Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/312c2aff-9cca-381e-b1cd-582c01daa223.roa
File:                     312c2aff-9cca-381e-b1cd-582c01daa223.roa (raw, json)
Hash identifier:          1ALEB5EB7tgdbueLH+DXwM3LLaKkrz8yAG+Izf/A8BA=
Subject key identifier:   5E:A6:E5:E3:75:92:64:3B:8F:E9:08:49:B2:FF:2A:26:B5:1C:CA:31
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E43FC4AC22249D8AFA9E9D000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/312c2aff-9cca-381e-b1cd-582c01daa223.roa
Signing time:             Thu 16 Jun 2022 12:00:00 +0000
ROA not before:           Thu 16 Jun 2022 12:00:00 +0000
ROA not after:            Fri 22 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.170.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:43:fc:4a:c2:22:49:d8:af:a9:e9:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 16 12:00:00 2022 GMT
            Not After : Jul 22 04:00:00 2022 GMT
        Subject: CN=014e707e-38b5-440d-96b6-4f3ab9e2cd74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:19:ba:9a:a3:00:da:5e:81:4c:63:4e:b9:dc:
                    52:f3:45:7f:7f:5b:0b:91:a0:98:5e:50:73:b7:53:
                    fd:5d:b4:c7:f4:76:53:44:c4:59:7c:b0:24:6a:fb:
                    d3:53:94:bf:b1:14:81:a3:d4:53:c4:3b:d1:cb:ec:
                    44:42:f1:d8:56:1b:22:70:9b:b4:ca:5f:2f:89:31:
                    76:04:6e:83:4f:94:bb:d1:44:97:b8:43:dd:4b:58:
                    47:73:3f:d5:c9:49:0e:39:15:03:d7:0f:c2:74:8b:
                    8d:b3:97:b1:d2:9f:ed:a2:c2:2c:c6:26:a4:db:0e:
                    25:29:16:ae:d1:70:6c:6f:1c:01:40:69:36:52:0b:
                    61:38:c6:3f:41:cf:73:57:f0:bb:d5:ec:f3:ab:d1:
                    3a:b3:9d:1d:62:4d:c9:5b:03:9f:ac:6f:de:5c:72:
                    ef:80:ea:13:bf:9a:d7:0c:bd:47:ab:8c:4b:07:e6:
                    7f:c6:e6:8e:b6:ab:8d:8b:b4:4a:7e:44:70:94:d7:
                    15:05:2b:80:b2:46:95:ac:bd:df:14:ff:2b:1e:09:
                    5e:43:32:82:1a:8b:15:16:ab:6b:0a:14:40:74:0e:
                    f4:f0:8f:39:27:07:9e:e8:d4:d0:ea:49:2a:30:21:
                    b4:ba:48:16:9a:54:07:05:8b:3b:25:75:b9:f4:43:
                    6f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A6:E5:E3:75:92:64:3B:8F:E9:08:49:B2:FF:2A:26:B5:1C:CA:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/312c2aff-9cca-381e-b1cd-582c01daa223.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.170.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:53:ef:61:9d:df:3f:34:22:f6:cd:98:ce:a0:9b:29:2f:4e:
         fe:cd:ce:79:14:46:84:07:6a:c2:ce:f9:a1:1c:68:98:8a:3a:
         e2:b6:a0:76:d1:d0:9d:b3:a1:35:5a:b0:1a:09:71:04:64:8b:
         66:d7:16:31:7c:29:51:0f:a7:3d:f6:1d:3e:62:01:10:b4:42:
         b8:23:3c:58:44:e5:8f:ab:6f:dc:3a:16:1d:04:74:88:9e:35:
         2b:56:0d:25:ee:9c:3a:8a:80:04:67:4b:1a:bf:ce:48:aa:0c:
         fe:83:da:6a:54:b9:c6:37:50:42:7c:c1:f9:da:f9:83:56:3d:
         ac:40:3d:81:08:3b:23:68:1f:a1:92:2e:a0:6c:2f:95:f9:14:
         e2:c4:1d:32:cf:29:91:93:79:28:5c:cb:76:fe:e2:4d:1f:86:
         69:77:72:0e:08:5c:98:a7:45:aa:c1:d8:82:53:8a:e8:d5:b8:
         43:e8:63:e1:30:80:ed:da:24:ad:a6:e7:fd:c6:d8:d8:fd:dc:
         ef:1d:22:86:9b:97:27:33:3c:fb:07:6a:54:40:47:28:46:7e:
         8f:ae:a0:4d:91:b7:b7:39:1f:bb:4e:b5:6b:07:fc:9d:44:f8:
         82:6f:e8:ce:15:84:97:88:a1:89:79:c7:a8:ed:6b:4b:5f:c2:
         8d:a3:7d:df
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5D/ErCIknYr6np0AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYxNjEyMDAwMFoXDTIyMDcyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MDE0ZTcwN2UtMzhiNS00NDBkLTk2YjYtNGYzYWI5ZTJjZDc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRm6mqMA2l6BTGNOudxS80V/f1sLkaCYXlBz
t1P9XbTH9HZTRMRZfLAkavvTU5S/sRSBo9RTxDvRy+xEQvHYVhsicJu0yl8viTF2
BG6DT5S70USXuEPdS1hHcz/VyUkOORUD1w/CdIuNs5ex0p/tosIsxiak2w4lKRau
0XBsbxwBQGk2UgthOMY/Qc9zV/C71ezzq9E6s50dYk3JWwOfrG/eXHLvgOoTv5rX
DL1Hq4xLB+Z/xuaOtquNi7RKfkRwlNcVBSuAskaVrL3fFP8rHgleQzKCGosVFqtr
ChRAdA708I85Jwee6NTQ6kkqMCG0ukgWmlQHBYs7JXW59ENvdwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFF6m5eN1kmQ7j+kISbL/Kia1HMoxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzEyYzJhZmYtOWNjYS0z
ODFlLWIxY2QtNTgyYzAxZGFhMjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEKowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgFPvYZ3fPzQi9s2YzqCbKS9O/s3OeRRGhAdqws75oRxomIo64ragdtHQ
nbOhNVqwGglxBGSLZtcWMXwpUQ+nPfYdPmIBELRCuCM8WETlj6tv3DoWHQR0iJ41
K1YNJe6cOoqABGdLGr/OSKoM/oPaalS5xjdQQnzB+dr5g1Y9rEA9gQg7I2gfoZIu
oGwvlfkU4sQdMs8pkZN5KFzLdv7iTR+GaXdyDghcmKdFqsHYglOK6NW4Q+hj4TCA
7dokrabn/cbY2P3c7x0ihpuXJzM8+wdqVEBHKEZ+j66gTZG3tzkfu061awf8nUT4
gm/ozhWEl4ihiXnHqO1rS1/CjaN93w==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:58 2025 by rpki-client