Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2783ee22-c144-34da-847f-003cc6a8eb69.roa
File:                     2783ee22-c144-34da-847f-003cc6a8eb69.roa (raw, json)
Hash identifier:          7yt1QoWRyvp6jFPHN0Qw9gZxMXZpr0iomhaRothXyUA=
Subject key identifier:   1E:E9:8C:7E:A2:3F:BE:DE:D8:80:5E:67:7E:87:7D:85:7A:5B:99:F9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FAF60926FE234D32E0B2DEE80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2783ee22-c144-34da-847f-003cc6a8eb69.roa
Signing time:             Mon 24 Oct 2022 12:00:00 +0000
ROA not before:           Mon 24 Oct 2022 12:00:00 +0000
ROA not after:            Tue 29 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.176.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:af:60:92:6f:e2:34:d3:2e:0b:2d:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 24 12:00:00 2022 GMT
            Not After : Nov 29 05:00:00 2022 GMT
        Subject: CN=bf1631fd-519d-414c-8e5f-11d639713897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:09:65:86:c6:11:f9:4b:37:32:9f:0f:d8:cd:
                    3a:58:20:4d:ad:99:d2:03:b3:43:43:6c:3d:b7:7c:
                    2e:ba:66:a6:9e:b4:0d:67:91:19:e9:3e:4e:50:f6:
                    f8:4d:ae:f9:51:64:83:74:1b:43:a8:5b:7b:82:07:
                    81:c1:ae:d8:a2:e1:4a:c3:7f:bf:7e:66:de:d0:e6:
                    37:ce:38:e0:99:97:26:c8:ec:19:81:16:fe:c4:c9:
                    34:ab:33:e6:31:52:75:ac:86:ef:f5:05:dd:b1:69:
                    94:73:30:3d:04:f0:80:10:d2:15:ea:c2:a4:b0:30:
                    8f:d6:a8:81:c2:25:96:51:c8:41:18:b6:c0:8a:2c:
                    7a:84:6c:28:81:95:15:d6:df:62:fa:56:da:48:1b:
                    83:4d:a1:0e:05:77:ff:29:ce:0c:72:23:22:11:8e:
                    88:58:f3:34:7a:9c:03:65:61:5d:f2:bc:b8:55:7e:
                    05:1f:55:93:30:d7:cb:ca:cb:63:df:40:57:e0:a4:
                    fc:e6:5e:ec:e8:f8:f6:fd:a7:b9:0d:fe:e2:16:7f:
                    4f:a8:ec:ff:c3:95:2f:dd:2a:d5:67:34:ae:61:ee:
                    cf:8e:a5:ba:e3:98:ef:2c:a9:f3:ff:5e:77:90:19:
                    e1:76:86:d2:1f:0f:aa:d6:8d:88:62:3e:43:61:2b:
                    6f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E9:8C:7E:A2:3F:BE:DE:D8:80:5E:67:7E:87:7D:85:7A:5B:99:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2783ee22-c144-34da-847f-003cc6a8eb69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.176.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a1:17:b2:6b:93:e1:06:d7:0a:a0:a7:59:ba:cb:41:77:fa:
         8f:2f:cb:24:af:a4:e3:c4:64:08:73:12:9a:10:cd:92:7d:b8:
         fd:a0:f7:4e:35:f2:5a:09:33:56:c4:d0:d3:6d:f7:d0:be:ff:
         db:bf:a3:72:86:87:b1:89:aa:46:78:73:aa:fc:e7:49:cb:24:
         c4:2e:a4:30:a6:8c:3c:c2:a4:44:2b:90:cc:b7:3e:6f:b2:d7:
         4d:fe:26:d6:aa:db:be:06:86:ec:c3:d9:11:7f:4d:cc:34:d3:
         70:26:1e:6b:0f:f3:e3:e3:a1:b1:ac:bb:49:35:6e:91:2c:38:
         6e:48:cd:7c:27:be:a4:09:18:b7:51:05:b4:b7:15:a7:d4:fd:
         42:32:57:66:3e:6d:af:71:63:6d:84:e6:52:f7:37:e3:15:12:
         94:27:f5:c4:7f:10:32:6f:a4:9f:20:e7:eb:b3:45:67:79:9d:
         7d:4b:e3:be:e7:a2:17:40:b7:79:05:54:1a:ab:3e:f0:81:b1:
         65:93:a6:32:5c:2b:c6:09:58:b7:07:34:f7:23:26:f6:36:57:
         8c:01:dc:cc:4f:ef:13:66:68:5f:71:82:f7:56:eb:da:6a:66:
         e9:a3:ed:d5:09:1b:0c:7f:2d:01:21:e4:3e:af:d1:77:97:a7:
         ef:e5:09:df
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+vYJJv4jTTLgst7oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAyNDEyMDAwMFoXDTIyMTEyOTA1MDAwMFowLzEtMCsGA1UEAxMk
YmYxNjMxZmQtNTE5ZC00MTRjLThlNWYtMTFkNjM5NzEzODk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgllhsYR+Us3Mp8P2M06WCBNrZnSA7NDQ2w9
t3wuumamnrQNZ5EZ6T5OUPb4Ta75UWSDdBtDqFt7ggeBwa7YouFKw3+/fmbe0OY3
zjjgmZcmyOwZgRb+xMk0qzPmMVJ1rIbv9QXdsWmUczA9BPCAENIV6sKksDCP1qiB
wiWWUchBGLbAiix6hGwogZUV1t9i+lbaSBuDTaEOBXf/Kc4MciMiEY6IWPM0epwD
ZWFd8ry4VX4FH1WTMNfLystj30BX4KT85l7s6Pj2/ae5Df7iFn9PqOz/w5Uv3SrV
ZzSuYe7PjqW645jvLKnz/153kBnhdobSHw+q1o2IYj5DYStvvwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFB7pjH6iP77e2IBeZ36HfYV6W5n5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjc4M2VlMjItYzE0NC0z
NGRhLTg0N2YtMDAzY2M2YThlYjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAELAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAUqEXsmuT4QbXCqCnWbrLQXf6jy/LJK+k48RkCHMSmhDNkn24/aD3TjXy
WgkzVsTQ02330L7/27+jcoaHsYmqRnhzqvznScskxC6kMKaMPMKkRCuQzLc+b7LX
Tf4m1qrbvgaG7MPZEX9NzDTTcCYeaw/z4+Ohsay7STVukSw4bkjNfCe+pAkYt1EF
tLcVp9T9QjJXZj5tr3FjbYTmUvc34xUSlCf1xH8QMm+knyDn67NFZ3mdfUvjvuei
F0C3eQVUGqs+8IGxZZOmMlwrxglYtwc09yMm9jZXjAHczE/vE2ZoX3GC91br2mpm
6aPt1QkbDH8tASHkPq/Rd5en7+UJ3w==
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:22:31 2025 by rpki-client