Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24fb0bf6-bea0-30a0-a4a2-ba703a436c8c.roa
File:                     24fb0bf6-bea0-30a0-a4a2-ba703a436c8c.roa (raw, json)
Hash identifier:          PI1E9rLsgAZupgpbs0MX/fRFzhJVK03AjOOMuZa1pUM=
Subject key identifier:   58:C6:C6:BF:09:CE:E1:1A:58:AE:AC:44:56:3A:C1:DF:3C:F7:C7:63
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E7677FA172A784BD885C71400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24fb0bf6-bea0-30a0-a4a2-ba703a436c8c.roa
Signing time:             Mon 04 Jul 2022 12:00:00 +0000
ROA not before:           Mon 04 Jul 2022 12:00:00 +0000
ROA not after:            Tue 09 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.158.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:76:77:fa:17:2a:78:4b:d8:85:c7:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul  4 12:00:00 2022 GMT
            Not After : Aug  9 04:00:00 2022 GMT
        Subject: CN=a2b1ac7b-55e3-4ad7-ae2a-b730c5d00cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:28:d7:18:53:d1:ab:19:b5:3f:d3:47:1c:02:
                    03:f6:c4:33:76:f1:23:f0:ec:95:04:34:b8:6f:6d:
                    3e:df:b0:22:da:b4:ab:1a:79:7e:f6:78:f4:f2:2a:
                    cd:dc:95:88:65:12:8e:c6:cc:a2:40:de:9a:d8:f7:
                    60:b2:00:0e:c2:23:b3:41:13:97:b3:45:0a:6a:7b:
                    37:28:a4:77:d8:ac:36:8e:5b:74:6e:ee:23:ff:74:
                    78:99:dc:1e:7b:6f:a2:9c:77:19:1a:5a:b1:15:62:
                    fd:47:d6:06:87:83:9d:f1:65:ed:85:aa:23:ba:7c:
                    a8:66:90:cb:d1:26:3d:c5:3d:e6:f1:8a:d9:11:12:
                    57:a7:c1:48:b6:77:6e:45:e9:73:da:a9:41:1f:01:
                    e0:9c:19:b5:32:9f:dd:31:5f:f9:5b:0d:19:9d:46:
                    ad:8b:34:68:d8:40:8d:91:cb:6a:d8:3b:20:53:6e:
                    4d:0c:d2:90:33:a6:b1:f4:e0:54:ec:4a:d9:d1:3a:
                    9f:3b:42:6a:a6:1f:5b:b8:17:09:ea:b8:9d:40:49:
                    a1:f2:d9:10:a3:b9:4a:17:08:c5:10:c0:74:bd:cb:
                    23:62:1d:e6:1d:5c:5d:3f:f9:69:7e:fc:ac:c6:8d:
                    a7:df:d8:28:53:36:05:fb:0e:0d:8e:b2:27:50:16:
                    db:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C6:C6:BF:09:CE:E1:1A:58:AE:AC:44:56:3A:C1:DF:3C:F7:C7:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24fb0bf6-bea0-30a0-a4a2-ba703a436c8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.158.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:11:78:f9:11:63:db:6a:16:44:2d:15:25:6b:73:41:02:b7:
         ea:47:dc:9f:40:fb:06:d0:e1:80:3b:ea:56:34:2a:7e:4c:5f:
         f7:76:ec:fd:53:3b:41:66:c1:12:6b:06:44:b3:00:e8:7e:bf:
         b0:c3:f9:ff:a1:b7:04:f1:b7:1e:98:2e:7a:51:54:da:7a:59:
         67:72:10:a4:69:0d:6a:95:12:7b:e7:20:51:19:3b:f9:e4:54:
         e9:00:87:eb:62:63:29:ab:22:67:d1:65:b9:4b:e7:cb:00:fd:
         72:bf:63:11:0a:f7:47:b7:0f:22:2a:06:d4:22:4c:f3:c1:e4:
         f2:c0:bd:99:f5:8a:09:18:7e:c9:3d:a7:12:9c:96:7e:75:5d:
         af:30:50:b0:b8:88:7f:f0:67:52:a5:96:a3:c8:d9:31:59:6a:
         38:be:60:24:b7:fa:10:ed:d0:82:ac:8a:1e:ed:d0:09:dc:d0:
         f7:4e:d0:8d:d9:f5:0e:c6:d2:f9:7c:6f:51:1c:8a:f1:28:ef:
         4a:78:34:da:44:c2:74:af:3c:10:7a:37:ef:3f:1b:f8:ea:80:
         92:64:83:f8:79:3e:5b:1e:a6:fc:7b:49:f0:05:b9:34:0d:3c:
         dc:4d:79:a7:ef:c6:e3:68:b6:a8:eb:38:82:27:81:73:08:9a:
         dd:5a:c2:cc
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD52d/oXKnhL2IXHFAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcwNDEyMDAwMFoXDTIyMDgwOTA0MDAwMFowLzEtMCsGA1UEAxMk
YTJiMWFjN2ItNTVlMy00YWQ3LWFlMmEtYjczMGM1ZDAwY2JhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCjXGFPRqxm1P9NHHAID9sQzdvEj8OyVBDS4
b20+37Ai2rSrGnl+9nj08irN3JWIZRKOxsyiQN6a2PdgsgAOwiOzQROXs0UKans3
KKR32Kw2jlt0bu4j/3R4mdwee2+inHcZGlqxFWL9R9YGh4Od8WXthaojunyoZpDL
0SY9xT3m8YrZERJXp8FItnduRelz2qlBHwHgnBm1Mp/dMV/5Ww0ZnUatizRo2ECN
kctq2DsgU25NDNKQM6ax9OBU7ErZ0TqfO0Jqph9buBcJ6ridQEmh8tkQo7lKFwjF
EMB0vcsjYh3mHVxdP/lpfvysxo2n39goUzYF+w4NjrInUBbb5wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFjGxr8JzuEaWK6sRFY6wd8898djMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjRmYjBiZjYtYmVhMC0z
MGEwLWE0YTItYmE3MDNhNDM2YzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEJ4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAGBF4+RFj22oWRC0VJWtzQQK36kfcn0D7BtDhgDvqVjQqfkxf93bs/VM7
QWbBEmsGRLMA6H6/sMP5/6G3BPG3HpguelFU2npZZ3IQpGkNapUSe+cgURk7+eRU
6QCH62JjKasiZ9FluUvnywD9cr9jEQr3R7cPIioG1CJM88Hk8sC9mfWKCRh+yT2n
EpyWfnVdrzBQsLiIf/BnUqWWo8jZMVlqOL5gJLf6EO3QgqyKHu3QCdzQ907Qjdn1
DsbS+XxvURyK8SjvSng02kTCdK88EHo37z8b+OqAkmSD+Hk+Wx6m/HtJ8AW5NA08
3E15p+/G42i2qOs4gieBcwia3VrCzA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:04:02 2025 by rpki-client