Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ebacb77-1e40-36ff-922d-2a6b4e11e1a3.roa
File:                     2ebacb77-1e40-36ff-922d-2a6b4e11e1a3.roa (raw, json)
Hash identifier:          4/UvI/FhuZg2wpoLzoZv+LdmbO6a7ywykv/qcawrqM8=
Subject key identifier:   5A:49:15:28:0B:27:A3:E8:63:38:CE:3F:40:2E:0B:8B:64:8D:D2:0A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C96BAA8168E4298ECFF842CC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ebacb77-1e40-36ff-922d-2a6b4e11e1a3.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        130.176.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:96:ba:a8:16:8e:42:98:ec:ff:84:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=8d0efd55-90c6-458b-8ba7-9099075740c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:48:28:f8:b2:38:23:48:e7:4e:67:11:d5:ed:
                    d1:c9:01:17:c4:7c:af:bc:92:09:15:06:12:12:61:
                    26:62:26:50:5b:fb:8e:f3:3e:4b:36:56:66:31:3e:
                    a5:44:49:a8:70:9d:75:f4:b9:45:3b:c8:2f:95:7c:
                    2b:b9:45:74:35:3d:39:7f:e4:08:02:30:f4:48:15:
                    29:df:04:c0:bd:74:b7:74:37:14:f2:54:f4:3e:71:
                    ab:8a:9e:7a:7b:57:05:9a:3c:6f:69:7a:20:4e:64:
                    b8:f0:b1:c0:27:dc:57:07:9c:ef:60:d4:c8:54:7a:
                    7d:31:11:55:f4:27:94:d2:45:e1:79:70:57:5b:56:
                    2c:b7:cb:87:d3:c6:14:35:66:37:9a:70:f8:38:e7:
                    70:d8:68:d0:44:12:df:0e:d9:0f:25:0e:f9:51:3b:
                    48:90:ad:90:d4:96:7b:7a:54:12:b5:72:93:d2:eb:
                    7d:f5:fc:e6:53:38:52:f4:08:06:e4:ba:b4:7f:af:
                    b1:2f:af:85:90:4a:05:ca:85:f9:f1:d0:39:a5:82:
                    0b:75:ec:ce:f0:a5:8b:9b:98:50:dc:1b:de:86:7c:
                    9e:9c:3b:a1:33:69:47:a6:1f:1f:e7:a8:21:58:29:
                    bf:58:e1:3a:3e:9b:9b:73:35:9e:99:39:28:3d:31:
                    8e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:49:15:28:0B:27:A3:E8:63:38:CE:3F:40:2E:0B:8B:64:8D:D2:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ebacb77-1e40-36ff-922d-2a6b4e11e1a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:42:e0:14:43:c7:67:08:48:f7:74:c1:39:c1:53:f8:0d:80:
         67:81:b3:18:54:2e:d3:d6:ac:ba:45:6a:fd:91:a5:cc:42:a9:
         cd:12:ff:c6:d3:d0:18:76:10:83:83:10:99:bf:6e:95:ec:34:
         5c:5a:74:ee:32:11:ed:3e:14:1b:91:2b:80:cc:61:fb:a6:99:
         69:c8:53:b2:e7:90:ab:14:07:1e:dc:f1:ac:1a:3e:e0:1e:bd:
         87:d9:3a:4e:66:81:6f:f2:b6:f8:0a:33:65:53:94:bb:3c:0d:
         24:78:05:c3:a9:35:60:3f:bb:e9:fb:6c:9e:02:0e:3c:80:80:
         4a:c7:42:2d:2a:05:62:cb:9c:54:bf:52:2a:79:53:af:ce:cf:
         8f:d2:8c:c4:29:97:3b:e8:2b:23:18:f4:86:26:8b:37:69:f3:
         aa:29:4c:15:13:1c:73:7f:8c:45:8c:50:2e:dd:6a:b5:cc:5d:
         46:f5:50:8c:70:36:ed:ae:08:0d:cb:4a:57:de:bf:26:6d:9d:
         6c:d6:03:04:8b:f0:7c:47:25:fb:57:0f:4b:7f:7c:fe:1f:89:
         7a:4f:12:e2:19:77:d0:88:10:a5:d7:87:d3:52:de:a2:ef:f3:
         9f:27:69:db:8e:41:6e:5a:70:3e:76:67:6a:cc:17:9a:03:22:
         6b:89:97:31
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDyWuqgWjkKY7P+ELMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDExNDA1MDAwMFoXDTIyMDIxODA1MDAwMFowLzEtMCsGA1UEAxMk
OGQwZWZkNTUtOTBjNi00NThiLThiYTctOTA5OTA3NTc0MGM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ego+LI4I0jnTmcR1e3RyQEXxHyvvJIJFQYS
EmEmYiZQW/uO8z5LNlZmMT6lREmocJ119LlFO8gvlXwruUV0NT05f+QIAjD0SBUp
3wTAvXS3dDcU8lT0PnGrip56e1cFmjxvaXogTmS48LHAJ9xXB5zvYNTIVHp9MRFV
9CeU0kXheXBXW1Yst8uH08YUNWY3mnD4OOdw2GjQRBLfDtkPJQ75UTtIkK2Q1JZ7
elQStXKT0ut99fzmUzhS9AgG5Lq0f6+xL6+FkEoFyoX58dA5pYILdezO8KWLm5hQ
3BvehnyenDuhM2lHph8f56ghWCm/WOE6PpubczWemTkoPTGOWwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFpJFSgLJ6PoYzjOP0AuC4tkjdIKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMmViYWNiNzctMWU0MC0z
NmZmLTkyMmQtMmE2YjRlMTFlMWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgrAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAp0LgFEPHZwhI93TBOcFT+A2AZ4GzGFQu09asukVq/ZGlzEKpzRL/xtPQ
GHYQg4MQmb9ulew0XFp07jIR7T4UG5ErgMxh+6aZachTsueQqxQHHtzxrBo+4B69
h9k6TmaBb/K2+AozZVOUuzwNJHgFw6k1YD+76ftsngIOPICASsdCLSoFYsucVL9S
KnlTr87Pj9KMxCmXO+grIxj0hiaLN2nzqilMFRMcc3+MRYxQLt1qtcxdRvVQjHA2
7a4IDctKV96/Jm2dbNYDBIvwfEcl+1cPS398/h+Jek8S4hl30IgQpdeH01Leou/z
nydp245BblpwPnZnaswXmgMia4mXMQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:02:41 2025 by rpki-client