Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/218f560a-ecaa-33a5-a563-15b00d5ffd62.roa
File:                     218f560a-ecaa-33a5-a563-15b00d5ffd62.roa (raw, json)
Hash identifier:          hpmjLa1X/MOX/engBu9h9r44IdplIv3MdiDWQwQL3v8=
Subject key identifier:   1E:8A:AF:1C:F6:7D:D9:C3:2D:F3:C0:66:E9:47:97:97:93:AB:D4:1B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F30C9C8B4A5B0372989493980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/218f560a-ecaa-33a5-a563-15b00d5ffd62.roa
Signing time:             Fri 09 Sep 2022 12:00:00 +0000
ROA not before:           Fri 09 Sep 2022 12:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        156.5.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:30:c9:c8:b4:a5:b0:37:29:89:49:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep  9 12:00:00 2022 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=55ac5b35-cee5-4fe8-8431-71a21b179db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2b:1d:53:7d:f0:f0:d7:1c:8f:7f:75:33:48:
                    07:8a:dd:a6:f3:f8:b3:68:60:5a:1f:3d:83:3b:d9:
                    15:0c:16:5c:30:25:56:80:65:b1:7b:1b:8c:f6:bd:
                    6f:cb:b4:a6:4c:41:5e:77:60:a5:05:d2:70:72:56:
                    1f:a7:bd:0e:1b:85:78:6a:66:e3:2e:61:b6:8a:c2:
                    80:87:eb:97:2b:22:30:83:09:bb:ec:e1:9f:46:fa:
                    62:45:db:3c:91:c2:d0:25:a1:38:ec:a5:b4:a6:8a:
                    f0:b0:a2:3c:15:60:ac:28:2c:04:dd:bd:30:f4:66:
                    ed:08:ec:ea:d8:e1:64:5a:51:43:74:27:4c:21:4e:
                    17:52:79:88:5b:c6:82:e3:21:c1:8a:8d:48:18:b6:
                    8f:3d:b5:71:27:08:09:83:10:6b:8a:bf:e4:5e:2e:
                    fe:7b:e4:42:9c:13:8a:1e:ab:49:0e:52:21:90:ff:
                    18:14:6c:d0:8d:a1:c9:91:43:a3:91:e4:4c:ab:f8:
                    91:6d:05:73:38:0c:9b:ec:af:e9:44:7d:07:fe:ef:
                    4f:5b:a2:f3:65:8f:2a:e2:4a:77:80:ba:67:ec:51:
                    4e:61:ea:5c:51:ab:ca:f9:5e:8a:d8:b8:ee:47:73:
                    5a:13:a7:ef:48:6c:f9:7e:d2:87:ff:98:6c:25:e0:
                    f9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:8A:AF:1C:F6:7D:D9:C3:2D:F3:C0:66:E9:47:97:97:93:AB:D4:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/218f560a-ecaa-33a5-a563-15b00d5ffd62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.5.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:10:f2:dd:61:6b:4f:25:31:ee:7c:ca:9f:f5:8d:68:8d:08:
         c9:f0:a8:3b:7d:63:3d:55:d0:6c:8b:ad:bb:2c:52:50:ce:91:
         de:68:c0:42:b1:cf:60:20:23:d0:af:2e:33:e7:a3:bf:b1:7a:
         c8:b5:10:b9:68:60:cc:09:39:b5:5b:d9:cf:c5:d1:10:6e:69:
         d4:17:6f:77:cb:67:30:90:4d:3f:1a:1b:08:d2:95:77:0d:11:
         fb:c1:b3:cd:e3:5d:c9:c3:a3:d6:fa:a9:b6:57:34:0e:e1:61:
         56:ef:e3:70:17:34:1d:0f:61:b5:75:d8:6a:3c:18:51:96:8c:
         a7:09:98:f9:6d:cb:8f:e8:84:4c:49:d9:fb:bf:9a:26:42:79:
         96:fb:a4:ef:3e:e1:ff:d3:38:e9:62:b4:73:90:cc:0a:70:18:
         1c:89:52:df:b2:fd:70:35:55:8f:67:ef:11:f2:a2:f0:24:94:
         77:85:82:20:56:c7:ea:46:a6:1c:7a:9c:a6:5c:8b:96:ef:99:
         9d:78:75:69:e0:c9:60:7a:36:23:ec:23:b9:e9:c1:03:18:e8:
         38:7d:33:32:f0:06:18:53:74:15:54:8f:27:b1:30:ec:8a:dd:
         c5:6d:31:01:00:95:07:7b:9a:0a:f5:c4:c9:88:8b:65:6f:44:
         24:07:f0:95
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8wyci0pbA3KYlJOYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDkwOTEyMDAwMFoXDTIyMTAxNTA0MDAwMFowLzEtMCsGA1UEAxMk
NTVhYzViMzUtY2VlNS00ZmU4LTg0MzEtNzFhMjFiMTc5ZGI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSsdU33w8Nccj391M0gHit2m8/izaGBaHz2D
O9kVDBZcMCVWgGWxexuM9r1vy7SmTEFed2ClBdJwclYfp70OG4V4ambjLmG2isKA
h+uXKyIwgwm77OGfRvpiRds8kcLQJaE47KW0porwsKI8FWCsKCwE3b0w9GbtCOzq
2OFkWlFDdCdMIU4XUnmIW8aC4yHBio1IGLaPPbVxJwgJgxBrir/kXi7+e+RCnBOK
HqtJDlIhkP8YFGzQjaHJkUOjkeRMq/iRbQVzOAyb7K/pRH0H/u9PW6LzZY8q4kp3
gLpn7FFOYepcUavK+V6K2LjuR3NaE6fvSGz5ftKH/5hsJeD5KQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFB6Krxz2fdnDLfPAZulHl5eTq9QbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjE4ZjU2MGEtZWNhYS0z
M2E1LWE1NjMtMTViMDBkNWZmZDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnAUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEABhDy3WFrTyUx7nzKn/WNaI0IyfCoO31jPVXQbIutuyxSUM6R3mjAQrHP
YCAj0K8uM+ejv7F6yLUQuWhgzAk5tVvZz8XREG5p1Bdvd8tnMJBNPxobCNKVdw0R
+8GzzeNdycOj1vqptlc0DuFhVu/jcBc0HQ9htXXYajwYUZaMpwmY+W3Lj+iETEnZ
+7+aJkJ5lvuk7z7h/9M46WK0c5DMCnAYHIlS37L9cDVVj2fvEfKi8CSUd4WCIFbH
6kamHHqcplyLlu+ZnXh1aeDJYHo2I+wjuenBAxjoOH0zMvAGGFN0FVSPJ7Ew7Ird
xW0xAQCVB3uaCvXEyYiLZW9EJAfwlQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:14 2025 by rpki-client