Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c40d66a-4ec1-38ab-af05-3141e6922164.roa
File:                     3c40d66a-4ec1-38ab-af05-3141e6922164.roa (raw, json)
Hash identifier:          8Mwc3Byywbe6s9bo0U8zwwnhZyvndEUn8totGHImkaY=
Subject key identifier:   0F:64:6F:E6:E7:8C:09:8E:74:40:E4:23:A4:47:88:35:5F:65:ED:6F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FCC1B71B13414B0A625835F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c40d66a-4ec1-38ab-af05-3141e6922164.roa
Signing time:             Thu 03 Nov 2022 12:00:00 +0000
ROA not before:           Thu 03 Nov 2022 12:00:00 +0000
ROA not after:            Fri 09 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.170.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cc:1b:71:b1:34:14:b0:a6:25:83:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  3 12:00:00 2022 GMT
            Not After : Dec  9 05:00:00 2022 GMT
        Subject: CN=ee035667-8a45-4ac2-b52b-1844a3ea7709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:38:35:8f:0b:2a:e1:a4:8a:2c:50:1c:75:5c:
                    1a:a0:8d:b7:2c:0a:96:52:68:92:dd:19:6f:6f:06:
                    26:20:cf:71:9a:b5:c5:f5:01:1b:8d:fc:c4:00:5c:
                    10:29:ce:3f:a6:6d:f9:2b:e3:dc:70:98:01:c7:85:
                    63:a3:90:38:70:49:83:d9:b1:9e:7f:88:a0:54:63:
                    7e:95:fe:53:77:bc:a0:d8:6d:9c:f4:07:98:91:14:
                    81:74:15:c0:d7:c9:b0:c3:60:2f:92:8e:61:7b:3d:
                    55:9f:9b:72:ff:fa:6c:09:a9:d6:cb:b9:ad:ec:44:
                    73:fb:11:3d:03:53:39:e3:4e:e0:fa:3e:11:64:0d:
                    69:a5:90:e8:e7:a1:80:a8:22:97:b7:a1:33:4a:f4:
                    82:76:ab:87:56:3d:b3:9f:95:b7:ae:fc:7d:fc:0a:
                    59:4f:75:33:0f:c2:64:08:ce:fd:f7:49:e1:69:50:
                    bb:00:de:e4:41:b0:05:c7:8a:00:6d:c2:cd:d8:a4:
                    6a:c5:cc:bc:b7:94:ef:e2:9d:f3:e5:4c:d1:e0:e2:
                    0a:50:68:b2:ec:1d:c9:bd:ae:ec:2b:c3:4d:e9:09:
                    90:c6:ff:cd:eb:32:0e:66:76:29:eb:b3:2f:d8:16:
                    59:d4:52:58:da:9e:25:1c:2c:5e:ca:e5:70:14:f2:
                    f0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:64:6F:E6:E7:8C:09:8E:74:40:E4:23:A4:47:88:35:5F:65:ED:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c40d66a-4ec1-38ab-af05-3141e6922164.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.170.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:e8:b7:d6:5a:90:c2:a8:3b:81:21:75:c1:b7:f4:db:5e:dd:
         52:43:94:ce:b2:aa:76:60:57:7e:e0:2e:2c:a3:e5:b5:4f:6d:
         e1:d4:95:88:28:1f:da:67:1b:9f:eb:28:ab:33:6e:c1:de:e7:
         f6:75:8a:b5:d1:d1:8e:fc:d8:a9:a4:54:3f:6a:d3:fe:a1:f8:
         51:1b:b9:54:b2:b2:93:56:d1:fc:a4:fa:c9:47:ef:31:21:6d:
         69:ca:64:28:88:54:89:76:9e:1c:68:0d:18:69:f2:7c:32:06:
         13:0e:0a:0f:b1:47:0a:96:dc:52:1d:d2:60:fe:de:dc:d6:f3:
         55:66:79:ae:c4:69:1e:5c:6c:f3:24:0b:e3:99:3a:c7:25:6c:
         69:1f:15:66:10:36:85:95:fc:4c:6d:5b:fe:dc:f9:80:80:9f:
         a8:8c:c7:6c:3d:d5:c4:bf:c2:c5:b9:13:79:49:a4:25:80:d4:
         c5:01:2f:38:d6:5f:9f:1c:74:96:cc:d0:5c:42:0a:ed:60:fa:
         b7:d6:ce:db:9e:e3:71:85:84:a7:5c:64:d7:2b:af:b6:bb:61:
         3d:55:b0:ed:ba:35:85:54:e5:81:b7:ea:61:9b:dd:37:e6:9d:
         3a:c9:a9:ce:aa:92:f6:a4:00:60:70:2b:a9:cf:64:8d:af:c2:
         81:02:75:f7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/MG3GxNBSwpiWDXwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEwMzEyMDAwMFoXDTIyMTIwOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZWUwMzU2NjctOGE0NS00YWMyLWI1MmItMTg0NGEzZWE3NzA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTg1jwsq4aSKLFAcdVwaoI23LAqWUmiS3Rlv
bwYmIM9xmrXF9QEbjfzEAFwQKc4/pm35K+PccJgBx4Vjo5A4cEmD2bGef4igVGN+
lf5Td7yg2G2c9AeYkRSBdBXA18mww2Avko5hez1Vn5ty//psCanWy7mt7ERz+xE9
A1M5407g+j4RZA1ppZDo56GAqCKXt6EzSvSCdquHVj2zn5W3rvx9/ApZT3UzD8Jk
CM7990nhaVC7AN7kQbAFx4oAbcLN2KRqxcy8t5Tv4p3z5UzR4OIKUGiy7B3Jva7s
K8NN6QmQxv/N6zIOZnYp67Mv2BZZ1FJY2p4lHCxeyuVwFPLwFQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFA9kb+bnjAmOdEDkI6RHiDVfZe1vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvM2M0MGQ2NmEtNGVjMS0z
OGFiLWFmMDUtMzE0MWU2OTIyMTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEKowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAfui31lqQwqg7gSF1wbf0217dUkOUzrKqdmBXfuAuLKPltU9t4dSViCgf
2mcbn+soqzNuwd7n9nWKtdHRjvzYqaRUP2rT/qH4URu5VLKyk1bR/KT6yUfvMSFt
acpkKIhUiXaeHGgNGGnyfDIGEw4KD7FHCpbcUh3SYP7e3NbzVWZ5rsRpHlxs8yQL
45k6xyVsaR8VZhA2hZX8TG1b/tz5gICfqIzHbD3VxL/CxbkTeUmkJYDUxQEvONZf
nxx0lszQXEIK7WD6t9bO257jcYWEp1xk1yuvtrthPVWw7bo1hVTlgbfqYZvdN+ad
OsmpzqqS9qQAYHArqc9kja/CgQJ19w==
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:07:25 2025 by rpki-client