Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1d3aed77-3dfe-3b54-a7e4-f3d45ffbb979.roa
File:                     1d3aed77-3dfe-3b54-a7e4-f3d45ffbb979.roa (raw, json)
Hash identifier:          Ryz0ik044QkfqYNmhfqN/y7ZuXuplS9RPZ+Z9yvyWYs=
Subject key identifier:   E7:4E:AA:A9:32:D1:19:CF:58:2F:ED:C7:9D:05:19:1E:37:B0:A5:E4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FCF7393F10DA633D815A09D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1d3aed77-3dfe-3b54-a7e4-f3d45ffbb979.roa
Signing time:             Fri 04 Nov 2022 12:00:00 +0000
ROA not before:           Fri 04 Nov 2022 12:00:00 +0000
ROA not after:            Sat 10 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        108.128.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cf:73:93:f1:0d:a6:33:d8:15:a0:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  4 12:00:00 2022 GMT
            Not After : Dec 10 05:00:00 2022 GMT
        Subject: CN=5c326913-0680-4dd3-acbf-9c74a428d153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7f:f2:b6:bb:3e:75:cc:70:bf:49:14:59:b6:
                    01:b4:1d:6f:d9:e9:15:be:9c:16:d2:8e:0d:1b:89:
                    80:48:6f:b9:9f:e7:f8:86:5e:54:df:82:2d:5e:22:
                    c6:fb:c7:e9:00:5b:8d:b4:22:8a:27:a3:2d:e1:42:
                    bd:66:d5:af:e0:83:af:15:36:9b:6f:83:6e:4a:43:
                    1b:b1:c7:12:99:99:38:0f:7a:74:83:a7:f0:b5:a0:
                    3b:5e:68:ff:8f:f7:a4:f4:d6:2f:6e:d1:0e:dd:4c:
                    f2:d9:df:a8:72:56:fc:63:fe:23:0e:f9:0b:b3:a7:
                    d9:8d:5c:27:83:e6:0d:c1:80:6a:03:1e:5c:25:88:
                    f7:d3:a0:c2:8e:32:04:f7:e9:2d:2a:f5:aa:a0:bb:
                    24:8a:c7:91:22:b5:38:46:b1:cc:06:32:eb:4f:27:
                    bf:82:36:1f:a0:9c:ec:6f:45:8b:49:60:8b:55:37:
                    2b:a2:b6:f7:64:c1:04:8a:31:2f:0c:eb:52:54:18:
                    16:58:da:58:5a:21:da:6f:83:0e:38:f4:ef:de:7c:
                    ad:bc:7d:6e:6a:b6:1f:4e:d9:69:b3:05:44:b6:76:
                    24:ab:2b:c9:6a:78:0a:d4:52:40:0d:21:c8:d1:a9:
                    23:91:6a:df:b6:63:39:f6:34:c2:33:6e:81:08:0c:
                    a1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4E:AA:A9:32:D1:19:CF:58:2F:ED:C7:9D:05:19:1E:37:B0:A5:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1d3aed77-3dfe-3b54-a7e4-f3d45ffbb979.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.128.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:ea:e2:27:f9:6a:ed:19:08:f0:5c:08:15:11:17:5c:a5:e3:
         f6:09:ed:a5:e4:e5:09:32:63:35:0c:59:42:2d:fe:16:2c:57:
         79:90:84:14:42:47:65:e0:e5:ac:af:86:71:fe:e1:62:83:f4:
         c8:6d:bf:6c:64:62:5f:3a:76:30:c2:9d:a7:20:ba:50:ff:a1:
         5d:cf:3b:08:aa:b8:fb:3a:6d:d6:6e:26:08:86:26:50:6b:7c:
         d6:dd:95:80:78:c6:3d:51:ed:91:97:30:23:36:ff:19:c7:67:
         6b:24:62:30:5d:c7:8c:fb:1b:38:5f:31:4c:71:15:77:d0:8d:
         99:5d:24:77:02:7e:cd:59:ab:9e:fe:f4:e4:6a:84:7c:cd:74:
         24:94:c4:aa:7e:40:8f:06:83:b6:43:ad:08:31:19:fe:c2:3d:
         e5:4e:8a:e7:c0:64:73:85:b3:6b:09:75:6c:3b:99:5c:ac:33:
         96:ac:d8:15:d0:75:b3:30:6c:2c:9d:47:e6:4f:14:81:2c:ad:
         ed:24:81:7c:98:df:6f:ef:39:a3:bb:a8:1b:b8:65:71:88:7e:
         24:c0:2d:6d:fc:af:00:bf:51:31:a8:1f:e7:d2:91:d0:0e:f8:
         0b:14:cc:a5:16:48:25:60:26:af:14:db:96:27:e1:29:20:3d:
         a6:24:71:10
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/Pc5PxDaYz2BWgnYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEwNDEyMDAwMFoXDTIyMTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
NWMzMjY5MTMtMDY4MC00ZGQzLWFjYmYtOWM3NGE0MjhkMTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH/ytrs+dcxwv0kUWbYBtB1v2ekVvpwW0o4N
G4mASG+5n+f4hl5U34ItXiLG+8fpAFuNtCKKJ6Mt4UK9ZtWv4IOvFTabb4NuSkMb
sccSmZk4D3p0g6fwtaA7Xmj/j/ek9NYvbtEO3Uzy2d+oclb8Y/4jDvkLs6fZjVwn
g+YNwYBqAx5cJYj306DCjjIE9+ktKvWqoLskiseRIrU4RrHMBjLrTye/gjYfoJzs
b0WLSWCLVTcrorb3ZMEEijEvDOtSVBgWWNpYWiHab4MOOPTv3nytvH1uarYfTtlp
swVEtnYkqyvJangK1FJADSHI0akjkWrftmM59jTCM26BCAyhPQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOdOqqky0RnPWC/tx50FGR43sKXkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMWQzYWVkNzctM2RmZS0z
YjU0LWE3ZTQtZjNkNDVmZmJiOTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDbIAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZOriJ/lq7RkI8FwIFREXXKXj9gntpeTlCTJjNQxZQi3+FixXeZCEFEJH
ZeDlrK+Gcf7hYoP0yG2/bGRiXzp2MMKdpyC6UP+hXc87CKq4+zpt1m4mCIYmUGt8
1t2VgHjGPVHtkZcwIzb/GcdnayRiMF3HjPsbOF8xTHEVd9CNmV0kdwJ+zVmrnv70
5GqEfM10JJTEqn5AjwaDtkOtCDEZ/sI95U6K58Bkc4Wzawl1bDuZXKwzlqzYFdB1
szBsLJ1H5k8UgSyt7SSBfJjfb+85o7uoG7hlcYh+JMAtbfyvAL9RMagf59KR0A74
CxTMpRZIJWAmrxTblifhKSA9piRxEA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:20 2025 by rpki-client