Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25242630-2f35-3c69-ab7a-5131916e4367.roa
File:                     25242630-2f35-3c69-ab7a-5131916e4367.roa (raw, json)
Hash identifier:          U6vXXXcXEPjd3CtnltFFfwp6nF/WcYsAPw1KBI76Vj0=
Subject key identifier:   E3:D4:95:E2:40:DF:88:A5:BE:22:4A:A0:D0:BB:54:85:83:19:D3:B2
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE3F7043F9BB7C1005FBF1900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25242630-2f35-3c69-ab7a-5131916e4367.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.157.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e3:f7:04:3f:9b:b7:c1:00:5f:bf:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=92014605-23d9-4d0b-852a-2093814e5c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4f:b4:59:84:48:66:72:6f:01:5b:02:b3:4b:
                    54:74:9f:87:e1:bf:d9:37:98:4a:49:3e:0f:88:9d:
                    f4:3d:24:a5:7a:49:c8:b2:ee:93:2c:b6:f8:ec:b3:
                    e8:90:62:af:f4:8d:42:95:31:ac:2d:13:97:7a:84:
                    ec:78:68:f0:52:7f:47:a7:5a:f2:44:e0:ca:9f:d6:
                    1c:14:26:05:08:78:26:c2:f3:7a:f5:9a:3c:db:1f:
                    23:f9:df:44:8b:bf:a3:87:88:83:cb:77:60:60:87:
                    0e:0b:2e:89:fa:27:1f:2d:02:52:6c:f6:e0:d4:69:
                    b4:06:b7:8f:99:52:cb:06:f7:31:27:f5:ba:5d:68:
                    b3:7e:f4:11:95:5a:14:a2:ba:1e:a9:a1:1b:9d:70:
                    e2:1c:fd:78:2a:81:40:01:34:dc:17:cf:fa:0f:56:
                    08:bb:2c:43:fd:d8:4e:34:36:8e:b7:35:82:a7:98:
                    85:6d:33:1a:aa:0d:1b:01:f6:a5:df:8d:0d:b7:99:
                    f4:33:1f:bd:da:68:10:79:99:d3:a6:99:35:66:c7:
                    3c:b4:3d:85:ff:cc:19:ce:ca:ed:22:8b:b5:68:84:
                    cf:1f:22:f5:ad:29:4d:30:7e:5e:b4:45:d9:70:4a:
                    a6:dd:d9:61:4f:bc:3a:43:82:c0:91:eb:49:fe:e4:
                    f6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D4:95:E2:40:DF:88:A5:BE:22:4A:A0:D0:BB:54:85:83:19:D3:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25242630-2f35-3c69-ab7a-5131916e4367.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.157.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:07:13:52:8f:09:0b:a3:94:4b:78:31:ab:08:09:f7:3e:ee:
         35:92:dd:dc:7d:90:5c:f5:fd:d5:f2:1e:59:78:5d:89:b5:ae:
         fc:a8:42:77:e8:e7:99:b1:5a:f5:16:8f:a7:b2:f7:17:03:2f:
         1f:6d:94:a7:87:68:96:ec:08:b8:d3:2b:03:95:42:5b:da:42:
         1c:56:a9:53:f1:a5:21:2a:20:fa:e6:51:bd:f4:19:dd:6e:6b:
         74:b4:84:61:e7:5f:a5:27:c0:a7:11:fe:b3:dc:40:3e:2d:94:
         66:0e:59:6b:93:a5:7c:f7:f8:e6:7f:c3:87:d1:d5:d4:4d:e2:
         a9:24:ba:7a:9e:bd:40:28:7f:05:ab:1e:8c:8e:f6:9a:10:55:
         25:8d:23:c1:3f:4a:41:de:73:3b:24:67:b0:97:86:fd:d3:bc:
         64:ac:24:e5:67:50:69:a3:54:43:89:e1:55:bd:ef:69:d1:5c:
         d7:26:82:77:2c:b4:9d:bc:7e:8e:6d:70:68:72:e6:8b:67:9f:
         6c:d5:af:b5:00:67:05:b8:c9:21:ed:55:4a:a3:60:fc:41:5f:
         d8:bb:50:e9:99:02:b7:37:d4:8f:68:17:af:e7:bc:ba:eb:81:
         90:cf:a0:be:20:5d:c6:7d:f3:0a:96:f7:fa:cd:a3:7a:d7:f4:
         14:c8:6f:44
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzj9wQ/m7fBAF+/GQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDIxMTA1MDAwMFoXDTIyMDMxODA0MDAwMFowLzEtMCsGA1UEAxMk
OTIwMTQ2MDUtMjNkOS00ZDBiLTg1MmEtMjA5MzgxNGU1YzQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0+0WYRIZnJvAVsCs0tUdJ+H4b/ZN5hKST4P
iJ30PSSleknIsu6TLLb47LPokGKv9I1ClTGsLROXeoTseGjwUn9Hp1ryRODKn9Yc
FCYFCHgmwvN69Zo82x8j+d9Ei7+jh4iDy3dgYIcOCy6J+icfLQJSbPbg1Gm0BreP
mVLLBvcxJ/W6XWizfvQRlVoUoroeqaEbnXDiHP14KoFAATTcF8/6D1YIuyxD/dhO
NDaOtzWCp5iFbTMaqg0bAfal340Nt5n0Mx+92mgQeZnTppk1Zsc8tD2F/8wZzsrt
Iou1aITPHyL1rSlNMH5etEXZcEqm3dlhT7w6Q4LAketJ/uT2dQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOPUleJA34ilviJKoNC7VIWDGdOyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjUyNDI2MzAtMmYzNS0z
YzY5LWFiN2EtNTEzMTkxNmU0MzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEJ0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgQcTUo8JC6OUS3gxqwgJ9z7uNZLd3H2QXPX91fIeWXhdibWu/KhCd+jn
mbFa9RaPp7L3FwMvH22Up4doluwIuNMrA5VCW9pCHFapU/GlISog+uZRvfQZ3W5r
dLSEYedfpSfApxH+s9xAPi2UZg5Za5OlfPf45n/Dh9HV1E3iqSS6ep69QCh/Base
jI72mhBVJY0jwT9KQd5zOyRnsJeG/dO8ZKwk5WdQaaNUQ4nhVb3vadFc1yaCdyy0
nbx+jm1waHLmi2efbNWvtQBnBbjJIe1VSqNg/EFf2LtQ6ZkCtzfUj2gXr+e8uuuB
kM+gviBdxn3zCpb3+s2jetf0FMhvRA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:04 2025 by rpki-client