Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c12ce70-6df9-3c53-a19f-0a4b18b7538d.roa
File:                     3c12ce70-6df9-3c53-a19f-0a4b18b7538d.roa (raw, json)
Hash identifier:          jP3vlf9YxmMbrCHXjp2ES2Lxh+JhRSSfp9LVelk9yps=
Subject key identifier:   CA:8B:90:F6:1A:1E:42:F7:AB:6C:66:ED:C0:E7:1C:F3:30:30:44:44
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FE9F953AFCB46EFF9D650A980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c12ce70-6df9-3c53-a19f-0a4b18b7538d.roa
Signing time:             Mon 14 Nov 2022 12:00:00 +0000
ROA not before:           Mon 14 Nov 2022 12:00:00 +0000
ROA not after:            Tue 20 Dec 2022 05:00:00 +0000
asID:                     6167
IP address blocks:        204.126.24.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:e9:f9:53:af:cb:46:ef:f9:d6:50:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 14 12:00:00 2022 GMT
            Not After : Dec 20 05:00:00 2022 GMT
        Subject: CN=84aab601-4eaf-4098-8750-c1e5fed97d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1f:44:2a:2e:a6:11:54:a4:57:28:c4:b0:6a:
                    a2:85:2b:50:f9:ae:2b:dc:5b:4b:a9:fd:19:87:1b:
                    89:e2:b3:ad:28:f4:0f:64:af:99:4f:a4:48:ea:02:
                    b1:27:84:04:34:33:77:9a:8a:9e:07:fa:24:07:e8:
                    79:f4:3a:1c:5e:70:1c:08:f3:a9:46:d9:dd:1c:97:
                    71:9e:fd:74:8b:89:07:b4:cb:05:86:4a:fb:50:ea:
                    c7:9f:33:7b:14:9e:1c:e8:23:11:57:c9:02:0a:6f:
                    02:1f:95:f8:39:b6:7b:7f:2c:31:b3:39:f7:78:86:
                    b1:51:a6:7e:59:51:dd:65:af:cb:d9:c1:d2:63:5f:
                    bc:02:7c:d4:55:bb:54:27:73:13:13:1a:5c:ee:e6:
                    8f:c2:e5:2a:4b:0a:ec:53:56:fe:13:8f:e2:18:f4:
                    44:6d:8f:3d:90:2c:f6:42:3a:31:a3:6c:d7:d3:e6:
                    7f:1c:1f:3b:02:f7:36:72:f4:3f:98:5a:6f:e3:b1:
                    86:54:c8:dd:72:ff:bc:e2:05:c6:a4:b8:e5:8f:35:
                    5c:a5:4a:78:86:b4:9d:90:8d:f1:8b:7c:8d:a0:28:
                    57:2c:d6:4b:a3:78:fd:85:2e:df:42:2e:91:cd:53:
                    98:63:92:8c:9f:19:b5:ff:bc:c7:67:4d:fa:2f:1b:
                    94:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8B:90:F6:1A:1E:42:F7:AB:6C:66:ED:C0:E7:1C:F3:30:30:44:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c12ce70-6df9-3c53-a19f-0a4b18b7538d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.126.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:3a:8c:d6:6f:05:17:44:dc:a6:1d:c2:83:c2:6c:0b:73:d8:
         62:ab:34:4c:af:af:ed:ca:e8:71:7f:43:c8:69:4a:61:09:80:
         ab:83:18:74:a1:aa:24:a8:59:e3:75:af:b4:75:bd:4c:a1:cb:
         91:21:0f:5f:19:20:10:e7:bc:ea:3b:c0:07:c6:02:59:e9:40:
         fa:a0:80:f0:ea:0a:fe:69:95:a7:5f:5f:ff:5d:9b:3b:9a:f5:
         77:ae:8e:ae:b0:be:42:b3:9f:4b:62:38:85:06:0d:a7:10:c2:
         cb:d4:f3:cc:f6:4c:fe:2c:36:2f:d8:9a:df:f0:ee:91:0b:0b:
         91:f0:77:2e:ef:48:02:c0:e0:c8:53:9a:07:2f:18:ac:da:f3:
         e8:b6:1c:15:02:2f:9f:3b:b0:92:e6:50:d8:79:e8:3d:14:b7:
         05:ea:2a:97:c8:af:0d:e3:90:9e:30:c4:24:52:da:be:02:b4:
         ef:00:48:fe:70:73:2e:4b:9f:94:e9:9e:6a:e2:24:8c:50:83:
         a0:9e:05:ef:06:95:35:3f:8e:73:de:fd:92:88:7f:b2:ee:7c:
         9f:67:19:3e:12:29:0b:bb:ff:af:3f:47:7d:cc:a4:d3:68:05:
         15:6e:40:e1:a4:72:f7:ea:6e:66:1f:19:93:eb:01:0d:c3:4a:
         a7:88:ff:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD/p+VOvy0bv+dZQqYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTExNDEyMDAwMFoXDTIyMTIyMDA1MDAwMFowLzEtMCsGA1UEAxMk
ODRhYWI2MDEtNGVhZi00MDk4LTg3NTAtYzFlNWZlZDk3ZDA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB9EKi6mEVSkVyjEsGqihStQ+a4r3FtLqf0Z
hxuJ4rOtKPQPZK+ZT6RI6gKxJ4QENDN3moqeB/okB+h59DocXnAcCPOpRtndHJdx
nv10i4kHtMsFhkr7UOrHnzN7FJ4c6CMRV8kCCm8CH5X4ObZ7fywxszn3eIaxUaZ+
WVHdZa/L2cHSY1+8AnzUVbtUJ3MTExpc7uaPwuUqSwrsU1b+E4/iGPREbY89kCz2
Qjoxo2zX0+Z/HB87Avc2cvQ/mFpv47GGVMjdcv+84gXGpLjljzVcpUp4hrSdkI3x
i3yNoChXLNZLo3j9hS7fQi6RzVOYY5KMnxm1/7zHZ036LxuUFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMqLkPYaHkL3q2xm7cDnHPMwMEREMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvM2MxMmNlNzAtNmRmOS0z
YzUzLWExOWYtMGE0YjE4Yjc1MzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzH4YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA46jNZvBRdE3KYdwoPCbAtz2GKrNEyvr+3K6HF/Q8hpSmEJgKuDGHSh
qiSoWeN1r7R1vUyhy5EhD18ZIBDnvOo7wAfGAlnpQPqggPDqCv5pladfX/9dmzua
9Xeujq6wvkKzn0tiOIUGDacQwsvU88z2TP4sNi/Ymt/w7pELC5Hwdy7vSALA4MhT
mgcvGKza8+i2HBUCL587sJLmUNh56D0UtwXqKpfIrw3jkJ4wxCRS2r4CtO8ASP5w
cy5Ln5TpnmriJIxQg6CeBe8GlTU/jnPe/ZKIf7LufJ9nGT4SKQu7/68/R33MpNNo
BRVuQOGkcvfqbmYfGZPrAQ3DSqeI/0g=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:10:41 2025 by rpki-client