Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1587dd0a-c1b2-3dd4-b390-dc94127c4166.roa
File:                     1587dd0a-c1b2-3dd4-b390-dc94127c4166.roa (raw, json)
Hash identifier:          Tb7hL8uFHyZ9fwk1SLs9VyV6CS8rcz9uqVFSb+i601c=
Subject key identifier:   A4:8D:1C:C3:80:89:0F:B2:41:2C:45:8B:93:37:43:89:0D:99:B5:99
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FC2CD60A78FE42C255808D480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1587dd0a-c1b2-3dd4-b390-dc94127c4166.roa
Signing time:             Mon 31 Oct 2022 12:00:00 +0000
ROA not before:           Mon 31 Oct 2022 12:00:00 +0000
ROA not after:            Tue 06 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        173.83.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c2:cd:60:a7:8f:e4:2c:25:58:08:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 31 12:00:00 2022 GMT
            Not After : Dec  6 05:00:00 2022 GMT
        Subject: CN=be12634c-5ef2-4f0c-93e7-f0c1e496f27d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9a:60:68:f3:5b:dd:51:e1:cc:0b:c3:50:5f:
                    76:92:8a:22:46:93:8e:8f:64:69:b3:7a:56:e3:d0:
                    d2:47:5d:03:4f:a2:db:ab:8d:2b:ee:af:cf:29:e8:
                    f2:f9:1d:c5:66:17:ad:82:1e:c0:89:f3:e5:cc:89:
                    52:a4:69:78:ac:d3:20:e4:7d:b7:e8:62:1d:7b:78:
                    2b:14:78:cd:f1:95:79:59:bf:c7:01:89:2d:d0:11:
                    75:44:e0:03:a2:8b:a5:3d:f4:9e:5a:4a:7a:cd:30:
                    e7:1d:3c:ac:22:98:dd:04:98:19:80:17:27:2e:30:
                    49:98:5d:81:37:a6:8a:7b:fa:f0:9c:a9:14:a4:85:
                    64:2c:c7:8a:ba:41:09:bf:48:b7:88:5f:0b:4b:d8:
                    7c:98:3a:de:b9:08:ed:45:cf:02:28:09:88:ef:df:
                    9e:d1:56:46:99:21:f6:c0:ab:68:0d:6f:d0:49:34:
                    95:a9:e4:8a:d0:ff:9c:73:56:5f:a5:a8:1d:c4:8c:
                    ff:af:43:ab:70:fb:bf:e3:f5:82:4c:77:b6:cb:ac:
                    db:aa:23:e9:c5:5f:fd:fc:6c:54:d8:40:b3:c8:0f:
                    5c:0c:08:97:4f:8f:fc:c9:c7:15:ea:fc:cb:73:96:
                    4f:2c:bd:27:d9:14:78:a0:ac:ee:2b:a5:23:9b:e3:
                    66:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8D:1C:C3:80:89:0F:B2:41:2C:45:8B:93:37:43:89:0D:99:B5:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1587dd0a-c1b2-3dd4-b390-dc94127c4166.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.83.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:d1:42:e8:ed:d4:9c:f2:2c:59:8b:61:5a:aa:db:bb:8b:d2:
         cb:84:a7:91:29:1c:93:1d:ea:0d:62:9e:b5:38:4c:da:1e:d6:
         16:da:e0:5e:f4:2e:a0:59:5c:a9:b4:cf:c7:ae:a3:6a:0b:6c:
         34:6d:02:0f:cd:c7:c2:63:c0:af:09:b4:ae:fd:00:49:2d:2c:
         c9:e8:ad:db:6f:99:d1:68:6a:d7:2b:77:a8:74:ba:11:7a:ce:
         5e:e5:74:0b:6d:2b:1c:96:60:7a:73:25:7a:05:12:2f:47:65:
         ad:70:0a:e7:29:8e:20:bf:01:5b:43:1e:3f:f8:75:69:bb:77:
         84:02:c0:ef:28:46:c8:9d:8a:95:0e:ec:dc:4e:6b:a3:39:29:
         41:b0:fe:e0:48:de:31:04:f5:30:71:73:d8:21:ac:44:b6:ef:
         b7:4f:23:81:82:32:5b:8a:03:06:b3:93:30:94:f3:06:73:29:
         d2:77:02:c5:07:08:76:4e:e1:bc:ca:bc:6a:82:d7:c5:87:cf:
         af:a4:15:f8:ed:00:8a:6e:fd:53:0c:74:01:83:94:09:4b:fa:
         a1:0e:d2:89:a5:72:71:18:32:17:95:c2:6d:db:9c:a8:ba:d7:
         51:d3:ed:bd:9c:fe:a0:37:59:8e:0b:4a:5f:c5:b9:d5:e3:cd:
         0f:2d:93:c2
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/CzWCnj+QsJVgI1IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAzMTEyMDAwMFoXDTIyMTIwNjA1MDAwMFowLzEtMCsGA1UEAxMk
YmUxMjYzNGMtNWVmMi00ZjBjLTkzZTctZjBjMWU0OTZmMjdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZpgaPNb3VHhzAvDUF92kooiRpOOj2Rps3pW
49DSR10DT6Lbq40r7q/PKejy+R3FZhetgh7AifPlzIlSpGl4rNMg5H236GIde3gr
FHjN8ZV5Wb/HAYkt0BF1ROADooulPfSeWkp6zTDnHTysIpjdBJgZgBcnLjBJmF2B
N6aKe/rwnKkUpIVkLMeKukEJv0i3iF8LS9h8mDreuQjtRc8CKAmI79+e0VZGmSH2
wKtoDW/QSTSVqeSK0P+cc1ZfpagdxIz/r0OrcPu/4/WCTHe2y6zbqiPpxV/9/GxU
2ECzyA9cDAiXT4/8yccV6vzLc5ZPLL0n2RR4oKzuK6Ujm+Nm2wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKSNHMOAiQ+yQSxFi5M3Q4kNmbWZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMTU4N2RkMGEtYzFiMi0z
ZGQ0LWIzOTAtZGM5NDEyN2M0MTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArVMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZ9FC6O3UnPIsWYthWqrbu4vSy4SnkSkckx3qDWKetThM2h7WFtrgXvQu
oFlcqbTPx66jagtsNG0CD83HwmPArwm0rv0ASS0syeit22+Z0Whq1yt3qHS6EXrO
XuV0C20rHJZgenMlegUSL0dlrXAK5ymOIL8BW0MeP/h1abt3hALA7yhGyJ2KlQ7s
3E5rozkpQbD+4EjeMQT1MHFz2CGsRLbvt08jgYIyW4oDBrOTMJTzBnMp0ncCxQcI
dk7hvMq8aoLXxYfPr6QV+O0Aim79Uwx0AYOUCUv6oQ7SiaVycRgyF5XCbducqLrX
UdPtvZz+oDdZjgtKX8W51ePNDy2Twg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:48 2025 by rpki-client