Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a723f1d-f922-31fd-8533-0121a54a03f8.roa
File:                     2a723f1d-f922-31fd-8533-0121a54a03f8.roa (raw, json)
Hash identifier:          VH8/Lc1kz5Fn+EjJMEk050QV35jyewpthmYQoKC/Vuo=
Subject key identifier:   18:E0:E7:1E:76:81:B0:A9:73:D6:1E:B3:7C:99:9C:4F:78:63:FB:26
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F9EA0095BB9FD129884446980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a723f1d-f922-31fd-8533-0121a54a03f8.roa
Signing time:             Tue 18 Oct 2022 13:33:07 +0000
ROA not before:           Tue 18 Oct 2022 13:33:07 +0000
ROA not after:            Wed 23 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        137.160.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:9e:a0:09:5b:b9:fd:12:98:84:44:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 18 13:33:07 2022 GMT
            Not After : Nov 23 05:00:00 2022 GMT
        Subject: CN=dd45992a-0de0-4d58-8099-9b040d49e6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e6:6c:ff:ee:dd:3e:34:15:4d:0f:fb:87:be:
                    2a:73:e6:55:69:12:51:dd:64:29:ba:d5:14:41:18:
                    e9:28:c5:a2:9c:5a:c1:82:11:8e:66:2b:a2:ca:05:
                    6f:ce:ee:b0:c5:f6:81:e7:07:e5:c7:76:fc:e8:ff:
                    e5:e2:96:b3:67:ac:13:31:70:f9:be:84:85:61:1c:
                    5c:41:94:75:fa:85:21:50:0d:e5:b7:f4:8a:87:e9:
                    cf:37:fd:cd:a8:36:16:dd:db:3c:c7:47:02:d4:90:
                    b0:a2:44:65:8f:52:76:6f:69:99:cd:ff:2b:82:76:
                    18:8f:40:61:bc:6c:18:18:36:b8:1a:88:10:e5:aa:
                    18:a0:06:38:f0:d0:84:45:78:9f:7c:82:21:f5:99:
                    7e:f2:20:70:15:fa:5c:9c:76:b0:01:17:00:d8:a2:
                    f4:fe:b9:52:82:93:33:78:21:23:bb:f6:d0:4b:19:
                    24:81:6a:39:23:a3:6f:af:da:a0:77:ff:5e:a6:d6:
                    cd:9c:30:65:f6:0b:c8:f4:8c:b5:5e:f1:3a:8b:bd:
                    55:c5:ca:c2:c0:0d:78:77:29:1d:92:8b:d3:ad:dc:
                    d7:a9:fa:4b:fe:71:74:d7:6b:c6:d0:95:c9:db:d3:
                    3c:af:e4:fc:ef:78:07:32:13:32:b5:ca:17:aa:70:
                    d0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E0:E7:1E:76:81:B0:A9:73:D6:1E:B3:7C:99:9C:4F:78:63:FB:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a723f1d-f922-31fd-8533-0121a54a03f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.160.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:95:35:bb:28:f5:9d:3d:64:e7:7a:60:25:ba:f0:5b:01:21:
         e1:49:eb:a9:f1:e1:45:f8:1f:0f:b6:30:05:6c:ab:bf:fa:7b:
         58:0f:60:88:f4:06:ff:11:be:f6:dc:cc:8d:24:54:4b:46:ad:
         d3:30:8d:48:57:5a:cb:f4:81:45:72:1f:4a:3f:06:5d:3e:f9:
         fe:36:97:40:a5:98:80:65:37:9a:11:2c:fc:c5:6d:56:63:78:
         a6:5b:19:70:db:6d:86:a5:25:29:74:bd:7a:25:f1:93:73:27:
         66:ac:37:cd:45:5c:5d:fb:73:8b:dc:ca:df:1d:96:0e:22:2b:
         b1:ae:37:49:b8:c4:6f:91:6a:1b:61:8f:c5:03:e5:6c:70:5d:
         57:d0:ca:f8:5b:e2:ac:78:4e:4f:26:ef:c3:12:0d:bb:dd:c4:
         99:cb:b5:05:f0:91:26:9a:ea:0e:e3:9e:38:18:8e:90:8e:48:
         07:ef:54:06:8e:b5:1f:31:cc:29:a6:59:c1:07:34:ba:82:d1:
         32:11:71:3e:40:87:02:b2:9f:6e:54:ba:a4:8c:65:cd:3a:93:
         52:e2:84:5a:71:01:40:33:cd:d2:66:02:87:f6:3d:4f:d3:5c:
         28:09:f6:d4:4d:ec:1c:f0:70:eb:6c:55:04:99:61:05:64:85:
         4d:00:23:13
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+eoAlbuf0SmIREaYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAxODEzMzMwN1oXDTIyMTEyMzA1MDAwMFowLzEtMCsGA1UEAxMk
ZGQ0NTk5MmEtMGRlMC00ZDU4LTgwOTktOWIwNDBkNDllNmRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluZs/+7dPjQVTQ/7h74qc+ZVaRJR3WQputUU
QRjpKMWinFrBghGOZiuiygVvzu6wxfaB5wflx3b86P/l4pazZ6wTMXD5voSFYRxc
QZR1+oUhUA3lt/SKh+nPN/3NqDYW3ds8x0cC1JCwokRlj1J2b2mZzf8rgnYYj0Bh
vGwYGDa4GogQ5aoYoAY48NCERXiffIIh9Zl+8iBwFfpcnHawARcA2KL0/rlSgpMz
eCEju/bQSxkkgWo5I6Nvr9qgd/9eptbNnDBl9gvI9Iy1XvE6i71VxcrCwA14dykd
kovTrdzXqfpL/nF012vG0JXJ29M8r+T873gHMhMytcoXqnDQ9wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBjg5x52gbCpc9Yes3yZnE94Y/smMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMmE3MjNmMWQtZjkyMi0z
MWZkLTg1MzMtMDEyMWE1NGEwM2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiaAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAR5U1uyj1nT1k53pgJbrwWwEh4UnrqfHhRfgfD7YwBWyrv/p7WA9giPQG
/xG+9tzMjSRUS0at0zCNSFday/SBRXIfSj8GXT75/jaXQKWYgGU3mhEs/MVtVmN4
plsZcNtthqUlKXS9eiXxk3MnZqw3zUVcXftzi9zK3x2WDiIrsa43SbjEb5FqG2GP
xQPlbHBdV9DK+FvirHhOTybvwxINu93Emcu1BfCRJprqDuOeOBiOkI5IB+9UBo61
HzHMKaZZwQc0uoLRMhFxPkCHArKfblS6pIxlzTqTUuKEWnEBQDPN0mYCh/Y9T9Nc
KAn21E3sHPBw62xVBJlhBWSFTQAjEw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:58:46 2025 by rpki-client