Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/268866c6-17b9-321d-ba6c-8871f0d058cd.roa
File:                     268866c6-17b9-321d-ba6c-8871f0d058cd.roa (raw, json)
Hash identifier:          c6wBWZkml31TasyJAgpEq/w2jInns3SD2xkNy89dShA=
Subject key identifier:   D6:C1:0C:C8:03:81:28:D8:4C:BF:64:4F:67:D5:B5:BB:3B:4B:E5:94
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EC5B7535A36A742A56418C3C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/268866c6-17b9-321d-ba6c-8871f0d058cd.roa
Signing time:             Mon 01 Aug 2022 20:39:08 +0000
ROA not before:           Mon 01 Aug 2022 20:39:08 +0000
ROA not after:            Tue 06 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        40.181.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:c5:b7:53:5a:36:a7:42:a5:64:18:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug  1 20:39:08 2022 GMT
            Not After : Sep  6 04:00:00 2022 GMT
        Subject: CN=63936dbd-6a62-4f0c-bd56-bb0a6334ec0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e3:16:40:a0:90:42:d6:93:d0:9d:8f:53:25:
                    29:7e:b9:0d:8b:75:e1:04:16:fe:b7:01:0b:ca:df:
                    fe:41:bc:39:10:c3:9c:92:d0:1d:f4:f9:6c:7b:8a:
                    3d:0c:0b:84:bf:4e:88:1a:a6:6e:3f:8d:b8:f0:0a:
                    54:c4:39:cc:71:17:cb:ae:9d:ed:8e:a5:dc:2d:b7:
                    73:3d:bf:7e:fb:4e:8c:21:92:de:3c:da:65:3e:5b:
                    53:04:26:b3:6c:f3:e0:a3:49:2a:c8:44:9c:b0:1e:
                    65:2a:e4:c3:9e:49:48:49:a0:93:e4:3b:44:03:60:
                    58:fb:a6:8a:c4:6b:b8:02:51:cd:fe:36:c2:bf:05:
                    30:1f:04:df:3d:f2:ca:d1:c3:86:b5:9a:93:87:8a:
                    00:0e:53:cf:6e:1a:f7:c7:2f:cc:df:3b:2e:8d:52:
                    d3:eb:b7:62:57:72:99:49:a9:ce:a3:62:d0:63:b5:
                    d7:7d:28:92:75:aa:c5:3f:f0:d5:e0:b4:d3:bc:b4:
                    7c:c1:1f:1d:a9:32:eb:e0:fe:b9:3f:87:74:fe:44:
                    9c:14:83:fb:fb:10:8a:d0:16:a6:f9:b5:d3:a1:cf:
                    e6:64:fe:c6:1e:ec:5e:70:88:fa:0f:57:48:d1:ca:
                    2a:76:30:da:19:4c:cd:17:a8:0e:22:a7:ab:75:f0:
                    f4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C1:0C:C8:03:81:28:D8:4C:BF:64:4F:67:D5:B5:BB:3B:4B:E5:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/268866c6-17b9-321d-ba6c-8871f0d058cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.181.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:a6:b1:0f:ff:64:17:09:fd:13:87:29:55:93:66:79:25:4b:
         58:86:2c:c5:f5:fa:1f:2a:e5:a4:b3:a0:7b:c5:22:77:ed:6e:
         3f:57:9e:03:aa:f4:1d:b0:4e:a0:9a:c4:89:a9:65:c9:a0:f4:
         26:b6:5c:30:df:bc:e7:82:1b:1e:0c:61:8e:a2:fe:5e:e7:27:
         dc:89:6c:7b:d7:44:e8:5d:f4:c8:bf:a7:6c:f0:0c:11:e8:61:
         94:95:79:14:16:c0:44:ed:27:93:73:8a:f3:c5:ad:c1:f8:ce:
         ae:79:40:6d:d2:10:d7:26:e6:4e:70:95:98:d5:a5:3c:e0:e4:
         bd:0d:97:38:6c:f4:03:12:9b:98:bb:12:2f:f7:bc:c6:42:7f:
         1d:10:ad:77:e9:2f:49:e0:0f:17:df:b7:f8:f2:5a:84:c5:c7:
         3e:04:a7:bd:6b:8c:b7:b7:10:ae:af:31:3e:53:8c:0c:29:e5:
         76:45:0e:35:d5:0e:3f:ef:37:69:b9:b4:29:e6:82:34:a5:dc:
         c8:75:4f:fa:cf:a5:47:94:95:d0:d6:77:75:17:32:11:e3:00:
         56:c7:3f:da:2a:df:de:69:c4:ae:a8:3d:c5:c0:90:54:05:3c:
         cb:4f:01:cb:91:b2:8a:75:b2:e1:9f:e1:fa:db:b7:59:49:3c:
         f1:1d:0a:ef
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD7Ft1NaNqdCpWQYw8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDgwMTIwMzkwOFoXDTIyMDkwNjA0MDAwMFowLzEtMCsGA1UEAxMk
NjM5MzZkYmQtNmE2Mi00ZjBjLWJkNTYtYmIwYTYzMzRlYzBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOMWQKCQQtaT0J2PUyUpfrkNi3XhBBb+twEL
yt/+Qbw5EMOcktAd9Plse4o9DAuEv06IGqZuP4248ApUxDnMcRfLrp3tjqXcLbdz
Pb9++06MIZLePNplPltTBCazbPPgo0kqyEScsB5lKuTDnklISaCT5DtEA2BY+6aK
xGu4AlHN/jbCvwUwHwTfPfLK0cOGtZqTh4oADlPPbhr3xy/M3zsujVLT67diV3KZ
SanOo2LQY7XXfSiSdarFP/DV4LTTvLR8wR8dqTLr4P65P4d0/kScFIP7+xCK0Bam
+bXToc/mZP7GHuxecIj6D1dI0coqdjDaGUzNF6gOIqerdfD0mwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNbBDMgDgSjYTL9kT2fVtbs7S+WUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjY4ODY2YzYtMTdiOS0z
MjFkLWJhNmMtODg3MWYwZDA1OGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKLUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAR6axD/9kFwn9E4cpVZNmeSVLWIYsxfX6HyrlpLOge8Uid+1uP1eeA6r0
HbBOoJrEiallyaD0JrZcMN+854IbHgxhjqL+Xucn3Ilse9dE6F30yL+nbPAMEehh
lJV5FBbARO0nk3OK88WtwfjOrnlAbdIQ1ybmTnCVmNWlPODkvQ2XOGz0AxKbmLsS
L/e8xkJ/HRCtd+kvSeAPF9+3+PJahMXHPgSnvWuMt7cQrq8xPlOMDCnldkUONdUO
P+83abm0KeaCNKXcyHVP+s+lR5SV0NZ3dRcyEeMAVsc/2irf3mnErqg9xcCQVAU8
y08By5GyinWy4Z/h+tu3WUk88R0K7w==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:14:51 2025 by rpki-client