Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/211ae688-3bcc-34ad-9371-a1cf9ca5afa9.roa
File:                     211ae688-3bcc-34ad-9371-a1cf9ca5afa9.roa (raw, json)
Hash identifier:          d0Tz8y3L8dJR8y1Nm6lRHAlXNH4l54O2X92FvQSfziI=
Subject key identifier:   83:53:5B:26:A3:E0:94:AD:79:AC:45:49:FE:D0:1A:E3:D3:FF:A5:8D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584024EB914BCB0E7A334ACEAA00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/211ae688-3bcc-34ad-9371-a1cf9ca5afa9.roa
Signing time:             Mon 05 Dec 2022 12:00:00 +0000
ROA not before:           Mon 05 Dec 2022 12:00:00 +0000
ROA not after:            Tue 10 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        40.178.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:24:eb:91:4b:cb:0e:7a:33:4a:ce:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  5 12:00:00 2022 GMT
            Not After : Jan 10 05:00:00 2023 GMT
        Subject: CN=5442876c-aed7-48d3-8c62-727e77f69860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a9:0c:84:52:b3:43:1d:d1:52:75:de:ec:8c:
                    55:3a:43:86:ae:cd:c2:82:41:eb:75:05:78:28:aa:
                    6c:e6:8c:58:be:9f:bf:49:c7:89:ab:b5:f9:07:dd:
                    74:93:b1:d1:22:6d:95:7b:e3:51:a0:84:b9:3b:de:
                    c3:24:59:32:43:75:71:f7:79:96:31:48:bc:42:3b:
                    21:9e:1c:46:2e:38:8e:b8:f9:a3:8b:4e:be:01:88:
                    57:fa:89:f4:9e:18:3b:6a:76:f1:d0:8d:e5:97:ef:
                    88:eb:1c:47:a8:2c:92:a0:da:0c:b1:ab:0e:90:cb:
                    f1:1d:fc:e2:b5:23:36:38:ed:a2:b4:fd:a3:df:e2:
                    c2:7e:79:5d:fc:00:80:48:f6:5c:9a:14:b4:9c:e7:
                    26:4d:a0:b6:13:6e:c1:03:08:ce:ff:57:61:13:17:
                    17:80:85:c6:b8:a6:31:60:68:d2:09:f2:e1:bd:42:
                    12:4b:bb:9c:9a:23:1d:a2:c7:33:dd:1c:8b:9f:97:
                    5a:ac:65:b5:a7:50:50:a6:52:98:4f:68:a0:67:e5:
                    ca:5e:95:04:81:36:c8:84:7a:ae:84:15:cb:22:15:
                    89:a7:49:31:4c:7c:34:39:23:77:0a:7d:ac:e8:14:
                    b3:6c:ab:3b:35:8f:bd:f4:89:d0:3f:81:67:f0:b7:
                    02:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:53:5B:26:A3:E0:94:AD:79:AC:45:49:FE:D0:1A:E3:D3:FF:A5:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/211ae688-3bcc-34ad-9371-a1cf9ca5afa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.178.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:05:15:73:ab:c3:2a:c4:e6:e8:41:e5:b9:24:6f:d2:b8:4e:
         e0:e8:5c:08:5c:03:e4:ef:88:9e:ed:db:b5:ab:7c:54:9e:40:
         ef:fc:64:f1:56:b6:9c:26:9d:a3:c6:98:cd:39:c4:fb:07:25:
         f9:c4:0a:4f:f8:64:e7:18:ee:7b:e5:25:b7:ef:e5:2a:9f:5f:
         76:3a:47:16:62:f5:3d:22:a7:36:2f:05:ce:01:6a:4e:1a:aa:
         ac:4f:55:bb:af:12:a8:fd:ff:53:34:81:d8:bb:d5:43:5d:46:
         22:b2:40:b7:04:fc:cb:02:8c:f7:14:c8:24:5e:b6:a9:8e:10:
         59:05:6d:44:51:e1:00:1c:c0:27:e8:8a:ad:06:54:a0:20:76:
         04:fb:4f:5d:34:e0:a6:11:65:29:9f:41:c7:b6:89:50:c2:b8:
         71:9b:98:db:64:75:6e:ed:07:c9:b9:52:1d:0d:fd:b5:1d:6b:
         b5:5c:93:a0:95:5a:b6:6d:08:eb:31:30:90:88:a4:13:71:89:
         9b:a7:9c:13:ac:04:c0:f2:19:ce:50:2d:52:ee:f5:15:34:1d:
         c2:ad:29:bf:f7:15:6c:74:c7:e8:df:b7:9f:31:8e:6d:71:25:
         ad:a5:73:99:78:8a:df:27:04:3a:c3:22:e2:76:4b:f2:f1:86:
         3d:f7:8f:41
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAk65FLyw56M0rOqgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwNTEyMDAwMFoXDTIzMDExMDA1MDAwMFowLzEtMCsGA1UEAxMk
NTQ0Mjg3NmMtYWVkNy00OGQzLThjNjItNzI3ZTc3ZjY5ODYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKkMhFKzQx3RUnXe7IxVOkOGrs3CgkHrdQV4
KKps5oxYvp+/SceJq7X5B910k7HRIm2Ve+NRoIS5O97DJFkyQ3Vx93mWMUi8Qjsh
nhxGLjiOuPmji06+AYhX+on0nhg7anbx0I3ll++I6xxHqCySoNoMsasOkMvxHfzi
tSM2OO2itP2j3+LCfnld/ACASPZcmhS0nOcmTaC2E27BAwjO/1dhExcXgIXGuKYx
YGjSCfLhvUISS7ucmiMdoscz3RyLn5darGW1p1BQplKYT2igZ+XKXpUEgTbIhHqu
hBXLIhWJp0kxTHw0OSN3Cn2s6BSzbKs7NY+99InQP4Fn8LcC9QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFINTWyaj4JSteaxFSf7QGuPT/6WNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjExYWU2ODgtM2JjYy0z
NGFkLTkzNzEtYTFjZjljYTVhZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKLIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEANgUVc6vDKsTm6EHluSRv0rhO4OhcCFwD5O+Inu3btat8VJ5A7/xk8Va2
nCado8aYzTnE+wcl+cQKT/hk5xjue+Ult+/lKp9fdjpHFmL1PSKnNi8FzgFqThqq
rE9Vu68SqP3/UzSB2LvVQ11GIrJAtwT8ywKM9xTIJF62qY4QWQVtRFHhABzAJ+iK
rQZUoCB2BPtPXTTgphFlKZ9Bx7aJUMK4cZuY22R1bu0HyblSHQ39tR1rtVyToJVa
tm0I6zEwkIikE3GJm6ecE6wEwPIZzlAtUu71FTQdwq0pv/cVbHTH6N+3nzGObXEl
raVzmXiK3ycEOsMi4nZL8vGGPfePQQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:59 2025 by rpki-client