Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d65eb70-6aaf-3bb5-8096-2c1bca0e5af4.roa
File:                     3d65eb70-6aaf-3bb5-8096-2c1bca0e5af4.roa (raw, json)
Hash identifier:          UM7nVLaH2g5c4Jn4UDi4IRxoyVN7AUFi95H5LLjgGPI=
Subject key identifier:   86:34:16:C0:A3:49:4A:32:3A:4F:FD:4F:08:41:0F:B4:A9:43:52:60
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FCBC9D9270358B7FB216BA980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d65eb70-6aaf-3bb5-8096-2c1bca0e5af4.roa
Signing time:             Thu 03 Nov 2022 12:00:00 +0000
ROA not before:           Thu 03 Nov 2022 12:00:00 +0000
ROA not after:            Fri 09 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        67.220.224.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cb:c9:d9:27:03:58:b7:fb:21:6b:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  3 12:00:00 2022 GMT
            Not After : Dec  9 05:00:00 2022 GMT
        Subject: CN=41f59ff5-62bb-483e-a6df-d87bcfbbe39c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f3:1e:9c:c3:b4:0a:f3:c7:06:4e:a7:4c:3a:
                    eb:60:b1:47:be:e2:26:65:d5:5c:4a:a6:4f:71:9d:
                    28:48:4f:61:ce:75:ef:fa:00:e1:91:be:e6:08:c5:
                    70:e5:1d:57:a6:21:42:45:af:73:82:62:a4:7c:dd:
                    d0:4b:2c:f0:b0:3f:60:ff:f2:27:bb:83:de:87:c2:
                    89:c4:b9:5e:68:03:a9:4d:12:5b:15:69:0b:06:86:
                    d7:ad:60:b0:a7:b5:c0:4c:8c:f6:b1:b4:36:7f:11:
                    45:71:31:bd:b5:76:7f:c1:32:e3:ec:44:df:b2:e9:
                    b0:f9:d0:39:56:82:c2:0a:31:e5:76:47:f5:94:a5:
                    d9:80:fb:0c:4b:fe:df:64:7e:50:f6:23:fb:f6:31:
                    3b:33:26:fd:01:18:1a:e5:0f:b2:2a:48:13:e5:54:
                    37:ec:8e:bc:48:53:52:1b:1b:6d:0e:e3:32:ee:bb:
                    91:e1:f9:e8:a6:8b:46:ae:df:a0:99:50:03:30:f1:
                    6e:3f:a4:2a:24:8a:8f:c6:47:bb:81:02:7a:77:c5:
                    5e:5a:36:05:ee:b6:78:94:d4:cc:6c:db:ac:ae:fc:
                    2a:61:85:2e:70:c3:74:88:83:c1:42:a7:6f:53:38:
                    ff:92:f3:4d:6e:3f:94:74:20:c7:44:20:54:77:67:
                    dc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:34:16:C0:A3:49:4A:32:3A:4F:FD:4F:08:41:0F:B4:A9:43:52:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d65eb70-6aaf-3bb5-8096-2c1bca0e5af4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.220.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:aa:b6:f8:37:f8:52:64:2c:88:0c:37:fb:f0:cb:ae:7b:28:
         c9:c0:49:6b:b3:81:f5:17:8f:28:64:53:36:68:97:e0:8d:80:
         8f:00:99:a9:6f:0c:bb:d3:b1:68:80:c8:49:89:3a:5e:46:e9:
         ee:0e:9e:25:da:0d:aa:ab:b5:44:e0:87:9b:07:d2:f8:54:d3:
         d6:07:8f:b3:35:b4:a8:4d:14:43:f4:59:8f:76:40:96:3e:a7:
         a4:bb:59:88:05:51:57:f8:85:2a:e0:0f:73:6a:2a:c5:d4:c6:
         df:da:38:17:15:26:9d:94:90:dd:f0:04:28:e1:98:f4:2a:cc:
         af:32:0f:b2:55:c7:29:12:6b:4f:eb:95:b1:37:33:da:f1:db:
         d1:ef:7b:48:1f:09:61:bc:e3:2d:b0:45:49:47:b0:08:ce:ce:
         45:bc:fb:14:a7:02:07:40:2d:98:86:05:03:f2:fa:1c:8d:81:
         de:aa:41:0b:14:51:40:ea:1f:1d:21:87:f9:a5:ce:b2:c5:b5:
         1f:9c:3e:8c:83:3d:45:e6:01:80:c3:e6:8c:87:89:4d:0f:66:
         30:9b:f6:ac:53:dd:1c:2a:e0:75:3b:4e:56:61:e1:0c:81:68:
         63:bd:12:a6:ce:a2:f5:64:41:dd:6d:1d:16:4e:92:3d:90:14:
         54:63:c1:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD/LydknA1i3+yFrqYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEwMzEyMDAwMFoXDTIyMTIwOTA1MDAwMFowLzEtMCsGA1UEAxMk
NDFmNTlmZjUtNjJiYi00ODNlLWE2ZGYtZDg3YmNmYmJlMzljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/MenMO0CvPHBk6nTDrrYLFHvuImZdVcSqZP
cZ0oSE9hznXv+gDhkb7mCMVw5R1XpiFCRa9zgmKkfN3QSyzwsD9g//Inu4Peh8KJ
xLleaAOpTRJbFWkLBobXrWCwp7XATIz2sbQ2fxFFcTG9tXZ/wTLj7ETfsumw+dA5
VoLCCjHldkf1lKXZgPsMS/7fZH5Q9iP79jE7Myb9ARga5Q+yKkgT5VQ37I68SFNS
GxttDuMy7ruR4fnopotGrt+gmVADMPFuP6QqJIqPxke7gQJ6d8VeWjYF7rZ4lNTM
bNusrvwqYYUucMN0iIPBQqdvUzj/kvNNbj+UdCDHRCBUd2fczwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIY0FsCjSUoyOk/9TwhBD7SpQ1JgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvM2Q2NWViNzAtNmFhZi0z
YmI1LTgwOTYtMmMxYmNhMGU1YWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQ9zgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC6qtvg3+FJkLIgMN/vwy657KMnASWuzgfUXjyhkUzZol+CNgI8Amalv
DLvTsWiAyEmJOl5G6e4OniXaDaqrtUTgh5sH0vhU09YHj7M1tKhNFEP0WY92QJY+
p6S7WYgFUVf4hSrgD3NqKsXUxt/aOBcVJp2UkN3wBCjhmPQqzK8yD7JVxykSa0/r
lbE3M9rx29Hve0gfCWG84y2wRUlHsAjOzkW8+xSnAgdALZiGBQPy+hyNgd6qQQsU
UUDqHx0hh/mlzrLFtR+cPoyDPUXmAYDD5oyHiU0PZjCb9qxT3Rwq4HU7TlZh4QyB
aGO9EqbOovVkQd1tHRZOkj2QFFRjwYg=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:28 2025 by rpki-client