Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/389a6c41-d8e7-3761-971b-81038191983e.roa
File:                     389a6c41-d8e7-3761-971b-81038191983e.roa (raw, json)
Hash identifier:          b3q/tTl3SwQkBeD76F2zK6xB//z9vedCAZPu6jWjqCA=
Subject key identifier:   D3:95:1D:BD:56:F6:77:07:85:68:71:80:24:2D:F7:4F:EF:4D:5E:F1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FB1D1CEAB850B76A3DB689480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/389a6c41-d8e7-3761-971b-81038191983e.roa
Signing time:             Tue 25 Oct 2022 12:00:00 +0000
ROA not before:           Tue 25 Oct 2022 12:00:00 +0000
ROA not after:            Wed 30 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        128.81.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b1:d1:ce:ab:85:0b:76:a3:db:68:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 25 12:00:00 2022 GMT
            Not After : Nov 30 05:00:00 2022 GMT
        Subject: CN=909e692f-4e35-48e0-a1e2-0a58a637b9f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:12:02:18:6c:44:2d:40:4f:f2:f2:32:47:da:
                    e0:d7:19:e5:6a:72:a4:66:57:0c:91:52:15:dc:56:
                    73:05:c7:ec:52:28:15:4b:00:ab:01:35:03:55:8c:
                    44:ee:de:f4:ad:4b:da:81:eb:5a:e2:43:65:dc:4c:
                    2c:ad:bf:1d:20:53:c7:37:f1:9a:1c:48:a6:cd:0e:
                    6c:13:8c:bc:45:56:c5:c6:f9:5a:91:30:7c:72:3b:
                    2e:25:6d:a3:50:49:11:74:64:1b:4e:9b:a4:be:79:
                    65:6b:25:16:36:76:0c:76:09:c6:c9:e0:f6:c4:34:
                    3a:0c:00:07:59:09:59:39:9e:25:23:fb:b1:93:46:
                    a1:a9:b2:27:f4:c2:bb:7f:be:b0:97:33:da:d1:af:
                    36:a0:19:de:e7:65:28:7d:a6:56:28:56:65:bc:f3:
                    a9:a9:8c:e9:5e:7c:fd:e1:0e:f4:bb:24:b4:a9:3a:
                    e9:ea:08:0f:dd:2a:25:66:61:2b:02:61:0d:b0:d3:
                    3f:7d:29:ee:20:96:78:12:56:a0:27:87:79:97:d0:
                    d9:a6:63:ba:28:01:6e:f6:c4:21:d6:65:90:c8:18:
                    dd:a4:4b:28:58:95:0f:91:0f:49:21:c4:6b:ae:9a:
                    b6:8d:37:a0:b3:fb:2d:cc:31:08:32:bc:2d:eb:08:
                    f2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:95:1D:BD:56:F6:77:07:85:68:71:80:24:2D:F7:4F:EF:4D:5E:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/389a6c41-d8e7-3761-971b-81038191983e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.81.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:7f:10:6f:35:f5:6d:8c:41:69:15:da:cc:44:f5:84:e4:8d:
         d0:d7:a7:33:76:55:b6:ab:63:69:ee:17:f1:0a:ce:42:49:1c:
         e2:16:29:28:9b:f8:03:bd:f7:76:46:38:2b:76:51:1d:bf:29:
         47:5b:c4:63:99:2d:83:41:db:19:ed:f8:47:24:1b:bc:4b:56:
         20:2d:4f:ee:29:45:49:74:00:8e:3b:66:98:57:da:09:4e:c6:
         8c:3c:cc:3e:5d:cb:6d:0e:57:56:41:1c:7b:16:b8:f5:b8:e1:
         bb:38:5c:45:91:c6:22:db:5f:2b:13:d4:9b:13:99:d5:e7:73:
         5d:7d:59:58:a7:82:f8:c4:0a:86:b5:97:23:a0:c9:0b:69:d6:
         b7:45:f2:84:a4:1b:b8:61:df:fe:92:41:6f:5f:37:23:03:44:
         70:a7:fe:42:87:f3:c2:56:1f:63:21:7f:14:d0:96:f1:6c:f4:
         e6:a7:57:cb:60:d8:e4:b7:a2:ec:d0:60:93:37:b6:90:74:65:
         6c:18:4a:30:29:d3:95:67:00:ea:f6:a8:b3:82:e6:18:93:26:
         42:a8:d9:09:6f:90:13:e4:11:5f:43:5b:e4:61:47:50:98:53:
         5d:63:72:b3:68:2b:f0:76:ae:53:40:eb:de:f0:00:62:6b:e7:
         22:a4:2e:ee
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+x0c6rhQt2o9tolIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAyNTEyMDAwMFoXDTIyMTEzMDA1MDAwMFowLzEtMCsGA1UEAxMk
OTA5ZTY5MmYtNGUzNS00OGUwLWExZTItMGE1OGE2MzdiOWY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhICGGxELUBP8vIyR9rg1xnlanKkZlcMkVIV
3FZzBcfsUigVSwCrATUDVYxE7t70rUvageta4kNl3Ewsrb8dIFPHN/GaHEimzQ5s
E4y8RVbFxvlakTB8cjsuJW2jUEkRdGQbTpukvnllayUWNnYMdgnGyeD2xDQ6DAAH
WQlZOZ4lI/uxk0ahqbIn9MK7f76wlzPa0a82oBne52UofaZWKFZlvPOpqYzpXnz9
4Q70uyS0qTrp6ggP3SolZmErAmENsNM/fSnuIJZ4ElagJ4d5l9DZpmO6KAFu9sQh
1mWQyBjdpEsoWJUPkQ9JIcRrrpq2jTegs/stzDEIMrwt6wjytQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNOVHb1W9ncHhWhxgCQt90/vTV7xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzg5YTZjNDEtZDhlNy0z
NzYxLTk3MWItODEwMzgxOTE5ODNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgFEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAqn8QbzX1bYxBaRXazET1hOSN0NenM3ZVtqtjae4X8QrOQkkc4hYpKJv4
A733dkY4K3ZRHb8pR1vEY5ktg0HbGe34RyQbvEtWIC1P7ilFSXQAjjtmmFfaCU7G
jDzMPl3LbQ5XVkEcexa49bjhuzhcRZHGIttfKxPUmxOZ1edzXX1ZWKeC+MQKhrWX
I6DJC2nWt0XyhKQbuGHf/pJBb183IwNEcKf+QofzwlYfYyF/FNCW8Wz05qdXy2DY
5Lei7NBgkze2kHRlbBhKMCnTlWcA6vaos4LmGJMmQqjZCW+QE+QRX0Nb5GFHUJhT
XWNys2gr8HauU0Dr3vAAYmvnIqQu7g==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:09 2025 by rpki-client