Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3249d207-37a1-32cd-845b-2a2b355c067f.roa
File:                     3249d207-37a1-32cd-845b-2a2b355c067f.roa (raw, json)
Hash identifier:          kh+C+N//AwVkTRTEKvF9ptqBpu3l3BqUqA6oi9Hw0kI=
Subject key identifier:   76:D7:48:C4:A5:63:9B:F1:AD:6F:28:6B:6B:1C:11:CC:52:18:7A:23
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E469A4CDB6A4310E00F509E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3249d207-37a1-32cd-845b-2a2b355c067f.roa
Signing time:             Fri 17 Jun 2022 12:00:00 +0000
ROA not before:           Fri 17 Jun 2022 12:00:00 +0000
ROA not after:            Sat 23 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        192.189.197.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:46:9a:4c:db:6a:43:10:e0:0f:50:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 17 12:00:00 2022 GMT
            Not After : Jul 23 04:00:00 2022 GMT
        Subject: CN=bc7f315a-280b-49f8-9453-b2b4427a09b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9f:fe:59:07:78:3c:81:b6:a5:f7:d7:32:70:
                    ee:82:38:33:fc:a5:5d:c3:b9:90:91:56:a6:5a:6d:
                    a2:30:07:a6:ec:04:23:7c:26:b8:46:9a:67:9f:df:
                    51:73:5d:65:87:ac:2c:d0:30:e3:12:33:6b:ca:54:
                    ac:b8:df:07:50:c9:f1:ac:5f:10:86:5d:8b:21:68:
                    eb:5a:d7:fd:79:29:81:7e:48:51:b2:26:53:10:53:
                    bb:cc:96:e6:7b:6e:ea:6e:94:c4:4c:38:9e:c5:eb:
                    ba:a2:db:4d:db:ca:81:bb:2a:12:3c:44:7d:c0:7d:
                    5b:87:86:a5:42:70:c7:fd:8b:26:7d:fb:de:b3:0c:
                    af:b8:8a:9c:63:b2:d9:b4:93:04:2e:b8:16:3c:f9:
                    8d:aa:86:8b:ff:cf:5e:98:49:05:cf:be:06:2c:69:
                    19:92:dd:d0:ed:06:f9:0c:e1:f2:e3:3a:e2:80:b8:
                    ef:26:8e:c4:f7:18:46:33:84:73:c1:78:e8:a1:2b:
                    a9:1a:37:da:56:2d:e0:cc:30:20:61:14:92:5f:19:
                    65:f2:8c:b7:9d:b3:79:df:a0:5c:99:3d:d5:97:0b:
                    4b:3f:f1:eb:b0:26:ee:4c:77:6b:6d:9e:fa:2f:c2:
                    49:12:b2:3f:80:c7:14:35:c6:1f:7e:de:fc:be:19:
                    ed:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D7:48:C4:A5:63:9B:F1:AD:6F:28:6B:6B:1C:11:CC:52:18:7A:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3249d207-37a1-32cd-845b-2a2b355c067f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:a7:8f:96:3b:a1:a9:4b:ad:f0:71:9c:eb:aa:5e:5e:3c:a1:
         91:7f:63:9d:91:ff:9f:92:39:dd:f2:54:9f:e3:1b:2d:29:89:
         0a:be:84:8e:6a:13:85:59:74:9a:82:10:93:8a:b5:86:77:42:
         90:9b:5b:0b:2a:ae:21:26:1f:d4:2f:a1:c4:72:33:84:fb:7d:
         22:69:a9:db:be:ec:2c:50:fd:9a:79:f7:7e:a8:e5:a1:72:d2:
         11:99:5b:c6:da:7e:03:c2:01:2b:8e:4e:70:2c:3a:4f:47:6e:
         0a:95:2f:ff:0a:b6:ea:c8:0f:5c:5c:df:31:c6:d4:45:a8:09:
         16:21:cd:15:ff:8e:e6:84:b8:fb:cc:2c:55:e7:8a:c5:43:aa:
         c7:49:e7:83:7b:19:af:74:8b:14:c0:5a:c3:28:57:b6:a8:21:
         95:4f:cc:ac:2c:01:57:38:45:fd:94:0e:c0:87:83:e9:39:b7:
         90:0b:ba:52:70:1b:2a:df:fe:8d:4e:0f:73:30:e5:b4:49:9e:
         0e:8c:61:cb:89:ae:57:10:af:48:4d:69:b6:d4:72:80:ea:15:
         07:c1:d5:f1:c6:19:cf:9f:d2:b8:21:db:6a:e6:f5:f8:0e:57:
         5f:d1:83:c5:78:f9:47:9c:98:1f:98:da:fd:9b:59:da:57:1f:
         8a:e4:c5:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD5GmkzbakMQ4A9QnoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYxNzEyMDAwMFoXDTIyMDcyMzA0MDAwMFowLzEtMCsGA1UEAxMk
YmM3ZjMxNWEtMjgwYi00OWY4LTk0NTMtYjJiNDQyN2EwOWIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ/+WQd4PIG2pffXMnDugjgz/KVdw7mQkVam
Wm2iMAem7AQjfCa4Rppnn99Rc11lh6ws0DDjEjNrylSsuN8HUMnxrF8Qhl2LIWjr
Wtf9eSmBfkhRsiZTEFO7zJbme27qbpTETDiexeu6ottN28qBuyoSPER9wH1bh4al
QnDH/YsmffveswyvuIqcY7LZtJMELrgWPPmNqoaL/89emEkFz74GLGkZkt3Q7Qb5
DOHy4zrigLjvJo7E9xhGM4RzwXjooSupGjfaVi3gzDAgYRSSXxll8oy3nbN536Bc
mT3VlwtLP/HrsCbuTHdrbZ76L8JJErI/gMcUNcYfft78vhntgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHbXSMSlY5vxrW8oa2scEcxSGHojMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzI0OWQyMDctMzdhMS0z
MmNkLTg0NWItMmEyYjM1NWMwNjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL3FMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA+nj5Y7oalLrfBxnOuqXl48oZF/Y52R/5+SOd3yVJ/jGy0piQq+hI5q
E4VZdJqCEJOKtYZ3QpCbWwsqriEmH9QvocRyM4T7fSJpqdu+7CxQ/Zp5936o5aFy
0hGZW8bafgPCASuOTnAsOk9HbgqVL/8KturID1xc3zHG1EWoCRYhzRX/juaEuPvM
LFXnisVDqsdJ54N7Ga90ixTAWsMoV7aoIZVPzKwsAVc4Rf2UDsCHg+k5t5ALulJw
Gyrf/o1OD3Mw5bRJng6MYcuJrlcQr0hNabbUcoDqFQfB1fHGGc+f0rgh22rm9fgO
V1/Rg8V4+UecmB+Y2v2bWdpXH4rkxU8=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:04:56 2025 by rpki-client