Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/35d53ab8-8022-3040-818c-d41cffc21add.roa
File:                     35d53ab8-8022-3040-818c-d41cffc21add.roa (raw, json)
Hash identifier:          n/csFFJjF2HTyqk5PZa27LAaUmmTaJ8756bIdnsp/4s=
Subject key identifier:   A7:AC:69:A5:C2:92:78:C5:CE:D3:5A:86:74:28:F9:5B:4E:A4:6F:C5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E461B8C4148D78F7748AFD524
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/35d53ab8-8022-3040-818c-d41cffc21add.roa
Signing time:             Thu 16 Jun 2022 12:00:00 +0000
ROA not before:           Thu 16 Jun 2022 12:00:00 +0000
ROA not after:            Fri 22 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        156.5.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:46:1b:8c:41:48:d7:8f:77:48:af:d5:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 16 12:00:00 2022 GMT
            Not After : Jul 22 04:00:00 2022 GMT
        Subject: CN=589f2a47-301f-464a-823e-c59e0615b472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c0:6f:b6:de:ab:f1:9d:1a:31:e0:7c:1e:ac:
                    79:0b:41:51:cd:3f:5f:40:59:98:06:67:be:07:de:
                    48:e4:e6:3f:fc:d1:79:c1:90:1a:26:32:00:e7:22:
                    b1:58:a1:c6:e2:62:89:76:1b:7c:ca:6f:18:0f:6e:
                    e2:e6:f3:1e:1a:bd:0a:a9:21:00:e3:23:15:b3:7d:
                    c3:51:4a:05:63:fd:fc:7a:69:20:1d:00:e0:8e:0e:
                    2c:6a:2d:d0:58:9a:ad:93:de:68:b2:f9:e1:e2:fd:
                    b8:57:38:67:7f:71:16:c6:11:72:be:ec:0b:68:49:
                    c4:17:bb:5c:4d:a9:49:19:47:32:57:65:6e:9b:26:
                    08:ac:88:81:37:3a:50:d2:97:e7:79:dd:d3:e9:db:
                    39:c3:31:0e:1b:69:98:b2:5d:22:5b:fa:60:bb:05:
                    a5:6a:e1:7c:c3:2f:a8:27:95:03:d5:3a:bc:2c:1c:
                    b4:cc:ff:dc:6f:ff:75:02:41:73:0e:27:65:cb:6d:
                    9c:d7:37:08:87:e4:8e:61:5b:b6:15:25:5b:65:91:
                    04:bf:81:b4:c1:a2:0d:27:b3:6d:8a:1b:35:da:4f:
                    89:bb:42:67:3d:82:8a:b5:6b:4e:e6:55:1f:c2:37:
                    94:3a:0a:44:f0:aa:9d:66:1b:1e:eb:e8:90:21:81:
                    e5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AC:69:A5:C2:92:78:C5:CE:D3:5A:86:74:28:F9:5B:4E:A4:6F:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/35d53ab8-8022-3040-818c-d41cffc21add.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.5.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:b4:9a:77:67:6d:6f:b4:c2:84:f7:80:c9:50:6e:d2:5d:ec:
         4c:e0:22:85:3d:05:97:4e:fc:b8:40:9f:70:2f:b8:fb:af:2a:
         da:1d:2f:01:54:4d:b0:27:6d:1e:8a:bc:0f:8c:20:29:55:17:
         a4:a5:f2:db:d7:14:56:0d:61:04:5a:22:e2:15:22:eb:a7:d5:
         68:11:b7:d4:00:cf:15:d9:9c:b4:e4:3a:78:37:eb:f3:ad:0e:
         25:bd:a3:33:85:87:bb:fb:f2:cf:80:2e:46:68:36:0c:77:28:
         0e:23:96:04:c4:60:ab:cc:ff:49:97:a6:ea:a5:d1:30:6e:3a:
         36:a9:1b:16:21:e9:9b:f9:c1:ff:3b:a7:f2:4c:f3:29:7a:38:
         4b:be:98:89:cc:b4:14:35:20:2b:24:36:2b:c2:40:1d:c8:9e:
         3e:8f:b4:b4:ab:fa:bf:56:75:76:6e:43:d0:cc:13:2e:61:a5:
         72:e0:f6:6a:08:02:f0:8b:3c:38:8a:d3:b0:c6:a3:94:12:b0:
         14:24:bc:02:e9:8d:e0:2d:77:4b:4a:67:86:43:68:d4:8b:79:
         17:11:22:f2:8c:df:9e:58:cb:3e:30:a1:c0:5d:5c:04:f8:ba:
         f3:01:f2:8d:07:f3:5b:86:b5:7f:d2:0c:e4:cd:24:3f:b0:09:
         89:06:54:b4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5GG4xBSNePd0iv1SQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYxNjEyMDAwMFoXDTIyMDcyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NTg5ZjJhNDctMzAxZi00NjRhLTgyM2UtYzU5ZTA2MTViNDcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsBvtt6r8Z0aMeB8Hqx5C0FRzT9fQFmYBme+
B95I5OY//NF5wZAaJjIA5yKxWKHG4mKJdht8ym8YD27i5vMeGr0KqSEA4yMVs33D
UUoFY/38emkgHQDgjg4sai3QWJqtk95osvnh4v24Vzhnf3EWxhFyvuwLaEnEF7tc
TalJGUcyV2VumyYIrIiBNzpQ0pfned3T6ds5wzEOG2mYsl0iW/pguwWlauF8wy+o
J5UD1Tq8LBy0zP/cb/91AkFzDidly22c1zcIh+SOYVu2FSVbZZEEv4G0waINJ7Nt
ihs12k+Ju0JnPYKKtWtO5lUfwjeUOgpE8KqdZhse6+iQIYHlvQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKesaaXCknjFztNahnQo+VtOpG/FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzVkNTNhYjgtODAyMi0z
MDQwLTgxOGMtZDQxY2ZmYzIxYWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnAUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZrSad2dtb7TChPeAyVBu0l3sTOAihT0Fl078uECfcC+4+68q2h0vAVRN
sCdtHoq8D4wgKVUXpKXy29cUVg1hBFoi4hUi66fVaBG31ADPFdmctOQ6eDfr860O
Jb2jM4WHu/vyz4AuRmg2DHcoDiOWBMRgq8z/SZem6qXRMG46NqkbFiHpm/nB/zun
8kzzKXo4S76Yicy0FDUgKyQ2K8JAHciePo+0tKv6v1Z1dm5D0MwTLmGlcuD2aggC
8Is8OIrTsMajlBKwFCS8AumN4C13S0pnhkNo1It5FxEi8ozfnljLPjChwF1cBPi6
8wHyjQfzW4a1f9IM5M0kP7AJiQZUtA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:50 2025 by rpki-client