Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/19093f43-0363-3750-9bd8-c74235a98c29.roa
File:                     19093f43-0363-3750-9bd8-c74235a98c29.roa (raw, json)
Hash identifier:          wLSxhNeix9zqv8XmV+uecDHb5S04jGW82gfnXTqsfb4=
Subject key identifier:   67:E5:AB:1D:F0:30:49:80:B4:BD:14:08:C3:16:D9:5F:06:05:A9:DE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F8EBF4377EA730CE6D170E300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/19093f43-0363-3750-9bd8-c74235a98c29.roa
Signing time:             Wed 12 Oct 2022 12:00:00 +0000
ROA not before:           Wed 12 Oct 2022 12:00:00 +0000
ROA not after:            Thu 17 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.179.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8e:bf:43:77:ea:73:0c:e6:d1:70:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 12 12:00:00 2022 GMT
            Not After : Nov 17 05:00:00 2022 GMT
        Subject: CN=d64a4721-617c-43c4-9abf-e0fe36385c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:82:0f:7a:73:d8:bc:fb:78:46:cd:37:ea:89:
                    cf:aa:ee:73:2a:88:c8:02:4a:5b:ad:03:fa:13:34:
                    26:ea:59:f6:41:1a:8e:7a:85:35:9c:c3:5b:bc:02:
                    6b:df:be:2c:03:82:6f:81:f2:35:a9:92:99:95:59:
                    3b:50:ab:ae:3f:1d:eb:e3:cc:83:3d:c9:bc:e1:b7:
                    ae:0a:7b:c5:13:ef:a7:05:47:0d:f8:47:bd:38:3e:
                    f2:d0:47:9e:1b:3f:9c:86:00:b2:6d:38:42:e8:89:
                    cd:fb:76:1d:fb:1a:34:c2:53:54:ec:65:30:9c:3c:
                    a7:71:de:c3:4a:5c:40:ad:c2:db:d1:01:84:bc:be:
                    0c:cc:8e:62:7d:7b:0e:51:d2:e3:0f:79:a3:2f:4d:
                    a4:52:95:a7:31:4c:6f:32:b7:f1:c2:f5:2e:18:7d:
                    10:fd:ec:e5:37:26:6c:a2:da:93:02:06:54:6a:c2:
                    6d:ac:e1:0d:7d:8b:fe:3d:21:cb:ad:44:15:13:5f:
                    79:bc:02:42:b0:5b:f1:12:76:91:50:9e:b9:33:0e:
                    04:0b:e7:25:cd:90:e9:56:88:b3:8a:b9:c7:01:78:
                    bb:75:30:89:6a:ec:61:0c:6c:6c:dc:56:4d:0a:d9:
                    ec:3a:de:3d:33:be:2c:f2:a1:46:59:2e:89:13:31:
                    23:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E5:AB:1D:F0:30:49:80:B4:BD:14:08:C3:16:D9:5F:06:05:A9:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/19093f43-0363-3750-9bd8-c74235a98c29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.179.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:65:bf:7a:27:9b:2b:11:a5:0b:34:00:89:64:43:47:c7:12:
         0c:ca:6d:cd:f9:34:e7:fd:10:a2:05:20:a2:c4:91:96:29:70:
         5f:f9:00:90:ca:54:8b:5e:7b:a6:b9:e6:ba:a5:37:d5:60:dd:
         d6:3a:54:88:eb:bc:c6:70:e4:9b:f9:27:93:60:40:2a:47:04:
         a3:25:a4:db:bd:14:56:a3:3e:4a:52:f5:e9:b6:6f:a1:19:fd:
         44:45:00:e1:bb:29:bb:ae:a1:59:2b:93:86:54:f0:a6:73:01:
         03:60:e7:49:f7:fd:64:72:c4:32:30:8f:44:52:14:8f:b7:14:
         f4:06:4f:cd:52:3c:52:16:33:2e:e1:fb:3e:fc:63:cc:f3:5b:
         a1:f5:4c:67:b8:fb:92:19:24:3e:64:27:6e:5b:6f:34:c7:03:
         d8:5a:8f:9c:8e:39:36:a2:71:0b:52:bf:27:e0:ca:67:70:bf:
         e4:29:84:7f:70:eb:d4:3c:cb:37:8d:1c:87:99:72:e0:8c:ce:
         50:49:d0:05:8c:18:0c:27:07:1c:62:86:60:80:1f:3d:5d:d7:
         b6:45:c1:6b:d9:e8:ab:32:19:ac:45:b1:6b:61:6c:5f:b9:ca:
         fa:b8:9b:33:c7:b7:06:ed:14:b6:72:93:93:83:fc:de:df:3f:
         ac:16:45:b7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+Ov0N36nMM5tFw4wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAxMjEyMDAwMFoXDTIyMTExNzA1MDAwMFowLzEtMCsGA1UEAxMk
ZDY0YTQ3MjEtNjE3Yy00M2M0LTlhYmYtZTBmZTM2Mzg1YzMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioIPenPYvPt4Rs036onPqu5zKojIAkpbrQP6
EzQm6ln2QRqOeoU1nMNbvAJr374sA4JvgfI1qZKZlVk7UKuuPx3r48yDPcm84beu
CnvFE++nBUcN+Ee9OD7y0EeeGz+chgCybThC6InN+3Yd+xo0wlNU7GUwnDyncd7D
SlxArcLb0QGEvL4MzI5ifXsOUdLjD3mjL02kUpWnMUxvMrfxwvUuGH0Q/ezlNyZs
otqTAgZUasJtrOENfYv+PSHLrUQVE195vAJCsFvxEnaRUJ65Mw4EC+clzZDpVoiz
irnHAXi7dTCJauxhDGxs3FZNCtnsOt49M74s8qFGWS6JEzEjdwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGflqx3wMEmAtL0UCMMW2V8GBaneMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMTkwOTNmNDMtMDM2My0z
NzUwLTliZDgtYzc0MjM1YTk4YzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAELMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgGW/eiebKxGlCzQAiWRDR8cSDMptzfk05/0QogUgosSRlilwX/kAkMpU
i157prnmuqU31WDd1jpUiOu8xnDkm/knk2BAKkcEoyWk270UVqM+SlL16bZvoRn9
REUA4bspu66hWSuThlTwpnMBA2DnSff9ZHLEMjCPRFIUj7cU9AZPzVI8UhYzLuH7
PvxjzPNbofVMZ7j7khkkPmQnbltvNMcD2FqPnI45NqJxC1K/J+DKZ3C/5CmEf3Dr
1DzLN40ch5ly4IzOUEnQBYwYDCcHHGKGYIAfPV3XtkXBa9noqzIZrEWxa2FsX7nK
+ribM8e3Bu0UtnKTk4P83t8/rBZFtw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:19 2025 by rpki-client