Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1930befc-2880-3aef-9d42-ae6e52375141.roa
File:                     1930befc-2880-3aef-9d42-ae6e52375141.roa (raw, json)
Hash identifier:          CKmUhze/GGNHE9w7X2DGMFKT0FgLxeYbChDnFvFMdbM=
Subject key identifier:   D5:B8:3D:0E:F1:EE:59:0C:4E:E6:83:39:01:F8:F9:45:82:1D:5B:DD
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FA4BB6DE201FC367A403D4620
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1930befc-2880-3aef-9d42-ae6e52375141.roa
Signing time:             Thu 20 Oct 2022 12:00:00 +0000
ROA not before:           Thu 20 Oct 2022 12:00:00 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        63.246.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a4:bb:6d:e2:01:fc:36:7a:40:3d:46:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 20 12:00:00 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=26c3f297-4ac9-4ce7-9121-312be8cce0e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:39:05:85:8f:ab:4b:8c:f1:9a:86:8c:0b:4c:
                    30:32:fa:9d:5e:d2:a1:e4:99:1b:76:33:d7:58:e1:
                    14:80:ad:cc:35:05:3c:99:8a:74:9a:11:74:9e:82:
                    9f:97:ee:92:a7:3e:59:d1:00:20:31:6e:34:a5:54:
                    d2:7e:9e:98:3e:82:61:4f:56:5e:70:3e:26:cb:33:
                    81:17:22:67:0e:df:e9:13:d1:eb:21:7f:97:08:11:
                    e9:34:50:05:16:cd:f7:f5:2a:6a:41:5d:0d:af:1b:
                    2d:64:f9:27:ac:90:b2:32:e1:47:81:c2:15:75:fb:
                    b2:ad:51:e8:1a:da:ca:45:f3:20:9f:7c:4a:18:0c:
                    9c:27:78:a7:e9:9a:40:12:78:53:f4:85:97:5c:4d:
                    62:4f:32:52:eb:79:d4:1f:a6:0a:21:2e:2d:c1:be:
                    19:40:2e:9d:5e:f7:64:d3:28:23:0a:d5:97:52:2c:
                    c2:06:0a:c4:02:71:c2:f5:99:36:25:cd:a2:59:98:
                    fb:0b:ae:98:bc:c7:c9:3b:ba:c7:f3:dd:7d:ae:d8:
                    d7:f5:30:14:51:5d:a0:50:1e:81:7c:6f:34:a3:59:
                    6c:ba:56:ae:fc:c7:15:0a:3a:c6:64:26:67:ec:82:
                    8f:aa:79:fb:f0:d8:3b:a9:25:75:01:1b:62:d2:ca:
                    29:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B8:3D:0E:F1:EE:59:0C:4E:E6:83:39:01:F8:F9:45:82:1D:5B:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1930befc-2880-3aef-9d42-ae6e52375141.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:e1:76:51:a3:53:f7:03:44:62:f9:40:96:b6:06:e1:7b:64:
         fb:e3:f3:b4:3c:05:ad:d9:1b:b6:a6:91:64:45:55:4b:52:cd:
         64:59:de:55:25:c9:e9:5e:69:bc:5f:47:42:72:28:cc:57:ac:
         5a:bb:04:71:b6:9f:88:53:d3:ab:c4:d6:3a:00:69:7b:40:15:
         0b:0c:19:68:2c:23:68:76:b8:44:00:4f:0f:2f:7b:e6:95:da:
         6a:62:f5:f0:24:8e:f4:32:f4:84:a4:65:19:3f:3d:1c:2c:d3:
         55:37:41:17:c4:72:a0:0d:6f:fa:96:c2:e7:93:34:b1:0c:25:
         82:96:fd:35:d0:50:48:71:1c:cf:56:4f:53:85:b3:5f:50:a9:
         11:47:90:02:c8:a5:72:8a:80:40:48:bf:89:da:af:75:0c:bd:
         98:69:07:1d:1b:e5:15:1f:c0:9f:79:71:bc:65:51:5b:87:83:
         7a:ea:60:7c:d3:ee:55:9e:6e:fa:39:aa:ca:f9:56:64:50:64:
         e2:da:c2:ff:26:83:f5:89:63:e9:38:d5:b2:c4:8a:aa:78:75:
         77:89:ac:5a:47:eb:41:b4:f6:00:ee:52:5e:80:51:3b:7f:3b:
         b5:6e:bc:71:cb:af:cb:38:91:f7:ea:b4:d3:b1:4a:44:37:59:
         78:8f:49:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD+ku23iAfw2ekA9RiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAyMDEyMDAwMFoXDTIyMTEyNTA1MDAwMFowLzEtMCsGA1UEAxMk
MjZjM2YyOTctNGFjOS00Y2U3LTkxMjEtMzEyYmU4Y2NlMGU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTkFhY+rS4zxmoaMC0wwMvqdXtKh5JkbdjPX
WOEUgK3MNQU8mYp0mhF0noKfl+6Spz5Z0QAgMW40pVTSfp6YPoJhT1ZecD4myzOB
FyJnDt/pE9HrIX+XCBHpNFAFFs339SpqQV0NrxstZPknrJCyMuFHgcIVdfuyrVHo
GtrKRfMgn3xKGAycJ3in6ZpAEnhT9IWXXE1iTzJS63nUH6YKIS4twb4ZQC6dXvdk
0ygjCtWXUizCBgrEAnHC9Zk2Jc2iWZj7C66YvMfJO7rH8919rtjX9TAUUV2gUB6B
fG80o1lsulau/McVCjrGZCZn7IKPqnn78Ng7qSV1ARti0sopmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNW4PQ7x7lkMTuaDOQH4+UWCHVvdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMTkzMGJlZmMtMjg4MC0z
YWVmLTlkNDItYWU2ZTUyMzc1MTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEP/ZwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKjhdlGjU/cDRGL5QJa2BuF7ZPvj87Q8Ba3ZG7amkWRFVUtSzWRZ3lUl
yeleabxfR0JyKMxXrFq7BHG2n4hT06vE1joAaXtAFQsMGWgsI2h2uEQATw8ve+aV
2mpi9fAkjvQy9ISkZRk/PRws01U3QRfEcqANb/qWwueTNLEMJYKW/TXQUEhxHM9W
T1OFs19QqRFHkALIpXKKgEBIv4nar3UMvZhpBx0b5RUfwJ95cbxlUVuHg3rqYHzT
7lWebvo5qsr5VmRQZOLawv8mg/WJY+k41bLEiqp4dXeJrFpH60G09gDuUl6AUTt/
O7VuvHHLr8s4kffqtNOxSkQ3WXiPSX4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:38 2025 by rpki-client