Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/351630f2-ca22-31a1-a37e-51d9f3b44189.roa
File:                     351630f2-ca22-31a1-a37e-51d9f3b44189.roa (raw, json)
Hash identifier:          ROazVrqNbIhUuWTWkA8qygeHYcbhNOzYGBCYYwATs/4=
Subject key identifier:   CB:3A:3E:82:2D:DB:4B:1C:AD:92:D4:53:C0:AD:00:5F:4C:74:2A:84
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE537EF40BD46249863F141C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/351630f2-ca22-31a1-a37e-51d9f3b44189.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        198.41.96.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e5:37:ef:40:bd:46:24:98:63:f1:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=bae67665-4e6a-4b6f-ae96-2d28e13af991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6d:e0:de:9f:f2:55:83:6a:ec:52:f8:93:3d:
                    4b:87:9b:57:21:36:cf:03:7a:8b:c2:24:48:87:7e:
                    6e:c0:91:45:16:b8:bd:69:19:06:16:90:45:17:ae:
                    bb:6d:2e:70:5b:8a:98:df:f2:8e:da:75:43:1d:f8:
                    a5:bf:e2:b2:98:b0:fa:c6:c7:af:4b:6b:80:12:b7:
                    f4:cb:6c:f5:91:ca:a9:c9:49:96:c6:be:90:d6:aa:
                    7c:e4:12:0c:23:f2:15:d9:e4:3a:9f:44:bf:53:d8:
                    95:e5:64:8b:00:2e:ae:84:52:32:94:1b:ac:21:7c:
                    f6:47:4b:bc:a2:95:bb:a2:24:b3:4c:52:67:65:6f:
                    2f:47:72:a2:6b:60:99:3f:7e:59:14:af:a6:78:1e:
                    ea:01:52:c4:32:1b:65:6f:2c:0f:bc:d0:0e:59:1f:
                    e7:51:f1:81:b0:52:82:c5:8e:cb:4c:34:36:0e:e3:
                    35:f4:7a:1e:58:51:b3:28:46:c8:1a:e7:69:6d:da:
                    c1:30:25:6a:35:f5:08:b1:d8:60:ad:c2:66:11:16:
                    16:e9:c8:1b:fe:57:a0:b0:12:10:ea:f0:59:06:b8:
                    e8:bc:fe:07:8b:01:47:1c:ae:9d:1d:0c:ca:36:81:
                    75:b1:f2:c2:50:7c:b9:f1:86:ff:fc:99:99:24:fd:
                    ee:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3A:3E:82:2D:DB:4B:1C:AD:92:D4:53:C0:AD:00:5F:4C:74:2A:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/351630f2-ca22-31a1-a37e-51d9f3b44189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:0e:75:51:0c:25:bb:85:25:f9:83:ed:be:2d:77:b0:fa:52:
         20:cb:79:b6:94:69:75:ce:c8:0f:1a:c4:57:76:6d:f8:0b:be:
         0f:35:c9:09:d6:1e:b3:78:65:0f:39:49:56:04:99:ff:b8:e3:
         56:8a:ad:a6:0c:8a:80:c6:0a:14:7c:5a:f2:7a:17:49:c9:4e:
         3d:83:21:19:30:e2:55:04:59:d5:49:ba:ad:49:11:d8:ae:63:
         96:a5:68:a4:0e:c0:08:a9:e2:3b:e5:c4:69:04:d0:12:23:9d:
         44:59:fe:f1:b3:99:af:fa:88:ff:05:54:5d:80:a0:4b:41:03:
         dc:ec:ec:44:0f:26:98:16:c5:38:66:48:6e:39:ee:de:69:6a:
         4a:2e:54:11:b5:99:92:7f:f5:4f:74:dd:49:80:32:15:5f:59:
         8c:68:7e:00:dc:ad:fe:f1:2a:ad:7e:cb:97:12:20:b3:ec:4e:
         13:db:73:9b:03:a9:50:3f:3f:ad:0d:cd:e9:60:d9:e5:3b:28:
         10:6b:80:1c:83:73:96:3e:b0:56:3f:23:fd:a6:b7:13:09:d5:
         98:23:b2:dd:fc:5d:27:07:83:34:7c:06:3e:77:47:e4:f1:80:
         99:bf:72:1b:d3:ae:70:ba:6f:f2:4b:94:3a:8d:de:e3:19:f6:
         6d:e0:26:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDzlN+9AvUYkmGPxQcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDIxMTA1MDAwMFoXDTIyMDMxODA0MDAwMFowLzEtMCsGA1UEAxMk
YmFlNjc2NjUtNGU2YS00YjZmLWFlOTYtMmQyOGUxM2FmOTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0m3g3p/yVYNq7FL4kz1Lh5tXITbPA3qLwiRI
h35uwJFFFri9aRkGFpBFF667bS5wW4qY3/KO2nVDHfilv+KymLD6xsevS2uAErf0
y2z1kcqpyUmWxr6Q1qp85BIMI/IV2eQ6n0S/U9iV5WSLAC6uhFIylBusIXz2R0u8
opW7oiSzTFJnZW8vR3Kia2CZP35ZFK+meB7qAVLEMhtlbywPvNAOWR/nUfGBsFKC
xY7LTDQ2DuM19HoeWFGzKEbIGudpbdrBMCVqNfUIsdhgrcJmERYW6cgb/legsBIQ
6vBZBrjovP4HiwFHHK6dHQzKNoF1sfLCUHy58Yb//JmZJP3u5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMs6PoIt20scrZLUU8CtAF9MdCqEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzUxNjMwZjItY2EyMi0z
MWExLWEzN2UtNTFkOWYzYjQ0MTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxilgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE0OdVEMJbuFJfmD7b4td7D6UiDLebaUaXXOyA8axFd2bfgLvg81yQnW
HrN4ZQ85SVYEmf+441aKraYMioDGChR8WvJ6F0nJTj2DIRkw4lUEWdVJuq1JEdiu
Y5alaKQOwAip4jvlxGkE0BIjnURZ/vGzma/6iP8FVF2AoEtBA9zs7EQPJpgWxThm
SG457t5pakouVBG1mZJ/9U903UmAMhVfWYxofgDcrf7xKq1+y5cSILPsThPbc5sD
qVA/P60Nzelg2eU7KBBrgByDc5Y+sFY/I/2mtxMJ1Zgjst38XScHgzR8Bj53R+Tx
gJm/chvTrnC6b/JLlDqN3uMZ9m3gJnI=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:26:39 2025 by rpki-client