 31 12:00:00 2022 GMT
            Not After : Oct  6 04:00:00 2022 GMT
        Subject: CN=15f3f058-6b25-4e5e-97c1-0eaf08f9bfbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:71:bf:70:b2:66:2c:74:b0:c8:cf:4a:c2:11:
                    3f:53:ab:82:33:86:12:56:5f:a8:0a:8f:d5:fc:e5:
                    9e:43:7b:37:ef:52:80:8d:93:6f:fb:cd:62:bf:ab:
                    59:1a:93:cf:7c:a9:c2:10:59:c1:0c:ff:cb:fe:8a:
                    b5:ab:3f:53:db:9b:03:10:6d:2a:09:67:bc:9f:6a:
                    8a:57:5d:bf:02:22:fe:64:90:b3:5c:43:f5:d3:7a:
                    bc:12:bd:5c:4f:6d:ec:58:e5:b1:78:cb:50:36:34:
                    28:bc:9f:e8:5d:ce:68:aa:ea:f4:91:79:3d:a3:52:
                    ae:d8:36:4d:24:77:3f:ea:44:51:3f:93:0b:33:82:
                    c1:8f:4d:19:d0:cb:0e:bb:6c:55:b6:84:77:e8:b1:
                    6e:52:5f:a6:cd:c5:a9:5a:2d:d6:37:f0:72:a8:76:
                    3d:4a:71:48:74:0f:5e:a7:c4:30:64:4b:be:11:b6:
                    56:02:d0:a4:12:01:0b:03:36:31:50:23:cc:9a:e8:
                    c8:90:93:98:3e:7b:4f:90:fb:10:63:e3:ee:34:23:
                    89:7e:7e:a6:90:d1:1c:9f:fe:cb:3d:a3:2c:cc:4f:
                    fe:11:b2:e0:57:ec:83:92:9c:61:62:66:30:ca:76:
                    b4:af:27:7e:95:a7:08:04:e3:59:46:75:ac:aa:1c:
                    bf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A7:1D:27:81:7B:4B:0E:93:10:7D:2D:14:CC:C2:0E:7A:6D:71:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/155fba7e-1239-32cb-b955-be9ddad36309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.212.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:54:53:0f:46:18:4c:ba:ee:57:58:13:c3:8d:53:c0:ad:29:
         28:95:47:4d:23:6a:56:ec:56:84:4a:9b:52:d9:e5:7c:8e:7a:
         2f:6f:bd:38:d0:d7:cd:df:b5:a1:a8:ef:d3:8b:27:35:20:75:
         ca:9b:98:61:f0:9d:86:d0:bc:72:96:63:47:71:70:f8:51:2c:
         9f:7c:59:89:ac:a3:17:38:1a:3e:f5:70:71:81:1f:08:4a:a8:
         33:f9:5f:e7:b4:d3:4d:fa:f6:d4:4b:f2:91:32:51:42:92:45:
         64:cf:d1:53:70:8c:c8:58:19:c9:26:0a:c2:16:dc:96:4b:bd:
         38:24:19:df:38:c2:f5:ac:4f:b7:bc:d1:33:44:bd:8e:68:8b:
         0d:82:65:61:4e:00:cc:9f:24:09:60:1b:be:0d:15:e4:f7:69:
         c2:c2:20:18:97:f3:c2:e7:87:e5:b3:e4:88:fa:ca:da:56:22:
         85:a7:84:db:07:f8:19:50:69:6e:33:46:d6:9d:3d:c2:13:52:
         1c:ae:c6:bf:51:f4:0f:04:51:25:19:62:7a:a5:c7:ab:9d:29:
         8a:03:a3:25:3a:e0:b8:97:16:29:e0:e3:61:84:19:d7:e3:73:
         bd:83:b6:f7:e3:66:0a:02:98:a4:99:ac:4a:6b:fd:51:04:ff:
         5a:71:d0:9c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8YTn8oeYCou9mQV4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDgzMTEyMDAwMFoXDTIyMTAwNjA0MDAwMFowLzEtMCsGA1UEAxMk
MTVmM2YwNTgtNmIyNS00ZTVlLTk3YzEtMGVhZjA4ZjliZmJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXG/cLJmLHSwyM9KwhE/U6uCM4YSVl+oCo/V
/OWeQ3s371KAjZNv+81iv6tZGpPPfKnCEFnBDP/L/oq1qz9T25sDEG0qCWe8n2qK
V12/AiL+ZJCzXEP103q8Er1cT23sWOWxeMtQNjQovJ/oXc5oqur0kXk9o1Ku2DZN
JHc/6kRRP5MLM4LBj00Z0MsOu2xVtoR36LFuUl+mzcWpWi3WN/ByqHY9SnFIdA9e
p8QwZEu+EbZWAtCkEgELAzYxUCPMmujIkJOYPntPkPsQY+PuNCOJfn6mkNEcn/7L
PaMszE/+EbLgV+yDkpxhYmYwyna0ryd+lacIBONZRnWsqhy/NwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFECnHSeBe0sOkxB9LRTMwg56bXFRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMTU1ZmJhN2UtMTIzOS0z
MmNiLWI5NTUtYmU5ZGRhZDM2MzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgNQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEASlRTD0YYTLruV1gTw41TwK0pKJVHTSNqVuxWhEqbUtnlfI56L2+9ONDX
zd+1oajv04snNSB1ypuYYfCdhtC8cpZjR3Fw+FEsn3xZiayjFzgaPvVwcYEfCEqo
M/lf57TTTfr21EvykTJRQpJFZM/RU3CMyFgZySYKwhbclku9OCQZ3zjC9axPt7zR
M0S9jmiLDYJlYU4AzJ8kCWAbvg0V5PdpwsIgGJfzwueH5bPkiPrK2lYihaeE2wf4
GVBpbjNG1p09whNSHK7Gv1H0DwRRJRlieqXHq50pigOjJTrguJcWKeDjYYQZ1+Nz
vYO29+NmCgKYpJmsSmv9UQT/WnHQnA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:03:52 2025 by rpki-client