Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/26d9a617-9299-3db9-85dc-3d0696aa6426.roa
File:                     26d9a617-9299-3db9-85dc-3d0696aa6426.roa (raw, json)
Hash identifier:          mfJu1eSBkY4okoYLhC4sCV4op/iVVFKPJJSi6zXxvOI=
Subject key identifier:   2E:52:99:D2:28:24:AB:03:07:CF:EA:57:87:9F:A5:2B:E8:63:FC:60
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858404BE34B923AB25992D479AE00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/26d9a617-9299-3db9-85dc-3d0696aa6426.roa
Signing time:             Mon 19 Dec 2022 16:54:08 +0000
ROA not before:           Mon 19 Dec 2022 16:54:08 +0000
ROA not after:            Tue 24 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        134.43.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:4b:e3:4b:92:3a:b2:59:92:d4:79:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 19 16:54:08 2022 GMT
            Not After : Jan 24 05:00:00 2023 GMT
        Subject: CN=608a7207-4481-4e3e-a3a4-6d981e738c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d4:4d:63:f3:dd:f4:2c:3f:13:07:c7:9d:53:
                    ff:89:96:a8:0c:69:16:2c:fd:de:3e:30:f8:01:2a:
                    ca:ee:84:6b:cf:f1:0d:df:25:d6:78:79:04:67:31:
                    24:d1:60:72:76:c8:1a:40:8b:97:49:8c:0f:10:d4:
                    39:59:65:1e:66:4a:ba:f6:8e:ed:f5:a2:13:97:d4:
                    1d:f1:63:3e:73:f1:05:71:24:d1:a3:55:e6:ee:4d:
                    da:15:1d:be:76:01:e8:3a:04:11:eb:56:d5:69:41:
                    88:08:22:7a:2e:07:38:08:9d:22:b8:6a:1c:6a:9c:
                    90:5c:75:99:f0:1e:b6:03:99:a7:af:7c:16:7b:eb:
                    48:f6:57:13:8a:12:fb:ac:ab:10:b6:f9:1c:3d:ec:
                    65:d2:81:6d:26:85:62:ed:25:40:1c:a7:ae:e3:cc:
                    02:b6:0e:14:dc:b6:cf:c0:56:9d:17:70:f9:59:be:
                    4b:d6:5f:6c:3c:02:50:4f:92:f6:75:e8:d4:7b:9c:
                    07:db:1a:2c:29:7c:66:40:b1:17:78:2b:31:33:2f:
                    aa:1b:12:ce:39:ac:6d:bd:46:59:99:19:50:31:5a:
                    6c:65:78:18:3c:85:8c:d6:a4:17:99:3c:ee:4e:39:
                    00:cf:5b:f9:71:c7:47:07:00:32:7d:7a:96:43:e6:
                    ac:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:52:99:D2:28:24:AB:03:07:CF:EA:57:87:9F:A5:2B:E8:63:FC:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/26d9a617-9299-3db9-85dc-3d0696aa6426.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.43.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:4f:16:c8:ad:ff:fa:7e:f8:62:0b:22:cf:21:34:0b:19:f9:
         d9:e3:fe:29:ee:bf:ff:00:21:5e:fe:0a:b7:70:7f:00:4d:c6:
         41:b4:4d:4c:d9:f8:ed:ca:cd:5b:49:3e:f6:00:c8:2a:b3:7b:
         83:90:5e:ca:91:64:cc:e9:df:a1:de:e4:f5:5a:10:a9:e6:0b:
         41:08:03:a6:b6:92:89:49:b0:5a:49:f6:42:f8:9f:84:30:60:
         59:a5:bc:1f:4e:1f:2b:7d:f6:72:29:5c:f8:28:17:ba:85:8f:
         6a:e3:77:15:a2:13:2d:e6:ac:ea:bc:af:25:3f:ab:95:f4:63:
         cf:51:c7:45:5c:03:3b:a9:b4:13:ea:ed:43:ad:f7:3f:5f:cb:
         f1:33:a5:f4:19:5d:26:23:13:5c:d2:00:a7:d5:c9:4a:f2:06:
         f1:cd:5d:aa:31:e5:f8:48:98:28:2a:e9:60:a5:a2:c4:85:01:
         6e:9e:57:10:3a:7d:01:e0:8f:8f:a3:fb:7f:81:2a:d2:ea:f0:
         4d:b3:f6:9d:a1:71:3d:d2:50:b4:23:ad:41:90:3d:c7:24:55:
         0c:f9:d0:4e:35:1e:0b:cd:e2:02:92:0a:31:d9:00:69:ce:c0:
         c3:dc:96:52:b2:51:0f:f5:04:4b:62:5f:b9:a6:3e:7c:a8:22:
         21:6e:80:6c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBL40uSOrJZktR5rgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxOTE2NTQwOFoXDTIzMDEyNDA1MDAwMFowLzEtMCsGA1UEAxMk
NjA4YTcyMDctNDQ4MS00ZTNlLWEzYTQtNmQ5ODFlNzM4YzVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09RNY/Pd9Cw/EwfHnVP/iZaoDGkWLP3ePjD4
ASrK7oRrz/EN3yXWeHkEZzEk0WBydsgaQIuXSYwPENQ5WWUeZkq69o7t9aITl9Qd
8WM+c/EFcSTRo1Xm7k3aFR2+dgHoOgQR61bVaUGICCJ6Lgc4CJ0iuGocapyQXHWZ
8B62A5mnr3wWe+tI9lcTihL7rKsQtvkcPexl0oFtJoVi7SVAHKeu48wCtg4U3LbP
wFadF3D5Wb5L1l9sPAJQT5L2dejUe5wH2xosKXxmQLEXeCsxMy+qGxLOOaxtvUZZ
mRlQMVpsZXgYPIWM1qQXmTzuTjkAz1v5ccdHBwAyfXqWQ+as/QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFC5SmdIoJKsDB8/qV4efpSvoY/xgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjZkOWE2MTctOTI5OS0z
ZGI5LTg1ZGMtM2QwNjk2YWE2NDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhiswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYU8WyK3/+n74YgsizyE0Cxn52eP+Ke6//wAhXv4Kt3B/AE3GQbRNTNn4
7crNW0k+9gDIKrN7g5BeypFkzOnfod7k9VoQqeYLQQgDpraSiUmwWkn2QvifhDBg
WaW8H04fK332cilc+CgXuoWPauN3FaITLeas6ryvJT+rlfRjz1HHRVwDO6m0E+rt
Q633P1/L8TOl9BldJiMTXNIAp9XJSvIG8c1dqjHl+EiYKCrpYKWixIUBbp5XEDp9
AeCPj6P7f4Eq0urwTbP2naFxPdJQtCOtQZA9xyRVDPnQTjUeC83iApIKMdkAac7A
w9yWUrJRD/UES2JfuaY+fKgiIW6AbA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:45 2025 by rpki-client