Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/31a1033f-f448-376b-9de2-f7f83f693a2b.roa
File:                     31a1033f-f448-376b-9de2-f7f83f693a2b.roa (raw, json)
Hash identifier:          QzkrIfe+u6IwpQmLrFKWUNTx4sHoJSpfM3punG+emVg=
Subject key identifier:   3A:3A:C2:6B:58:09:D5:8F:B9:38:26:1C:5C:62:5E:73:EF:56:33:1E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858400E264042C9C276476AD26340
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/31a1033f-f448-376b-9de2-f7f83f693a2b.roa
Signing time:             Sun 27 Nov 2022 12:00:00 +0000
ROA not before:           Sun 27 Nov 2022 12:00:00 +0000
ROA not after:            Mon 02 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        16.156.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:0e:26:40:42:c9:c2:76:47:6a:d2:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 27 12:00:00 2022 GMT
            Not After : Jan  2 05:00:00 2023 GMT
        Subject: CN=b59e360c-38de-461e-a887-867bb21d1a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ba:57:82:b1:8d:18:6d:ec:cf:ad:90:8f:46:
                    08:e7:24:52:dc:5d:bd:43:f3:83:f0:11:3a:a1:a5:
                    67:8e:6c:ba:38:73:0f:73:34:66:c9:d0:a4:4f:44:
                    22:cf:32:40:ae:0d:ee:62:c7:81:11:89:4e:96:f2:
                    c7:66:c3:16:ca:23:09:ee:de:3a:50:56:0e:36:d8:
                    21:31:f8:9a:3e:9e:5c:0a:fe:3f:ca:a9:eb:51:d2:
                    0a:98:1b:ab:78:f8:d6:7e:21:87:9d:cf:6c:ef:50:
                    aa:b4:27:09:fb:4e:d1:51:d7:4f:61:7f:0c:35:7f:
                    5c:bb:16:52:4b:59:88:fd:fb:21:32:93:59:a4:27:
                    a9:64:57:e6:e7:57:9f:1f:bd:03:7d:33:b7:8c:09:
                    ce:6a:e0:4e:6b:21:fd:6f:93:53:f3:ff:9d:af:27:
                    c6:b8:30:2a:a1:73:f1:a3:ac:74:b8:7a:10:c8:d3:
                    a6:d7:33:c5:2a:84:4d:75:17:09:c7:40:fa:0b:8b:
                    d8:47:c1:86:7e:de:44:2d:a0:f4:cc:1c:93:01:73:
                    a0:4e:81:a7:ec:32:cb:65:9a:7e:62:c0:8d:ee:89:
                    71:a6:37:56:d3:4d:72:af:ca:77:e5:28:ba:3d:d1:
                    d1:2e:94:45:8c:eb:6b:8b:b2:2c:b4:98:d2:27:b2:
                    05:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3A:C2:6B:58:09:D5:8F:B9:38:26:1C:5C:62:5E:73:EF:56:33:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/31a1033f-f448-376b-9de2-f7f83f693a2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.156.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:57:80:c6:46:a8:40:e2:4a:dd:25:f5:0e:f8:0e:0c:52:a6:
         00:15:97:52:e3:2e:ab:70:86:f8:95:df:14:4f:65:b2:ad:f9:
         85:c9:f8:8c:0c:ee:d3:d3:3a:a2:a4:84:4f:33:ce:ce:ef:56:
         f9:a8:9f:93:ca:9b:5c:78:76:fd:51:23:e4:d6:ab:48:b8:91:
         ff:f9:4d:aa:de:0c:a8:17:70:84:be:24:b4:63:c7:e1:0c:a1:
         9a:59:d7:ce:fc:ed:ec:5e:20:f0:b1:92:58:be:97:21:af:cb:
         55:6b:53:f7:91:ff:da:13:62:9c:3a:95:31:2b:c5:91:b7:cc:
         e3:eb:b2:4e:ad:d5:20:a6:a4:2d:fb:93:41:54:15:28:0c:d9:
         64:d0:77:3a:f3:08:79:9e:b7:ca:04:1a:72:aa:c9:cc:1e:a2:
         1b:9e:8a:ea:73:3b:a7:c5:6b:de:63:71:c8:69:d9:28:6a:47:
         c0:18:ca:0e:28:09:fd:01:57:4f:f6:45:3c:2c:89:28:c6:b6:
         e8:c7:80:09:54:ac:71:4e:5e:cb:54:de:b5:8a:17:a4:de:ee:
         3d:5e:be:49:69:8f:5e:ec:7a:61:b3:c0:6c:18:c1:27:a9:51:
         94:03:f0:eb:dd:2f:1b:f5:4e:4a:9c:1e:e1:94:32:06:4f:c6:
         f3:07:73:4b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAOJkBCycJ2R2rSY0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEyNzEyMDAwMFoXDTIzMDEwMjA1MDAwMFowLzEtMCsGA1UEAxMk
YjU5ZTM2MGMtMzhkZS00NjFlLWE4ODctODY3YmIyMWQxYTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbpXgrGNGG3sz62Qj0YI5yRS3F29Q/OD8BE6
oaVnjmy6OHMPczRmydCkT0QizzJArg3uYseBEYlOlvLHZsMWyiMJ7t46UFYONtgh
MfiaPp5cCv4/yqnrUdIKmBurePjWfiGHnc9s71CqtCcJ+07RUddPYX8MNX9cuxZS
S1mI/fshMpNZpCepZFfm51efH70DfTO3jAnOauBOayH9b5NT8/+dryfGuDAqoXPx
o6x0uHoQyNOm1zPFKoRNdRcJx0D6C4vYR8GGft5ELaD0zByTAXOgToGn7DLLZZp+
YsCN7olxpjdW001yr8p35Si6PdHRLpRFjOtri7IstJjSJ7IFbQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDo6wmtYCdWPuTgmHFxiXnPvVjMeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzFhMTAzM2YtZjQ0OC0z
NzZiLTlkZTItZjdmODNmNjkzYTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEJwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAOleAxkaoQOJK3SX1DvgODFKmABWXUuMuq3CG+JXfFE9lsq35hcn4jAzu
09M6oqSETzPOzu9W+aifk8qbXHh2/VEj5NarSLiR//lNqt4MqBdwhL4ktGPH4Qyh
mlnXzvzt7F4g8LGSWL6XIa/LVWtT95H/2hNinDqVMSvFkbfM4+uyTq3VIKakLfuT
QVQVKAzZZNB3OvMIeZ63ygQacqrJzB6iG56K6nM7p8Vr3mNxyGnZKGpHwBjKDigJ
/QFXT/ZFPCyJKMa26MeACVSscU5ey1TetYoXpN7uPV6+SWmPXux6YbPAbBjBJ6lR
lAPw690vG/VOSpwe4ZQyBk/G8wdzSw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:10:33 2025 by rpki-client