Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24711753-0c0f-3326-bf3b-bfe431ce0450.roa
File:                     24711753-0c0f-3326-bf3b-bfe431ce0450.roa (raw, json)
Hash identifier:          DkM/sBfGp19SMdi7jAy977UfQAVOMvF4guZcWlTgVGE=
Subject key identifier:   6A:59:A6:29:3F:81:F0:90:BE:19:5F:38:01:B4:2B:FF:F2:A4:68:3C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858404B73A2542BB194B43738AF80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24711753-0c0f-3326-bf3b-bfe431ce0450.roa
Signing time:             Mon 19 Dec 2022 16:54:08 +0000
ROA not before:           Mon 19 Dec 2022 16:54:08 +0000
ROA not after:            Tue 24 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        16.86.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:4b:73:a2:54:2b:b1:94:b4:37:38:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 19 16:54:08 2022 GMT
            Not After : Jan 24 05:00:00 2023 GMT
        Subject: CN=bad0b0ea-b967-4607-a975-5a881375a913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ae:e1:a7:d2:97:94:75:14:48:ca:fd:6a:62:
                    6a:c8:08:a7:e3:6a:1e:26:2b:26:e0:50:9c:ca:94:
                    8f:0d:12:a7:c8:55:fb:09:c2:43:01:d0:f0:5a:d1:
                    e8:cb:0c:83:1a:a0:e5:85:db:dd:1c:e9:e6:4d:8b:
                    3c:45:2d:1e:46:3a:dc:d5:eb:22:01:f9:7f:0e:25:
                    0c:4a:62:dc:01:ca:42:b8:dc:52:2f:8e:2b:a9:92:
                    0a:c8:75:87:e8:53:c9:9d:71:a8:27:65:21:0d:c9:
                    e1:89:dd:ba:38:4d:da:10:c2:9b:51:dd:e4:29:df:
                    81:32:f2:a0:77:d9:fe:b0:30:b9:f9:59:6e:d4:89:
                    db:2f:d4:2e:16:f4:12:a0:16:6f:1f:04:60:ec:02:
                    ca:51:bb:28:84:98:b9:e3:5f:d2:81:4d:5a:b8:d9:
                    c3:b0:c6:b5:b5:b2:7d:95:35:2d:99:2b:9a:6a:72:
                    64:ab:a6:36:99:c9:1a:0d:f8:75:86:d2:ec:cb:91:
                    a0:da:74:f4:fa:9a:d5:61:53:5d:6b:83:ab:0c:1f:
                    fe:c0:5c:d6:32:37:2e:61:ae:ce:f2:d0:a9:bc:25:
                    a9:08:aa:b9:04:85:d8:ff:99:4a:1a:e4:ef:f5:77:
                    e6:14:cf:93:ee:c4:02:3d:89:49:07:14:bc:f7:d8:
                    82:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:59:A6:29:3F:81:F0:90:BE:19:5F:38:01:B4:2B:FF:F2:A4:68:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24711753-0c0f-3326-bf3b-bfe431ce0450.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.86.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:81:3b:9d:7f:de:38:5c:84:38:07:75:d4:80:72:db:18:53:
         f1:e0:b6:61:37:23:0a:bb:26:a3:35:27:d8:b5:ba:82:eb:33:
         68:2d:85:73:b2:86:a8:5c:c2:82:0c:b3:f2:e2:0a:54:03:40:
         26:8f:28:a2:d7:81:12:0e:5f:65:87:46:d9:f7:2d:6a:3c:27:
         61:7a:ad:a6:d9:77:a8:4d:d8:3e:34:93:94:f3:26:b9:f5:2d:
         4f:85:36:79:69:a6:fe:7c:28:22:19:ff:9e:8f:ba:45:c2:a2:
         0f:75:b4:12:64:2d:38:50:30:cd:e7:4c:82:4d:96:5d:0f:71:
         2f:0c:8b:5a:4d:07:a9:86:cf:f1:56:6b:c5:9e:e0:65:5e:99:
         6d:7e:e8:34:ef:02:4a:e8:f0:91:fa:5b:19:d5:0c:ad:ff:b7:
         f1:be:2e:5d:5d:b2:e3:3b:44:2c:aa:8f:b6:6d:f7:9d:0a:30:
         8f:b5:0e:43:87:a2:8b:28:b8:f3:74:35:b1:cd:0a:fa:90:2c:
         75:af:0a:90:f4:06:c4:a0:80:eb:54:ca:1f:96:c3:b8:f2:00:
         2a:f2:96:87:71:24:04:62:b2:f4:54:14:80:b8:1c:23:76:3f:
         8b:88:40:20:08:5f:1c:8b:64:58:4a:67:7a:7b:38:25:1a:69:
         e1:d4:30:c9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBLc6JUK7GUtDc4r4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxOTE2NTQwOFoXDTIzMDEyNDA1MDAwMFowLzEtMCsGA1UEAxMk
YmFkMGIwZWEtYjk2Ny00NjA3LWE5NzUtNWE4ODEzNzVhOTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0q7hp9KXlHUUSMr9amJqyAin42oeJism4FCc
ypSPDRKnyFX7CcJDAdDwWtHoywyDGqDlhdvdHOnmTYs8RS0eRjrc1esiAfl/DiUM
SmLcAcpCuNxSL44rqZIKyHWH6FPJnXGoJ2UhDcnhid26OE3aEMKbUd3kKd+BMvKg
d9n+sDC5+Vlu1InbL9QuFvQSoBZvHwRg7ALKUbsohJi541/SgU1auNnDsMa1tbJ9
lTUtmSuaanJkq6Y2mckaDfh1htLsy5Gg2nT0+prVYVNda4OrDB/+wFzWMjcuYa7O
8tCpvCWpCKq5BIXY/5lKGuTv9XfmFM+T7sQCPYlJBxS899iCrQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGpZpik/gfCQvhlfOAG0K//ypGg8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjQ3MTE3NTMtMGMwZi0z
MzI2LWJmM2ItYmZlNDMxY2UwNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEFYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAroE7nX/eOFyEOAd11IBy2xhT8eC2YTcjCrsmozUn2LW6guszaC2Fc7KG
qFzCggyz8uIKVANAJo8ooteBEg5fZYdG2fctajwnYXqtptl3qE3YPjSTlPMmufUt
T4U2eWmm/nwoIhn/no+6RcKiD3W0EmQtOFAwzedMgk2WXQ9xLwyLWk0HqYbP8VZr
xZ7gZV6ZbX7oNO8CSujwkfpbGdUMrf+38b4uXV2y4ztELKqPtm33nQowj7UOQ4ei
iyi483Q1sc0K+pAsda8KkPQGxKCA61TKH5bDuPIAKvKWh3EkBGKy9FQUgLgcI3Y/
i4hAIAhfHItkWEpnens4JRpp4dQwyQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:45 2025 by rpki-client