Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1a7ce72e-0ff6-3be6-a936-cfbe9a3df628.roa
File:                     1a7ce72e-0ff6-3be6-a936-cfbe9a3df628.roa (raw, json)
Hash identifier:          mzf5srTmlYZFYVJlZe6mVW/XMrtbT8fALhf1ezaMDFk=
Subject key identifier:   1F:72:8D:5C:89:7F:34:6A:B2:03:61:05:F9:26:4D:95:72:BF:02:BA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FA1A6512DEF568CDFBF904A40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1a7ce72e-0ff6-3be6-a936-cfbe9a3df628.roa
Signing time:             Wed 19 Oct 2022 12:00:00 +0000
ROA not before:           Wed 19 Oct 2022 12:00:00 +0000
ROA not after:            Thu 24 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.116.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a1:a6:51:2d:ef:56:8c:df:bf:90:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 19 12:00:00 2022 GMT
            Not After : Nov 24 05:00:00 2022 GMT
        Subject: CN=ada76e91-577f-431e-b3f4-1f4487d579ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ad:a1:d5:bb:66:4a:ce:ef:f1:ac:bb:61:d2:
                    c5:d9:99:b3:b7:8f:c5:d2:52:18:ed:92:c0:41:10:
                    cf:57:42:81:12:af:87:b9:c6:00:18:ca:08:24:72:
                    22:8a:1c:14:a2:59:d5:cf:6d:f6:80:e3:fd:8d:1c:
                    ec:8d:e2:3d:c9:58:1b:8d:2d:5c:3e:ce:99:bc:8e:
                    f5:17:d0:50:0c:e4:dd:46:2a:f1:74:1e:07:79:63:
                    07:64:f6:b2:fb:4d:b6:fd:3a:90:06:e6:9a:d8:36:
                    68:4f:0a:8d:45:08:e3:ce:39:9e:01:4b:b3:48:17:
                    7d:3a:a2:9b:45:2f:ab:16:06:13:ba:fe:cf:70:ba:
                    7e:c9:be:52:19:a5:c8:06:69:86:d3:9f:16:67:72:
                    6a:88:66:c8:dd:21:f3:b0:89:18:b6:33:c4:27:8d:
                    fa:41:67:aa:7f:2a:7b:c4:5b:01:f2:67:36:9c:d6:
                    e6:8f:0d:b3:49:00:26:96:70:e1:13:8c:3b:7e:27:
                    c7:69:6c:f7:ad:b8:1f:d0:d1:17:04:6e:cb:a1:12:
                    bf:bd:b4:10:69:4f:e7:c5:01:68:99:96:bf:2d:b3:
                    57:a7:ce:8f:be:33:52:24:8b:f2:84:e2:7e:0b:6a:
                    e1:8d:4d:6e:df:e1:68:9b:57:ee:d3:b6:03:24:d1:
                    9f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:72:8D:5C:89:7F:34:6A:B2:03:61:05:F9:26:4D:95:72:BF:02:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1a7ce72e-0ff6-3be6-a936-cfbe9a3df628.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.116.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:c0:75:9b:a7:ab:93:bf:9a:a8:c1:e9:8a:1b:ed:16:27:2a:
         82:55:e2:7f:24:7f:e0:70:99:36:17:8c:e3:19:ba:02:95:39:
         4d:23:af:8d:53:7b:f2:7e:42:ff:21:d2:11:36:61:29:5c:8c:
         d6:29:3d:cb:c2:64:ab:1f:c7:b7:75:28:22:37:e7:ba:c2:09:
         10:0c:ce:c9:51:3e:c0:48:c1:71:87:4a:fe:41:88:c7:9d:5a:
         ae:96:4f:da:0c:80:73:a8:0e:89:8b:fa:c0:59:44:44:ff:d6:
         0d:21:f2:be:d2:1c:ae:74:12:ce:25:fb:fb:1e:1b:1c:7f:2e:
         50:2d:b3:d7:1b:95:03:39:13:28:6b:19:69:90:d4:81:b8:c1:
         bb:d7:9e:86:b0:e7:70:15:c1:a1:07:d5:e7:a0:39:10:28:1f:
         af:a5:62:40:83:5f:c4:8c:c9:a9:67:23:0f:d8:d0:85:ff:12:
         b5:1a:f2:8d:98:b2:85:02:58:88:22:5f:7f:44:e9:bd:93:52:
         cb:ce:8f:a0:b6:9e:81:cb:50:45:0c:b7:a9:64:d5:9a:ec:42:
         94:b0:4b:3e:a1:4a:d3:bc:7f:0b:b6:0c:b2:13:ee:3b:08:1b:
         93:30:1b:61:eb:0e:2e:7b:5a:9d:34:fd:57:f6:f8:fe:0b:94:
         4b:19:85:ed
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+hplEt71aM37+QSkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAxOTEyMDAwMFoXDTIyMTEyNDA1MDAwMFowLzEtMCsGA1UEAxMk
YWRhNzZlOTEtNTc3Zi00MzFlLWIzZjQtMWY0NDg3ZDU3OWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo62h1btmSs7v8ay7YdLF2Zmzt4/F0lIY7ZLA
QRDPV0KBEq+HucYAGMoIJHIiihwUolnVz232gOP9jRzsjeI9yVgbjS1cPs6ZvI71
F9BQDOTdRirxdB4HeWMHZPay+022/TqQBuaa2DZoTwqNRQjjzjmeAUuzSBd9OqKb
RS+rFgYTuv7PcLp+yb5SGaXIBmmG058WZ3JqiGbI3SHzsIkYtjPEJ436QWeqfyp7
xFsB8mc2nNbmjw2zSQAmlnDhE4w7fifHaWz3rbgf0NEXBG7LoRK/vbQQaU/nxQFo
mZa/LbNXp86PvjNSJIvyhOJ+C2rhjU1u3+Fom1fu07YDJNGfjwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFB9yjVyJfzRqsgNhBfkmTZVyvwK6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMWE3Y2U3MmUtMGZmNi0z
YmU2LWE5MzYtY2ZiZTlhM2RmNjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEHQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAr8B1m6erk7+aqMHpihvtFicqglXifyR/4HCZNheM4xm6ApU5TSOvjVN7
8n5C/yHSETZhKVyM1ik9y8Jkqx/Ht3UoIjfnusIJEAzOyVE+wEjBcYdK/kGIx51a
rpZP2gyAc6gOiYv6wFlERP/WDSHyvtIcrnQSziX7+x4bHH8uUC2z1xuVAzkTKGsZ
aZDUgbjBu9eehrDncBXBoQfV56A5ECgfr6ViQINfxIzJqWcjD9jQhf8StRryjZiy
hQJYiCJff0TpvZNSy86PoLaegctQRQy3qWTVmuxClLBLPqFK07x/C7YMshPuOwgb
kzAbYesOLntanTT9V/b4/guUSxmF7Q==
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:58:12 2025 by rpki-client