Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3f5da50f-2c58-3f86-b20c-dff386d73355.roa
File:                     3f5da50f-2c58-3f86-b20c-dff386d73355.roa (raw, json)
Hash identifier:          YbNWVA7TTY3sxBxY/+X0b12By/CXZmxuP+/UAioPll8=
Subject key identifier:   90:AA:DB:6B:A1:C7:E6:73:ED:25:A7:3D:3C:44:20:7C:16:B6:86:80
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E923DE123BD27D17CF4CA1180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3f5da50f-2c58-3f86-b20c-dff386d73355.roa
Signing time:             Thu 14 Jul 2022 21:12:08 +0000
ROA not before:           Thu 14 Jul 2022 21:12:08 +0000
ROA not after:            Fri 19 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.189.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:92:3d:e1:23:bd:27:d1:7c:f4:ca:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 14 21:12:08 2022 GMT
            Not After : Aug 19 04:00:00 2022 GMT
        Subject: CN=eb3bb698-85b5-4600-8073-9d3bec491907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:75:24:f6:26:a0:26:ff:2a:80:d9:d3:9a:2b:
                    4c:e6:3d:d2:1e:ca:df:75:e1:57:73:42:dd:20:80:
                    f7:3c:3c:6d:df:d4:09:70:2f:43:66:a2:dc:ad:d2:
                    07:a6:a6:25:65:23:70:bc:7f:86:d8:0b:9f:58:24:
                    71:fb:b4:20:75:e9:78:6f:3a:83:f9:13:e4:b3:b6:
                    62:f5:7e:eb:d3:0d:30:38:04:19:34:77:40:64:f8:
                    b2:8d:d5:eb:62:54:02:4f:6b:a4:58:98:0b:40:a6:
                    dd:3e:b5:90:85:32:60:04:73:98:06:6f:ee:a5:83:
                    d6:21:d6:9f:b3:46:55:c0:b3:3a:ef:d3:16:cf:84:
                    9b:fd:f8:b8:cb:51:ea:f0:29:9f:a0:62:56:33:c0:
                    d0:38:27:c5:57:fc:83:c7:87:49:d3:b4:98:c2:ff:
                    86:00:1a:0e:c6:40:94:01:6d:27:e4:ab:85:44:af:
                    87:4f:c5:0c:06:c9:47:cc:f1:9b:23:22:40:f7:1a:
                    dd:fb:01:71:10:34:d3:99:87:08:df:e6:1a:67:c1:
                    50:f3:05:71:15:f7:4e:b5:11:03:7b:03:01:83:3b:
                    df:e0:27:d3:29:e0:f7:cf:6e:9a:64:70:1d:1c:66:
                    7e:01:37:5f:b1:0a:55:55:04:f0:b2:d9:dd:f0:a5:
                    7c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AA:DB:6B:A1:C7:E6:73:ED:25:A7:3D:3C:44:20:7C:16:B6:86:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3f5da50f-2c58-3f86-b20c-dff386d73355.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.189.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:b0:ea:e5:3d:5b:67:74:12:3b:0b:05:ec:e5:40:ba:25:79:
         b8:09:b6:3f:e8:31:bb:90:7a:5a:dd:14:fd:de:84:3a:0a:66:
         d4:6a:2f:8e:ff:9f:4a:4f:94:dc:82:8d:a7:5c:9f:34:b2:59:
         81:3a:d7:b3:ed:fa:75:4c:82:31:ab:43:4b:7e:fa:43:d5:d3:
         0b:c8:41:92:71:02:e9:da:c8:59:23:cc:37:b0:93:f1:6a:b1:
         73:cb:87:16:10:e9:60:23:44:13:93:b2:13:5e:15:54:10:5f:
         d7:d5:a2:a3:26:5b:85:11:85:51:de:6d:f9:ef:e7:96:24:23:
         96:78:dc:c3:58:cc:af:63:06:4c:46:1b:ce:60:eb:06:ca:04:
         22:af:22:5c:22:4d:43:b6:1c:90:2f:d5:ae:1a:a9:20:77:60:
         d3:59:65:a7:9c:2b:df:c4:91:f4:e2:2e:ab:fa:68:03:e3:fa:
         85:c7:e1:48:63:c2:d8:04:ce:3b:30:03:61:7b:00:75:b0:81:
         d1:c4:e3:96:e4:ab:eb:7f:a2:42:62:54:ff:08:79:dc:f1:87:
         0c:c1:a4:98:d6:0c:70:d5:69:3d:dd:0d:c7:02:3a:b5:45:42:
         1a:b7:c4:1a:39:61:2c:f8:d2:b2:de:91:56:44:c9:00:c0:92:
         fb:21:69:c7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6SPeEjvSfRfPTKEYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcxNDIxMTIwOFoXDTIyMDgxOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZWIzYmI2OTgtODViNS00NjAwLTgwNzMtOWQzYmVjNDkxOTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXUk9iagJv8qgNnTmitM5j3SHsrfdeFXc0Ld
IID3PDxt39QJcC9DZqLcrdIHpqYlZSNwvH+G2AufWCRx+7Qgdel4bzqD+RPks7Zi
9X7r0w0wOAQZNHdAZPiyjdXrYlQCT2ukWJgLQKbdPrWQhTJgBHOYBm/upYPWIdaf
s0ZVwLM679MWz4Sb/fi4y1Hq8CmfoGJWM8DQOCfFV/yDx4dJ07SYwv+GABoOxkCU
AW0n5KuFRK+HT8UMBslHzPGbIyJA9xrd+wFxEDTTmYcI3+YaZ8FQ8wVxFfdOtRED
ewMBgzvf4CfTKeD3z26aZHAdHGZ+ATdfsQpVVQTwstnd8KV81wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJCq22uhx+Zz7SWnPTxEIHwWtoaAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvM2Y1ZGE1MGYtMmM1OC0z
Zjg2LWIyMGMtZGZmMzg2ZDczMzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEL0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAj7Dq5T1bZ3QSOwsF7OVAuiV5uAm2P+gxu5B6Wt0U/d6EOgpm1Govjv+f
Sk+U3IKNp1yfNLJZgTrXs+36dUyCMatDS376Q9XTC8hBknEC6drIWSPMN7CT8Wqx
c8uHFhDpYCNEE5OyE14VVBBf19WioyZbhRGFUd5t+e/nliQjlnjcw1jMr2MGTEYb
zmDrBsoEIq8iXCJNQ7YckC/VrhqpIHdg01llp5wr38SR9OIuq/poA+P6hcfhSGPC
2ATOOzADYXsAdbCB0cTjluSr63+iQmJU/wh53PGHDMGkmNYMcNVpPd0NxwI6tUVC
GrfEGjlhLPjSst6RVkTJAMCS+yFpxw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:52:30 2025 by rpki-client