Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/302b7c08-3190-38b5-8491-21750b54daa2.roa
File:                     302b7c08-3190-38b5-8491-21750b54daa2.roa (raw, json)
Hash identifier:          tAO3fvPMhvgS8xpOfxOuoVFsFZhl3Hu4lxHkmQQOmqQ=
Subject key identifier:   08:EA:EC:01:D8:7E:7E:C7:F7:A9:90:48:24:A2:C0:E1:A9:D6:AF:34
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FC8D9BE2D8729F8F6553A3800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/302b7c08-3190-38b5-8491-21750b54daa2.roa
Signing time:             Wed 02 Nov 2022 12:00:00 +0000
ROA not before:           Wed 02 Nov 2022 12:00:00 +0000
ROA not after:            Thu 08 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        16.31.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c8:d9:be:2d:87:29:f8:f6:55:3a:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  2 12:00:00 2022 GMT
            Not After : Dec  8 05:00:00 2022 GMT
        Subject: CN=8f0c9422-bab8-4897-b8d8-0ea212b8322c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:30:a4:f9:04:c2:c1:31:21:3a:55:aa:6c:b2:
                    40:c6:18:83:f3:38:1a:25:f7:4c:c8:cc:f9:77:80:
                    1f:e2:c6:b2:e3:46:7f:25:c8:9b:8a:67:a7:30:cb:
                    17:36:03:09:f3:6a:83:19:d6:df:20:bb:d9:c3:83:
                    00:fa:a9:b2:7d:0a:59:1f:fc:b2:ee:af:73:27:fd:
                    e7:fc:41:2e:79:39:af:07:4c:88:89:6e:19:93:05:
                    19:2d:ca:63:de:bc:c4:86:ad:24:83:fb:df:63:d7:
                    50:24:53:aa:19:b3:c1:ce:96:fe:0a:83:59:e0:d9:
                    0f:54:b4:72:39:2d:f4:95:39:4f:4e:aa:5a:53:64:
                    62:5c:8d:5a:dc:6f:80:ef:24:96:1b:0f:24:50:e4:
                    7a:d8:52:f2:8e:0b:0c:15:fc:90:81:b8:ca:5c:a9:
                    f3:e0:ae:17:bb:ff:25:d5:62:1e:72:07:d1:cf:4d:
                    ff:2b:ad:a9:b3:46:14:99:01:30:56:65:2e:43:87:
                    64:14:ac:59:b1:0c:d3:77:c4:62:e6:fa:0b:39:04:
                    56:b7:1a:d3:c3:3d:ac:94:74:74:a3:c8:21:47:b4:
                    7e:00:2f:27:51:71:b6:e0:54:e0:13:8f:ea:e9:64:
                    19:37:cd:6d:fe:e9:62:3c:b5:cd:ec:79:c3:51:af:
                    ef:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EA:EC:01:D8:7E:7E:C7:F7:A9:90:48:24:A2:C0:E1:A9:D6:AF:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/302b7c08-3190-38b5-8491-21750b54daa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.31.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:7d:ac:43:bf:b6:e0:a3:fc:aa:1f:81:92:68:f9:64:35:3c:
         d9:9f:05:a7:96:e9:d5:88:01:41:2e:ef:8e:79:5a:f9:81:03:
         3f:6c:46:07:d8:dd:25:ff:ed:6c:35:43:bb:60:3f:91:66:8c:
         db:14:2c:ae:67:e6:97:f6:17:2b:5a:42:de:4e:e9:a7:62:4c:
         00:23:28:8a:1c:80:00:c0:54:73:b8:46:fa:0c:4e:b4:a8:e0:
         f1:6b:8f:c8:b8:5f:88:b7:c4:92:0c:6d:38:5b:2b:ab:e6:fb:
         e5:9e:fd:57:aa:33:12:1c:41:40:8c:9a:c6:d2:92:91:8a:4c:
         4a:db:b3:9e:22:3a:58:60:e3:7b:c4:3a:31:bf:4b:85:d0:1c:
         44:4f:1f:08:69:2d:7e:38:ac:62:f1:fb:96:4e:0f:4d:9f:21:
         f4:28:8c:c8:70:5b:59:1f:06:26:e4:d3:a8:f0:65:93:71:10:
         7c:85:a7:ca:60:bf:ef:6d:39:40:b7:5d:cf:ee:73:4c:4c:06:
         83:80:9a:18:58:e1:9e:da:a8:c8:4b:6f:ec:28:fb:c3:36:17:
         46:5e:f9:4c:d5:e6:47:4f:5c:99:6b:9b:b3:1c:0c:0e:57:d9:
         0e:64:ac:03:ea:bb:7a:4c:60:dc:e4:59:72:6f:5e:8d:bb:eb:
         94:b0:75:df
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/I2b4thyn49lU6OAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEwMjEyMDAwMFoXDTIyMTIwODA1MDAwMFowLzEtMCsGA1UEAxMk
OGYwYzk0MjItYmFiOC00ODk3LWI4ZDgtMGVhMjEyYjgzMjJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDCk+QTCwTEhOlWqbLJAxhiD8zgaJfdMyMz5
d4Af4say40Z/JcibimenMMsXNgMJ82qDGdbfILvZw4MA+qmyfQpZH/yy7q9zJ/3n
/EEueTmvB0yIiW4ZkwUZLcpj3rzEhq0kg/vfY9dQJFOqGbPBzpb+CoNZ4NkPVLRy
OS30lTlPTqpaU2RiXI1a3G+A7ySWGw8kUOR62FLyjgsMFfyQgbjKXKnz4K4Xu/8l
1WIecgfRz03/K62ps0YUmQEwVmUuQ4dkFKxZsQzTd8Ri5voLOQRWtxrTwz2slHR0
o8ghR7R+AC8nUXG24FTgE4/q6WQZN81t/uliPLXN7HnDUa/vjQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAjq7AHYfn7H96mQSCSiwOGp1q80MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzAyYjdjMDgtMzE5MC0z
OGI1LTg0OTEtMjE3NTBiNTRkYWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEB8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACX2sQ7+24KP8qh+Bkmj5ZDU82Z8Fp5bp1YgBQS7vjnla+YEDP2xGB9jd
Jf/tbDVDu2A/kWaM2xQsrmfml/YXK1pC3k7pp2JMACMoihyAAMBUc7hG+gxOtKjg
8WuPyLhfiLfEkgxtOFsrq+b75Z79V6ozEhxBQIyaxtKSkYpMStuzniI6WGDje8Q6
Mb9LhdAcRE8fCGktfjisYvH7lk4PTZ8h9CiMyHBbWR8GJuTTqPBlk3EQfIWnymC/
7205QLddz+5zTEwGg4CaGFjhntqoyEtv7Cj7wzYXRl75TNXmR09cmWubsxwMDlfZ
DmSsA+q7ekxg3ORZcm9ejbvrlLB13w==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:11 2025 by rpki-client