Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/20d138d6-794c-3421-baaa-97b4c42a41cb.roa
File:                     20d138d6-794c-3421-baaa-97b4c42a41cb.roa (raw, json)
Hash identifier:          FbVxviL3EuGKgz3WVmQXmp/++cVjdAHlAH0AWBY6MlU=
Subject key identifier:   05:CA:D3:9B:1F:9A:FE:5E:D0:AC:1E:1B:F2:07:CF:37:CC:7A:EA:6F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584072BD8DCAAF2596834C946CC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/20d138d6-794c-3421-baaa-97b4c42a41cb.roa
Signing time:             Mon 02 Jan 2023 12:00:00 +0000
ROA not before:           Mon 02 Jan 2023 12:00:00 +0000
ROA not after:            Tue 07 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        56.167.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:72:bd:8d:ca:af:25:96:83:4c:94:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  2 12:00:00 2023 GMT
            Not After : Feb  7 05:00:00 2023 GMT
        Subject: CN=113b1751-7ba7-4b49-a1c8-4179df84cea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:95:ef:30:5b:7e:99:34:e5:f0:1a:f0:de:63:
                    b4:f3:b0:f4:8a:1b:9d:c2:14:1a:ad:5f:79:6e:90:
                    a5:21:41:30:ed:c3:a3:fe:34:20:ac:a3:b3:d8:32:
                    7c:e2:72:91:3b:62:9d:44:88:0c:50:42:47:e2:32:
                    89:ee:fb:ea:cf:b3:fe:c4:93:cd:c3:57:10:f3:90:
                    5a:fc:8d:1a:d8:5a:ff:98:e3:a4:b3:cf:91:35:14:
                    91:d3:5a:5a:6c:53:a8:ec:11:9f:bd:f0:c0:9d:90:
                    6e:5d:56:49:1c:60:01:c2:39:00:e6:38:01:78:7c:
                    24:e0:a4:39:2b:fe:a9:d3:2e:9b:83:b0:94:9b:12:
                    a4:1d:f7:19:22:81:e2:55:fd:01:07:8e:9a:f2:f6:
                    1a:79:40:e5:84:9a:82:22:c6:d5:50:e3:af:e4:33:
                    2d:0a:a1:45:46:b7:b5:1a:8c:6a:0c:59:56:b1:9b:
                    66:ef:3f:f8:e1:60:86:30:05:43:37:f4:c7:a5:1a:
                    84:30:ea:8d:6a:cd:5b:0c:31:49:9e:ee:83:6c:2d:
                    20:80:6a:ca:69:9c:15:af:73:cc:20:54:cd:21:d8:
                    cf:3d:3f:cb:8f:01:f4:60:5d:e7:b6:99:b8:cf:ef:
                    a1:f4:2a:b5:52:99:2d:79:7d:f2:40:c8:5e:a8:6c:
                    02:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CA:D3:9B:1F:9A:FE:5E:D0:AC:1E:1B:F2:07:CF:37:CC:7A:EA:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/20d138d6-794c-3421-baaa-97b4c42a41cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.167.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:76:d1:a0:f4:cd:50:b7:b1:5e:bf:18:a1:d6:7b:dd:cb:29:
         9d:9e:74:82:be:a1:b9:d0:e7:67:87:fc:7c:2c:f0:7c:e1:c3:
         60:4a:ee:e5:e3:9c:93:f4:96:e2:76:75:e1:24:46:18:81:76:
         f0:7e:74:00:2c:9e:a6:a8:ec:88:fb:0c:29:70:4a:50:87:2c:
         3c:41:34:f9:36:11:7d:9e:a0:d9:83:4e:c6:54:4c:ef:b7:a7:
         ae:f9:7a:f7:1e:86:d3:21:a3:4b:f5:d6:29:5d:7f:e4:c3:df:
         b3:c9:bd:f8:b9:f1:e2:5b:64:8b:a7:5a:76:a1:2f:ee:89:7c:
         97:39:b7:45:7d:72:4c:13:83:a3:76:99:4a:f9:28:b6:9c:03:
         87:6b:3f:01:e5:a4:20:84:a8:5b:15:22:3b:18:db:42:6c:40:
         1a:c0:a1:12:af:89:3a:91:53:6d:5d:b4:b8:ad:bb:62:81:29:
         9a:10:ee:cb:b1:b5:bf:0e:38:98:10:41:b3:45:98:35:d5:e1:
         1f:a6:98:f7:41:84:dc:ea:fb:e4:e0:fd:5a:06:9c:e6:0e:e7:
         de:58:fd:46:69:02:94:0e:d8:88:1d:70:1a:e6:51:52:96:32:
         3d:67:20:5f:a9:ac:12:9f:fa:ca:0a:9b:af:cb:4a:7b:1d:a9:
         7a:80:3e:0c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEByvY3KryWWg0yUbMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEwMjEyMDAwMFoXDTIzMDIwNzA1MDAwMFowLzEtMCsGA1UEAxMk
MTEzYjE3NTEtN2JhNy00YjQ5LWExYzgtNDE3OWRmODRjZWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJXvMFt+mTTl8Brw3mO087D0ihudwhQarV95
bpClIUEw7cOj/jQgrKOz2DJ84nKRO2KdRIgMUEJH4jKJ7vvqz7P+xJPNw1cQ85Ba
/I0a2Fr/mOOks8+RNRSR01pabFOo7BGfvfDAnZBuXVZJHGABwjkA5jgBeHwk4KQ5
K/6p0y6bg7CUmxKkHfcZIoHiVf0BB46a8vYaeUDlhJqCIsbVUOOv5DMtCqFFRre1
GoxqDFlWsZtm7z/44WCGMAVDN/THpRqEMOqNas1bDDFJnu6DbC0ggGrKaZwVr3PM
IFTNIdjPPT/LjwH0YF3ntpm4z++h9Cq1UpkteX3yQMheqGwCcwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAXK05sfmv5e0KweG/IHzzfMeupvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjBkMTM4ZDYtNzk0Yy0z
NDIxLWJhYWEtOTdiNGM0MmE0MWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOKcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAK3bRoPTNULexXr8YodZ73cspnZ50gr6hudDnZ4f8fCzwfOHDYEru5eOc
k/SW4nZ14SRGGIF28H50ACyepqjsiPsMKXBKUIcsPEE0+TYRfZ6g2YNOxlRM77en
rvl69x6G0yGjS/XWKV1/5MPfs8m9+Lnx4ltki6dadqEv7ol8lzm3RX1yTBODo3aZ
SvkotpwDh2s/AeWkIISoWxUiOxjbQmxAGsChEq+JOpFTbV20uK27YoEpmhDuy7G1
vw44mBBBs0WYNdXhH6aY90GE3Or75OD9Wgac5g7n3lj9RmkClA7YiB1wGuZRUpYy
PWcgX6msEp/6ygqbr8tKex2peoA+DA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:48:00 2025 by rpki-client