Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3309ca0f-5f04-3646-8236-f3efd29913d6.roa
File:                     3309ca0f-5f04-3646-8236-f3efd29913d6.roa (raw, json)
Hash identifier:          7cNuLJOkHoCpqg0isXc2N3R7srgCJaf4Avl6N9uZPGI=
Subject key identifier:   58:3C:0A:6A:1E:9A:14:99:0E:87:EE:4F:DE:2E:90:D2:88:65:EE:89
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C8522706E0F525AB39EC97080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3309ca0f-5f04-3646-8236-f3efd29913d6.roa
Signing time:             Sat 08 Jan 2022 05:00:00 +0000
ROA not before:           Sat 08 Jan 2022 05:00:00 +0000
ROA not after:            Sat 12 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        16.16.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:85:22:70:6e:0f:52:5a:b3:9e:c9:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  8 05:00:00 2022 GMT
            Not After : Feb 12 05:00:00 2022 GMT
        Subject: CN=dcc1509e-97cf-428e-89a3-99475675dfb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:41:7b:70:00:ef:7f:3f:63:84:65:fb:ec:33:
                    d9:10:93:ce:4e:4a:a5:ca:24:eb:6b:86:db:ce:de:
                    ab:c1:78:9d:80:d8:5c:63:cb:91:60:bb:c1:81:bf:
                    b3:69:12:87:59:43:36:15:f9:eb:da:5b:e2:6c:d3:
                    1f:51:26:19:8e:8d:72:d2:9a:78:db:c3:9a:eb:ab:
                    9b:a0:c4:3a:a6:a8:7e:d8:32:6b:57:5b:87:aa:4e:
                    85:74:6b:ab:96:91:0d:e2:1d:d3:04:22:c3:f5:9c:
                    35:c2:26:89:c4:a5:91:b5:7c:5f:76:18:50:37:a2:
                    54:e3:53:3c:ec:40:fb:ac:fd:e5:71:9f:29:c7:ec:
                    fd:4f:80:43:47:d9:d0:28:10:24:f0:17:fa:95:5e:
                    89:a0:7f:a6:74:ed:2f:d8:b6:41:b7:6f:d2:ec:a9:
                    18:47:6d:1f:66:d6:f3:64:cc:69:71:fa:e7:1e:0c:
                    45:b3:16:ef:ae:9b:ed:0a:64:cd:0d:a2:98:6e:97:
                    7c:b0:4a:fa:4c:15:12:0b:05:0a:29:ff:e5:72:82:
                    58:f4:23:34:9c:34:cd:d5:91:45:63:b7:57:4d:82:
                    bc:f1:18:df:de:7d:72:c2:85:b7:bc:8b:42:3d:04:
                    47:d7:fd:eb:1d:ee:5a:1a:24:27:9e:71:0f:9b:26:
                    8c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3C:0A:6A:1E:9A:14:99:0E:87:EE:4F:DE:2E:90:D2:88:65:EE:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3309ca0f-5f04-3646-8236-f3efd29913d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.16.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:d4:9c:03:b8:39:e0:d6:8f:c6:1c:97:2f:10:76:40:c3:07:
         df:87:21:4e:ab:88:20:3a:44:b3:4d:54:5e:11:ca:b2:c7:32:
         fa:14:3a:97:c5:70:48:59:e4:e7:d5:c1:0b:fa:0a:ba:ff:76:
         fe:bd:a9:17:f3:8c:15:fe:c8:eb:85:4e:05:72:9e:45:14:bd:
         bd:4a:c5:ac:18:f9:2d:fd:9b:82:ca:2b:e9:47:b6:15:7b:64:
         67:9d:ce:b3:48:82:79:84:03:1c:db:95:73:d6:22:74:ab:e7:
         ee:88:41:2e:0c:2e:00:32:3f:6b:d6:27:07:ae:cd:cd:4e:e7:
         a8:a9:6d:12:dc:b8:db:7d:38:bd:21:a5:da:b7:f2:cb:9c:28:
         84:31:99:5d:82:9d:c0:aa:b4:d2:f5:4d:c1:47:ca:82:85:2e:
         69:75:db:5f:d4:be:2b:07:71:a9:e8:20:83:c8:58:a1:8e:b0:
         1a:a4:bf:5a:a2:ed:9a:df:6f:15:24:85:c6:d8:54:52:b2:f2:
         5a:7c:0c:7e:61:80:10:08:8a:a2:08:55:90:74:8d:68:4b:5a:
         f5:55:14:46:53:93:26:b0:de:a2:be:22:80:02:5c:13:95:af:
         cd:dc:0f:7a:15:07:3e:c2:de:a9:c1:07:b1:0d:dd:fe:36:88:
         21:35:4f:e0
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDyFInBuD1Jas57JcIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDEwODA1MDAwMFoXDTIyMDIxMjA1MDAwMFowLzEtMCsGA1UEAxMk
ZGNjMTUwOWUtOTdjZi00MjhlLTg5YTMtOTk0NzU2NzVkZmIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkF7cADvfz9jhGX77DPZEJPOTkqlyiTra4bb
zt6rwXidgNhcY8uRYLvBgb+zaRKHWUM2Ffnr2lvibNMfUSYZjo1y0pp428Oa66ub
oMQ6pqh+2DJrV1uHqk6FdGurlpEN4h3TBCLD9Zw1wiaJxKWRtXxfdhhQN6JU41M8
7ED7rP3lcZ8px+z9T4BDR9nQKBAk8Bf6lV6JoH+mdO0v2LZBt2/S7KkYR20fZtbz
ZMxpcfrnHgxFsxbvrpvtCmTNDaKYbpd8sEr6TBUSCwUKKf/lcoJY9CM0nDTN1ZFF
Y7dXTYK88Rjf3n1ywoW3vItCPQRH1/3rHe5aGiQnnnEPmyaMgwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFg8CmoemhSZDofuT94ukNKIZe6JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzMwOWNhMGYtNWYwNC0z
NjQ2LTgyMzYtZjNlZmQyOTkxM2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEBAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAUdScA7g54NaPxhyXLxB2QMMH34chTquIIDpEs01UXhHKsscy+hQ6l8Vw
SFnk59XBC/oKuv92/r2pF/OMFf7I64VOBXKeRRS9vUrFrBj5Lf2bgsor6Ue2FXtk
Z53Os0iCeYQDHNuVc9YidKvn7ohBLgwuADI/a9YnB67NzU7nqKltEty42304vSGl
2rfyy5wohDGZXYKdwKq00vVNwUfKgoUuaXXbX9S+Kwdxqeggg8hYoY6wGqS/WqLt
mt9vFSSFxthUUrLyWnwMfmGAEAiKoghVkHSNaEta9VUURlOTJrDeor4igAJcE5Wv
zdwPehUHPsLeqcEHsQ3d/jaIITVP4A==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:14:10 2025 by rpki-client