Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/286ac800-aa77-3976-a2d8-8d6c5b3e25a7.roa
File:                     286ac800-aa77-3976-a2d8-8d6c5b3e25a7.roa (raw, json)
Hash identifier:          Mwc8ys+NjTzULR8UW5KHCbh0QWPlAgy9zOe4EMi2W+I=
Subject key identifier:   F1:3F:6B:13:24:E0:BA:87:AA:0C:D0:EB:4C:8E:EB:98:58:B9:4F:29
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CBE29CCC2B02604BE0A466DA8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/286ac800-aa77-3976-a2d8-8d6c5b3e25a7.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        162.250.236.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:be:29:cc:c2:b0:26:04:be:0a:46:6d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=8ca5009f-5c1e-4bff-822c-306b98e651e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:46:1a:b2:ef:45:8c:e2:0a:ff:26:e4:8d:ac:
                    ae:c4:dd:28:0d:9f:36:2b:ba:ee:dd:f6:ad:9b:e5:
                    0f:fe:28:35:70:93:b7:ec:28:9c:f7:78:86:7c:f3:
                    bd:ba:06:45:ab:1e:01:11:ea:88:62:f0:2a:63:ec:
                    d9:b1:4a:2b:ca:22:4d:40:0c:d2:7e:0e:27:1f:c3:
                    7e:4d:d5:4f:8b:35:29:9a:1c:22:5d:39:5d:ce:94:
                    e8:48:6d:2f:9b:5a:99:81:aa:8b:0b:b2:60:34:e1:
                    e3:1d:f4:c3:7b:33:fd:1b:db:79:48:2f:4a:07:ad:
                    6a:de:59:f0:c3:84:42:52:eb:a4:ef:97:5f:42:b7:
                    74:c9:40:8b:a3:3b:7c:df:84:ec:b9:d9:df:2c:f5:
                    cc:48:a6:cf:8a:4c:a5:b1:b7:3a:b7:58:7f:ec:b9:
                    3c:44:db:93:85:c7:ab:78:36:15:e6:d9:d1:99:c7:
                    b7:a5:cf:5c:43:3c:fc:bf:00:84:9b:9b:8b:57:cd:
                    72:f6:1e:dc:f3:e0:8c:43:30:60:67:fd:3b:44:c6:
                    9e:4e:92:51:73:e1:df:62:dd:76:e4:15:47:1a:0d:
                    5a:24:ab:2d:1d:50:1f:7c:2c:69:17:21:c2:e5:d5:
                    04:8f:0f:53:69:f9:ab:fa:c5:46:00:67:cd:d2:89:
                    88:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3F:6B:13:24:E0:BA:87:AA:0C:D0:EB:4C:8E:EB:98:58:B9:4F:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/286ac800-aa77-3976-a2d8-8d6c5b3e25a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a4:5d:7d:e1:41:da:27:62:e3:98:e2:cb:10:87:81:59:88:
         ff:9e:a7:4b:3b:7b:11:06:3e:b5:d4:43:aa:f5:cd:af:1c:f3:
         b7:fd:8b:f6:86:36:aa:8f:02:41:9a:49:81:c4:1e:a0:cb:d1:
         f0:e0:f7:1f:52:07:0b:dc:fa:91:3f:3e:3b:e6:7b:18:77:22:
         a0:9a:10:2d:3e:2a:ff:03:05:96:b7:86:58:28:06:f2:25:ef:
         a8:9a:2f:83:70:45:32:cc:e0:2d:df:0f:bf:ef:24:47:7d:3c:
         26:02:a1:17:ff:ec:51:7d:e4:53:8e:fd:ba:13:9d:dd:47:a3:
         ed:db:51:7d:87:23:98:5a:ff:b6:e0:c9:28:14:a5:3e:90:8e:
         82:26:48:56:84:51:d1:9d:d8:9c:b0:46:22:fb:33:66:42:b0:
         c8:49:d9:e2:ed:ca:d9:cb:32:69:74:77:2e:87:20:75:f2:cf:
         7d:a5:f4:fc:78:6f:26:f9:14:29:6d:5c:bf:92:03:87:2b:fb:
         fa:38:06:93:80:07:a3:ff:42:17:d2:f6:16:0c:e2:24:f4:ff:
         1a:77:a2:cc:cb:3c:06:98:ac:d2:e0:c5:e5:bf:3f:d4:1d:32:
         d5:a6:cc:b3:97:66:fe:3d:ca:52:33:d2:d8:aa:8a:e0:18:55:
         07:37:0d:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDy+KczCsCYEvgpGbagwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDEyODA1MDAwMFoXDTIyMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
OGNhNTAwOWYtNWMxZS00YmZmLTgyMmMtMzA2Yjk4ZTY1MWU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEYasu9FjOIK/ybkjayuxN0oDZ82K7ru3fat
m+UP/ig1cJO37Cic93iGfPO9ugZFqx4BEeqIYvAqY+zZsUoryiJNQAzSfg4nH8N+
TdVPizUpmhwiXTldzpToSG0vm1qZgaqLC7JgNOHjHfTDezP9G9t5SC9KB61q3lnw
w4RCUuuk75dfQrd0yUCLozt834TsudnfLPXMSKbPikylsbc6t1h/7Lk8RNuThcer
eDYV5tnRmce3pc9cQzz8vwCEm5uLV81y9h7c8+CMQzBgZ/07RMaeTpJRc+HfYt12
5BVHGg1aJKstHVAffCxpFyHC5dUEjw9Tafmr+sVGAGfN0omIZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPE/axMk4LqHqgzQ60yO65hYuU8pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjg2YWM4MDAtYWE3Ny0z
OTc2LWEyZDgtOGQ2YzViM2UyNWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovrsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFKkXX3hQdonYuOY4ssQh4FZiP+ep0s7exEGPrXUQ6r1za8c87f9i/aG
NqqPAkGaSYHEHqDL0fDg9x9SBwvc+pE/Pjvmexh3IqCaEC0+Kv8DBZa3hlgoBvIl
76iaL4NwRTLM4C3fD7/vJEd9PCYCoRf/7FF95FOO/boTnd1Ho+3bUX2HI5ha/7bg
ySgUpT6QjoImSFaEUdGd2JywRiL7M2ZCsMhJ2eLtytnLMml0dy6HIHXyz32l9Px4
byb5FCltXL+SA4cr+/o4BpOAB6P/QhfS9hYM4iT0/xp3oszLPAaYrNLgxeW/P9Qd
MtWmzLOXZv49ylIz0tiqiuAYVQc3DT4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:34 2025 by rpki-client