Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/266829a2-1b73-336f-a2af-f2181e00925b.roa
File:                     266829a2-1b73-336f-a2af-f2181e00925b.roa (raw, json)
Hash identifier:          Cnzngjsa/SzX6nARlgUtTA9I0sRnZwfopQPd76GHz8c=
Subject key identifier:   09:09:F1:B8:45:EE:BE:74:CC:2E:3A:87:AB:28:BD:A0:01:AF:1D:63
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EE1E48BACAEF1E69CCFD3D700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/266829a2-1b73-336f-a2af-f2181e00925b.roa
Signing time:             Fri 12 Aug 2022 14:42:08 +0000
ROA not before:           Fri 12 Aug 2022 14:42:08 +0000
ROA not after:            Fri 16 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.78.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e1:e4:8b:ac:ae:f1:e6:9c:cf:d3:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 12 14:42:08 2022 GMT
            Not After : Sep 16 04:00:00 2022 GMT
        Subject: CN=41fecb55-b0c5-4700-9eaa-c9ddf4f73042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:80:75:37:67:57:01:ea:22:ed:1e:d9:8d:be:
                    0e:c3:e9:5c:75:2a:8d:a5:88:88:74:78:e8:0b:3d:
                    6c:14:fe:84:61:f4:56:43:1d:95:40:01:89:ec:b4:
                    9c:e2:3e:da:6f:d1:98:b3:ae:eb:38:39:a4:76:91:
                    38:0d:96:6b:09:fa:02:7d:41:34:7f:a4:f4:43:d4:
                    ea:95:42:0b:51:d6:0f:c5:19:56:b7:31:6f:5b:cc:
                    00:5f:97:1b:e1:aa:41:4d:d4:d8:b1:de:5d:83:cf:
                    29:df:54:1e:2e:dd:92:22:87:9e:20:78:c5:1b:79:
                    50:1f:90:00:68:51:32:93:de:c0:07:5d:23:5f:df:
                    a2:43:75:4f:c6:35:da:f1:b7:f3:0c:71:24:66:25:
                    69:15:92:d2:1a:9a:af:2a:73:f9:b0:64:ca:0a:fa:
                    af:9c:44:f0:ce:6d:93:d2:f1:e1:12:1e:0b:f9:bd:
                    1b:47:58:45:ab:58:5e:ff:f9:2f:98:6e:0b:70:c3:
                    12:64:8a:1b:e0:42:d4:3d:82:5a:09:8f:50:18:79:
                    ba:ae:a5:b1:2b:ed:a4:4e:68:74:a0:57:df:92:6a:
                    b7:ff:0e:26:1b:c3:bd:94:15:c2:27:b0:e5:2f:07:
                    cd:68:db:50:b3:bc:15:84:ca:0b:f0:3d:b9:e5:89:
                    62:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:09:F1:B8:45:EE:BE:74:CC:2E:3A:87:AB:28:BD:A0:01:AF:1D:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/266829a2-1b73-336f-a2af-f2181e00925b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.78.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:51:33:89:ad:37:48:f9:7d:6f:f3:e6:bf:c3:b0:d9:7e:df:
         89:df:3c:d7:7e:fc:cf:99:5f:27:99:b6:8e:16:8f:45:fb:81:
         e9:e0:48:16:55:34:69:3e:5f:7a:0d:43:ee:a3:0e:ee:df:80:
         83:04:a3:9f:ee:29:ed:1d:47:29:3f:ca:10:a4:3a:c8:7c:53:
         a4:cd:23:cd:ea:02:be:8f:0e:d0:87:e9:48:4e:84:de:af:21:
         b7:e1:de:17:51:7c:0d:88:31:42:ee:24:a1:44:e1:c7:ab:fb:
         c4:91:69:d8:84:0a:d6:15:4d:f9:81:0f:15:55:47:59:d7:ec:
         aa:61:9c:9e:f3:ed:45:8c:e4:5a:ea:e6:4e:f7:3e:52:86:7e:
         d1:d2:2f:3b:16:89:e2:a5:85:1d:3b:4f:56:3b:2c:9c:66:9b:
         a3:bf:ee:cb:27:22:f3:e9:e2:e4:07:f6:94:6d:8f:0e:69:13:
         bf:f5:78:55:62:34:76:d8:24:13:5d:df:53:b6:37:2d:72:74:
         31:3b:02:a4:97:13:32:cc:2d:4d:9f:be:ef:30:42:b3:28:b8:
         c8:8a:4d:54:a8:13:90:e6:39:93:6c:45:69:46:a8:db:7d:03:
         20:5d:2f:fb:96:29:a8:42:ee:27:39:56:37:31:e7:ff:57:bb:
         c8:c0:d7:95
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD7h5IusrvHmnM/T1wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDgxMjE0NDIwOFoXDTIyMDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk
NDFmZWNiNTUtYjBjNS00NzAwLTllYWEtYzlkZGY0ZjczMDQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoB1N2dXAeoi7R7Zjb4Ow+lcdSqNpYiIdHjo
Cz1sFP6EYfRWQx2VQAGJ7LSc4j7ab9GYs67rODmkdpE4DZZrCfoCfUE0f6T0Q9Tq
lUILUdYPxRlWtzFvW8wAX5cb4apBTdTYsd5dg88p31QeLt2SIoeeIHjFG3lQH5AA
aFEyk97AB10jX9+iQ3VPxjXa8bfzDHEkZiVpFZLSGpqvKnP5sGTKCvqvnETwzm2T
0vHhEh4L+b0bR1hFq1he//kvmG4LcMMSZIob4ELUPYJaCY9QGHm6rqWxK+2kTmh0
oFffkmq3/w4mG8O9lBXCJ7DlLwfNaNtQs7wVhMoL8D255YliAQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAkJ8bhF7r50zC46h6sovaABrx1jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjY2ODI5YTItMWI3My0z
MzZmLWEyYWYtZjIxODFlMDA5MjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEE4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAJ1Ezia03SPl9b/Pmv8Ow2X7fid881378z5lfJ5m2jhaPRfuB6eBIFlU0
aT5feg1D7qMO7t+AgwSjn+4p7R1HKT/KEKQ6yHxTpM0jzeoCvo8O0IfpSE6E3q8h
t+HeF1F8DYgxQu4koUThx6v7xJFp2IQK1hVN+YEPFVVHWdfsqmGcnvPtRYzkWurm
Tvc+UoZ+0dIvOxaJ4qWFHTtPVjssnGabo7/uyyci8+ni5Af2lG2PDmkTv/V4VWI0
dtgkE13fU7Y3LXJ0MTsCpJcTMswtTZ++7zBCsyi4yIpNVKgTkOY5k2xFaUao230D
IF0v+5YpqELuJzlWNzHn/1e7yMDXlQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:54 2025 by rpki-client