Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/227b55c9-cdbe-3f43-bfca-1c6cbf239fd0.roa
File:                     227b55c9-cdbe-3f43-bfca-1c6cbf239fd0.roa (raw, json)
Hash identifier:          kjgw1T8J7i3zyqbCtIKasFtmHpUgpJhJOhkMr4x5/ZQ=
Subject key identifier:   4D:26:77:91:A2:F0:13:B8:E7:AC:0C:FB:AB:AE:5E:5B:34:FA:EE:2E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DAD518C2DB32A778839AB6C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/227b55c9-cdbe-3f43-bfca-1c6cbf239fd0.roa
Signing time:             Sat 23 Apr 2022 12:00:00 +0000
ROA not before:           Sat 23 Apr 2022 12:00:00 +0000
ROA not after:            Sun 29 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.138.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ad:51:8c:2d:b3:2a:77:88:39:ab:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 23 12:00:00 2022 GMT
            Not After : May 29 04:00:00 2022 GMT
        Subject: CN=eb60bf23-6009-4883-a7e0-68198eed5cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:06:e9:1b:6f:c2:96:2a:ee:30:94:64:0d:19:
                    78:bd:38:7d:ab:a2:7e:b5:62:c8:ed:df:a2:b8:1a:
                    24:9a:40:78:64:6b:d9:13:3b:77:dc:a8:b4:a7:e9:
                    09:71:2d:b7:77:a0:cc:93:98:2b:f7:93:c9:38:fa:
                    87:2d:f6:fc:27:48:27:fa:c0:ce:7b:ff:e7:b3:48:
                    e6:dc:9e:34:f1:28:13:da:76:7f:02:26:d0:5a:d8:
                    89:9e:65:cc:94:c4:4a:1a:9d:8f:f9:20:04:68:70:
                    89:55:cd:81:b5:4f:b7:ef:e6:7b:c9:f0:35:ea:3b:
                    4f:d2:3c:0d:7c:05:6d:06:0e:60:21:83:7b:4c:ce:
                    0a:33:73:70:74:15:02:d9:6f:19:30:1b:8e:bd:97:
                    44:ef:04:02:0f:77:2b:47:06:69:ed:74:32:b4:97:
                    f9:b1:eb:36:0e:e3:0b:0c:38:5a:ee:cc:a4:65:bf:
                    99:ea:0f:ae:23:79:e0:4d:53:67:49:3f:75:d0:d7:
                    51:ae:d0:19:b8:94:24:49:d3:38:f6:3c:df:f8:ad:
                    c0:6c:a2:79:ca:d0:da:3f:3f:13:f6:bc:71:70:ab:
                    7d:d6:d9:98:52:1a:cf:f3:a4:a4:79:4a:a7:98:5e:
                    0b:70:5a:7d:39:16:3f:7e:09:01:2a:7b:b8:f8:c2:
                    ff:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:26:77:91:A2:F0:13:B8:E7:AC:0C:FB:AB:AE:5E:5B:34:FA:EE:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/227b55c9-cdbe-3f43-bfca-1c6cbf239fd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.138.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ec:9d:6c:81:35:cf:8f:71:fe:a4:dd:5a:c4:93:8c:55:97:
         57:d1:68:76:83:68:b5:d2:30:04:c7:ca:4b:89:5e:c9:ee:20:
         e7:c6:31:43:ab:4d:dd:12:d7:24:82:60:a3:ca:92:a2:ce:cc:
         e5:f3:70:b1:63:05:12:37:4e:dd:b7:dc:c3:9f:e4:96:45:63:
         1b:e3:c8:9e:13:23:19:6e:1a:aa:af:c7:c8:c7:73:6a:97:f6:
         5b:b9:93:72:31:8b:69:aa:9e:78:ec:d1:1a:34:8b:46:69:1a:
         02:c7:c3:df:b2:98:45:b5:79:f2:1f:c7:5e:d5:59:69:09:93:
         01:f3:c2:07:3b:74:d5:c5:d7:cd:b5:c2:b7:c7:14:2d:31:d1:
         7f:d6:1e:8c:9f:34:50:59:65:62:47:5a:74:d2:24:72:9c:75:
         2f:cf:16:29:31:62:9e:ca:70:d9:1a:e3:96:56:9d:b7:dd:3e:
         fe:2a:1a:d0:36:37:cd:d6:c5:f5:5a:03:03:56:42:1e:e6:72:
         f2:50:b8:64:20:26:63:4e:bf:8a:26:a2:a7:1b:9d:78:6a:c0:
         6e:14:84:1d:db:c2:c4:51:2a:d6:d2:13:57:78:1e:f6:7e:dc:
         f2:0e:7d:1b:a8:77:d0:5c:23:b0:36:3f:80:42:5e:30:1d:00:
         7c:ce:ce:76
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2tUYwtsyp3iDmrbAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDQyMzEyMDAwMFoXDTIyMDUyOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZWI2MGJmMjMtNjAwOS00ODgzLWE3ZTAtNjgxOThlZWQ1Y2IwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQbpG2/CliruMJRkDRl4vTh9q6J+tWLI7d+i
uBokmkB4ZGvZEzt33Ki0p+kJcS23d6DMk5gr95PJOPqHLfb8J0gn+sDOe//ns0jm
3J408SgT2nZ/AibQWtiJnmXMlMRKGp2P+SAEaHCJVc2BtU+37+Z7yfA16jtP0jwN
fAVtBg5gIYN7TM4KM3NwdBUC2W8ZMBuOvZdE7wQCD3crRwZp7XQytJf5ses2DuML
DDha7sykZb+Z6g+uI3ngTVNnST910NdRrtAZuJQkSdM49jzf+K3AbKJ5ytDaPz8T
9rxxcKt91tmYUhrP86SkeUqnmF4LcFp9ORY/fgkBKnu4+ML/dQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFE0md5Gi8BO456wM+6uuXls0+u4uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjI3YjU1YzktY2RiZS0z
ZjQzLWJmY2EtMWM2Y2JmMjM5ZmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEIowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPuydbIE1z49x/qTdWsSTjFWXV9FodoNotdIwBMfKS4leye4g58YxQ6tN
3RLXJIJgo8qSos7M5fNwsWMFEjdO3bfcw5/klkVjG+PInhMjGW4aqq/HyMdzapf2
W7mTcjGLaaqeeOzRGjSLRmkaAsfD37KYRbV58h/HXtVZaQmTAfPCBzt01cXXzbXC
t8cULTHRf9YejJ80UFllYkdadNIkcpx1L88WKTFinspw2Rrjlladt90+/ioa0DY3
zdbF9VoDA1ZCHuZy8lC4ZCAmY06/iiaipxudeGrAbhSEHdvCxFEq1tITV3ge9n7c
8g59G6h30FwjsDY/gEJeMB0AfM7Odg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:09 2025 by rpki-client