Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/26e8cf69-f4a2-3ca0-ba01-0e60ab5f72b7.roa
File:                     26e8cf69-f4a2-3ca0-ba01-0e60ab5f72b7.roa (raw, json)
Hash identifier:          BiaFg2Zh2e7bE/pIX9THORyigJLFcb3mEeJ+yNbo6YA=
Subject key identifier:   6F:A0:E0:38:4B:F8:D6:5E:BE:AB:C2:40:9D:95:13:E0:20:73:3D:A6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FCE426E7DB9DD6BCDD9213200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/26e8cf69-f4a2-3ca0-ba01-0e60ab5f72b7.roa
Signing time:             Fri 04 Nov 2022 12:00:00 +0000
ROA not before:           Fri 04 Nov 2022 12:00:00 +0000
ROA not after:            Sat 10 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        155.254.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ce:42:6e:7d:b9:dd:6b:cd:d9:21:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  4 12:00:00 2022 GMT
            Not After : Dec 10 05:00:00 2022 GMT
        Subject: CN=476c7757-3adb-4421-abc8-7458faf92f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:28:bc:f1:5e:67:08:3e:02:75:58:23:d0:46:
                    2d:3a:99:d0:ec:cc:a0:1b:b9:c4:42:3d:fa:b6:b1:
                    e9:18:53:a4:cd:99:19:97:38:55:4d:67:e4:45:af:
                    bd:89:e1:64:96:0d:8d:88:f7:56:d0:3c:1e:af:30:
                    29:9f:6e:da:a6:7a:d1:fb:de:c9:c2:33:3c:ac:a8:
                    78:53:db:e9:07:da:ec:b5:b4:bc:34:44:de:8a:9d:
                    05:d5:1e:5f:f8:1c:03:e4:76:7c:b7:58:03:f0:02:
                    58:86:4e:98:5b:38:2b:1a:2d:8a:62:d6:37:da:99:
                    5b:b4:b0:06:3e:05:5c:3f:f4:02:db:0d:27:bb:57:
                    29:41:0f:de:3e:47:0d:9f:93:96:13:79:99:0f:2f:
                    88:1f:04:3c:9d:22:f4:e4:92:d2:2a:42:c8:98:5c:
                    9d:c1:c2:57:98:42:ac:2c:d7:c2:ae:cc:02:22:cf:
                    51:30:d3:2b:3c:a5:5e:52:ed:69:a4:ea:f0:69:b2:
                    30:0e:ec:dc:79:68:ed:9b:64:f0:39:72:14:b6:aa:
                    3b:c5:fc:85:2c:c0:8f:f2:0a:ca:1f:dc:47:d6:9e:
                    69:13:87:00:05:89:89:2a:d8:b4:4e:d5:62:20:47:
                    b1:4f:4e:e7:fa:12:11:65:84:cc:ba:07:fa:3d:96:
                    e5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A0:E0:38:4B:F8:D6:5E:BE:AB:C2:40:9D:95:13:E0:20:73:3D:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/26e8cf69-f4a2-3ca0-ba01-0e60ab5f72b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.254.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:cb:64:a9:24:44:bd:63:af:03:17:18:41:93:a6:2c:00:ed:
         51:3b:e4:19:8e:8c:e7:53:06:b2:06:51:4b:d1:02:4b:88:ae:
         f5:9b:2c:e0:8d:b3:da:73:b4:4b:27:2e:d0:d6:56:14:4e:5a:
         7c:08:20:dd:ac:9d:39:a9:e1:10:33:e0:b5:39:03:55:c8:d3:
         c0:5b:d8:fc:93:c1:59:71:0d:60:c7:b3:12:49:33:7b:08:f4:
         82:ab:ed:c4:54:bf:ca:b9:f3:a1:7e:06:7c:44:d9:af:e0:ab:
         dc:ba:fb:73:4e:ff:2c:29:ad:9c:fe:a4:cf:37:3f:2c:e0:ef:
         86:be:8f:8e:6b:c8:2d:76:41:a8:c9:c1:be:d0:86:d9:ae:a4:
         df:67:4a:75:3b:d9:89:c7:0d:ea:f9:32:79:43:02:57:0b:69:
         fa:dc:7c:5a:05:a3:b0:e2:a1:80:21:40:1b:5a:e5:24:aa:63:
         7a:6b:c2:e9:81:36:46:63:2b:f0:a1:03:f2:da:e1:96:9f:f2:
         8e:ee:98:a0:6b:1a:6a:88:39:33:53:48:81:9c:ad:8f:ce:03:
         dc:7f:4a:82:b6:d7:d8:fd:8c:8f:20:ec:03:00:f1:4c:14:2b:
         70:86:96:b3:8e:4a:c0:17:92:bd:a7:4e:94:57:1e:67:ca:e0:
         17:cd:91:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD/OQm59ud1rzdkhMgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEwNDEyMDAwMFoXDTIyMTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
NDc2Yzc3NTctM2FkYi00NDIxLWFiYzgtNzQ1OGZhZjkyZjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSi88V5nCD4CdVgj0EYtOpnQ7MygG7nEQj36
trHpGFOkzZkZlzhVTWfkRa+9ieFklg2NiPdW0DwerzApn27apnrR+97JwjM8rKh4
U9vpB9rstbS8NETeip0F1R5f+BwD5HZ8t1gD8AJYhk6YWzgrGi2KYtY32plbtLAG
PgVcP/QC2w0nu1cpQQ/ePkcNn5OWE3mZDy+IHwQ8nSL05JLSKkLImFydwcJXmEKs
LNfCrswCIs9RMNMrPKVeUu1ppOrwabIwDuzceWjtm2TwOXIUtqo7xfyFLMCP8grK
H9xH1p5pE4cABYmJKti0TtViIEexT07n+hIRZYTMugf6PZblhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG+g4DhL+NZevqvCQJ2VE+Agcz2mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjZlOGNmNjktZjRhMi0z
Y2EwLWJhMDEtMGU2MGFiNWY3MmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFm/6gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIbLZKkkRL1jrwMXGEGTpiwA7VE75BmOjOdTBrIGUUvRAkuIrvWbLOCN
s9pztEsnLtDWVhROWnwIIN2snTmp4RAz4LU5A1XI08Bb2PyTwVlxDWDHsxJJM3sI
9IKr7cRUv8q586F+BnxE2a/gq9y6+3NO/ywprZz+pM83Pyzg74a+j45ryC12QajJ
wb7QhtmupN9nSnU72YnHDer5MnlDAlcLafrcfFoFo7DioYAhQBta5SSqY3prwumB
NkZjK/ChA/La4Zaf8o7umKBrGmqIOTNTSIGcrY/OA9x/SoK219j9jI8g7AMA8UwU
K3CGlrOOSsAXkr2nTpRXHmfK4BfNkc8=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:13 2025 by rpki-client