Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/257ad177-d70d-3457-94bb-53c6f8c18012.roa
File:                     257ad177-d70d-3457-94bb-53c6f8c18012.roa (raw, json)
Hash identifier:          rFXaL7gJ4QkE8N6mydqWZMOlxNG4w/XPKq7D96HTzso=
Subject key identifier:   97:7C:0F:4E:61:73:EB:85:07:2E:B8:FD:F5:2D:70:29:60:43:83:5A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E9306D753A24CBBDAAA4B03DE
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/257ad177-d70d-3457-94bb-53c6f8c18012.roa
Signing time:             Thu 14 Jul 2022 21:12:08 +0000
ROA not before:           Thu 14 Jul 2022 21:12:08 +0000
ROA not after:            Fri 19 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        76.211.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:93:06:d7:53:a2:4c:bb:da:aa:4b:03:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 14 21:12:08 2022 GMT
            Not After : Aug 19 04:00:00 2022 GMT
        Subject: CN=957178a1-cd66-4fea-8cc5-a8c0a44cad35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cb:04:17:76:55:e0:d7:af:3c:c3:9b:8d:78:
                    4e:57:5a:c5:c8:b2:fe:23:fe:68:dc:d4:ea:28:ad:
                    41:cf:19:c7:71:9c:f2:26:10:b0:2c:6d:a0:96:74:
                    1f:27:a0:80:a5:08:27:f2:06:fb:61:61:10:b3:a6:
                    be:97:d0:14:c6:01:fc:4b:7e:9b:76:a3:76:e8:ef:
                    bf:37:5e:65:e6:7a:bb:11:13:1c:df:34:ad:78:4f:
                    62:03:04:29:89:7d:08:00:76:56:c6:2a:4e:8e:60:
                    39:93:60:7b:4d:3a:7a:35:a0:73:ee:23:7e:81:de:
                    b0:7c:68:8e:82:4b:0f:b3:81:f1:33:55:2e:70:94:
                    e0:f1:48:cc:08:a4:f2:b2:39:65:bd:5d:9a:0d:99:
                    7b:ac:0f:12:ca:85:d8:37:35:6f:2c:ef:3d:d9:e9:
                    f9:04:97:c0:97:4a:1d:1f:b1:2d:9b:83:9c:c4:4f:
                    1f:2b:be:20:38:45:86:d9:9e:a9:d4:24:8f:39:d4:
                    f6:41:eb:0e:8d:79:a6:2e:a5:4e:2f:ed:cd:bf:ae:
                    6b:82:8f:0b:b0:de:44:c6:56:71:83:c2:84:3c:43:
                    ac:01:9d:7f:c7:dc:8c:f1:2b:a3:1a:23:8b:1c:7c:
                    3b:0d:f3:33:70:fa:27:c6:3f:98:5a:4c:5e:94:b9:
                    0c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7C:0F:4E:61:73:EB:85:07:2E:B8:FD:F5:2D:70:29:60:43:83:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/257ad177-d70d-3457-94bb-53c6f8c18012.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.211.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:71:ee:be:68:01:3d:65:a9:51:7a:41:14:dc:6e:5a:40:b7:
         66:2b:04:26:6e:be:21:20:0a:eb:a5:1f:48:ba:34:f0:f1:a2:
         92:85:d6:88:66:b1:8b:d9:df:8e:68:6f:c0:53:8b:b6:bb:bc:
         61:b8:27:89:18:9e:e3:fa:e8:e1:46:a0:96:4b:2f:6c:8d:c9:
         ba:ac:79:f9:b4:d3:b2:6e:85:ae:10:86:26:56:4e:02:09:ff:
         fa:9a:30:3a:ce:1b:84:6b:03:84:b6:e4:57:33:f1:4c:06:f2:
         35:34:2f:ad:7a:9c:7d:b6:83:2c:72:99:b1:33:bd:52:8d:cd:
         5b:bd:24:11:32:09:80:eb:7b:bb:bb:5e:ef:26:2d:94:83:5b:
         44:52:36:ae:fe:a8:bc:d5:a9:4c:c5:2e:a5:d5:c1:f7:78:41:
         cd:f4:bc:c7:b5:b7:4d:c9:a4:40:2e:76:e6:19:3e:2b:8e:05:
         9c:87:2d:40:a9:25:a7:d3:ba:63:63:c5:31:f8:15:6f:26:b3:
         a4:6d:88:40:77:a5:28:72:ae:d2:f5:01:b9:84:9c:c2:35:98:
         28:73:2f:25:29:f7:ec:a1:4c:38:d8:ea:4d:44:a0:07:85:4d:
         aa:cb:93:c1:27:08:67:e2:94:a1:95:d1:ed:da:27:2d:1d:72:
         d8:f6:ab:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD6TBtdToky72qpLA94wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcxNDIxMTIwOFoXDTIyMDgxOTA0MDAwMFowLzEtMCsGA1UEAxMk
OTU3MTc4YTEtY2Q2Ni00ZmVhLThjYzUtYThjMGE0NGNhZDM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhssEF3ZV4NevPMObjXhOV1rFyLL+I/5o3NTq
KK1BzxnHcZzyJhCwLG2glnQfJ6CApQgn8gb7YWEQs6a+l9AUxgH8S36bdqN26O+/
N15l5nq7ERMc3zSteE9iAwQpiX0IAHZWxipOjmA5k2B7TTp6NaBz7iN+gd6wfGiO
gksPs4HxM1UucJTg8UjMCKTysjllvV2aDZl7rA8SyoXYNzVvLO892en5BJfAl0od
H7Etm4OcxE8fK74gOEWG2Z6p1CSPOdT2QesOjXmmLqVOL+3Nv65rgo8LsN5ExlZx
g8KEPEOsAZ1/x9yM8SujGiOLHHw7DfMzcPonxj+YWkxelLkMwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJd8D05hc+uFBy64/fUtcClgQ4NaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjU3YWQxNzctZDcwZC0z
NDU3LTk0YmItNTNjNmY4YzE4MDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGTNMAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEhx7r5oAT1lqVF6QRTcblpAt2YrBCZuviEgCuulH0i6NPDxopKF1ohm
sYvZ345ob8BTi7a7vGG4J4kYnuP66OFGoJZLL2yNybqsefm007Juha4QhiZWTgIJ
//qaMDrOG4RrA4S25Fcz8UwG8jU0L616nH22gyxymbEzvVKNzVu9JBEyCYDre7u7
Xu8mLZSDW0RSNq7+qLzVqUzFLqXVwfd4Qc30vMe1t03JpEAuduYZPiuOBZyHLUCp
JafTumNjxTH4FW8ms6RtiEB3pShyrtL1AbmEnMI1mChzLyUp9+yhTDjY6k1EoAeF
TarLk8EnCGfilKGV0e3aJy0dctj2q14=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:22 2025 by rpki-client