Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38c51897-8d28-34a8-b600-51486ccee6e1.roa
File:                     38c51897-8d28-34a8-b600-51486ccee6e1.roa (raw, json)
Hash identifier:          cjc9G5AgBfGJ/1lKnkX5yeXLwTFbnXdh22LKnSGox5g=
Subject key identifier:   41:BA:36:82:F9:06:5A:65:4D:E3:CD:DE:05:DC:9B:9C:CB:FF:E8:80
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F7A213227FD4E9158719140C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38c51897-8d28-34a8-b600-51486ccee6e1.roa
Signing time:             Wed 05 Oct 2022 12:00:00 +0000
ROA not before:           Wed 05 Oct 2022 12:00:00 +0000
ROA not after:            Thu 10 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        16.119.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7a:21:32:27:fd:4e:91:58:71:91:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  5 12:00:00 2022 GMT
            Not After : Nov 10 05:00:00 2022 GMT
        Subject: CN=ef11aa48-78d6-4fe2-b845-150340588476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:09:4f:4c:bd:62:d1:61:22:0d:62:d8:ab:ba:
                    5a:98:9d:99:99:89:39:0b:b9:40:47:b4:bd:0d:42:
                    1a:8c:90:1a:ee:87:18:db:11:c6:55:83:a0:c5:e8:
                    19:73:56:f9:9c:86:1d:51:2f:b8:a7:ad:d2:fb:53:
                    22:cc:75:99:8f:1f:fe:4f:43:f8:51:5a:a7:ae:ed:
                    f6:8c:60:ba:bd:6f:39:61:97:3c:b5:7f:1c:16:87:
                    15:c2:d7:82:a5:d6:b6:ce:a2:10:56:03:31:16:c7:
                    e2:16:d9:02:e2:25:d5:26:55:4b:8a:72:a3:34:a6:
                    68:c0:b4:bb:1d:0f:c1:01:09:f4:c0:bd:c2:4d:83:
                    2a:f9:92:f2:88:ee:d5:59:4d:63:ff:9c:90:36:d5:
                    58:4e:3d:77:ff:83:ef:3d:a5:f0:5a:db:09:1b:ff:
                    a1:00:61:b0:67:c8:b6:00:0b:07:99:ed:cd:f2:11:
                    43:87:91:39:0d:8e:be:9e:5b:1d:5a:1a:e2:dc:79:
                    50:3b:44:66:52:58:c2:3e:2f:a7:01:02:c6:2d:0a:
                    be:45:b3:7c:d7:59:b5:c0:c9:e2:f0:44:25:24:6b:
                    49:92:1f:c0:91:de:34:19:3e:59:28:ec:33:33:d8:
                    52:a6:af:c0:5c:9f:c5:8d:c9:01:58:06:03:a2:95:
                    5b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:BA:36:82:F9:06:5A:65:4D:E3:CD:DE:05:DC:9B:9C:CB:FF:E8:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38c51897-8d28-34a8-b600-51486ccee6e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.119.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:05:01:34:4e:85:43:63:fd:12:52:97:29:d4:4d:e6:67:10:
         68:b9:ae:26:ab:27:b9:2e:88:9b:fb:b7:2b:70:76:0f:6f:7f:
         24:cb:5d:4a:65:56:04:a3:8f:65:2a:fc:a0:6d:80:41:75:66:
         0d:42:d6:de:c6:26:11:1f:43:5a:51:6b:e5:d3:88:68:f9:65:
         bd:83:66:b9:e7:af:22:e5:88:2a:8f:74:8a:97:6b:c9:68:98:
         f8:10:d5:cb:58:f7:28:77:f0:0c:e7:18:23:9b:a9:e4:f0:e8:
         c0:98:7a:3e:3c:bf:5b:ef:a0:9a:e9:7e:ea:f7:38:4f:1f:40:
         ba:6a:75:b2:f0:8f:bf:a5:90:95:6c:99:53:02:89:e9:61:8a:
         1a:39:4a:73:c4:0b:59:52:60:85:c7:d4:dc:2e:e1:25:2c:9a:
         29:e3:ce:90:7b:fa:6a:c3:85:f8:99:50:6f:f7:e2:58:24:76:
         1f:d5:a2:92:ca:88:c3:57:5e:60:32:d6:e0:c0:48:a9:7b:67:
         71:b1:9a:e3:7e:3d:5b:b5:98:81:7f:08:4b:df:43:31:5c:21:
         96:42:98:86:f1:7c:c6:1f:ae:cd:65:1d:8e:01:08:b2:86:d7:
         38:47:dd:3c:c7:cb:7b:e7:7f:c6:31:0c:6a:b6:0e:a4:2f:af:
         d2:8f:8b:2f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD96ITIn/U6RWHGRQMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAwNTEyMDAwMFoXDTIyMTExMDA1MDAwMFowLzEtMCsGA1UEAxMk
ZWYxMWFhNDgtNzhkNi00ZmUyLWI4NDUtMTUwMzQwNTg4NDc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAlPTL1i0WEiDWLYq7pamJ2ZmYk5C7lAR7S9
DUIajJAa7ocY2xHGVYOgxegZc1b5nIYdUS+4p63S+1MizHWZjx/+T0P4UVqnru32
jGC6vW85YZc8tX8cFocVwteCpda2zqIQVgMxFsfiFtkC4iXVJlVLinKjNKZowLS7
HQ/BAQn0wL3CTYMq+ZLyiO7VWU1j/5yQNtVYTj13/4PvPaXwWtsJG/+hAGGwZ8i2
AAsHme3N8hFDh5E5DY6+nlsdWhri3HlQO0RmUljCPi+nAQLGLQq+RbN811m1wMni
8EQlJGtJkh/Akd40GT5ZKOwzM9hSpq/AXJ/FjckBWAYDopVbtQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEG6NoL5BlplTePN3gXcm5zL/+iAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzhjNTE4OTctOGQyOC0z
NGE4LWI2MDAtNTE0ODZjY2VlNmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEHcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAiQUBNE6FQ2P9ElKXKdRN5mcQaLmuJqsnuS6Im/u3K3B2D29/JMtdSmVW
BKOPZSr8oG2AQXVmDULW3sYmER9DWlFr5dOIaPllvYNmueevIuWIKo90ipdryWiY
+BDVy1j3KHfwDOcYI5up5PDowJh6Pjy/W++gmul+6vc4Tx9Aump1svCPv6WQlWyZ
UwKJ6WGKGjlKc8QLWVJghcfU3C7hJSyaKePOkHv6asOF+JlQb/fiWCR2H9WiksqI
w1deYDLW4MBIqXtncbGa4349W7WYgX8IS99DMVwhlkKYhvF8xh+uzWUdjgEIsobX
OEfdPMfLe+d/xjEMarYOpC+v0o+LLw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:56:03 2025 by rpki-client