Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41197057-9771-3a63-809a-de391ac6cd19.roa
File:                     41197057-9771-3a63-809a-de391ac6cd19.roa (raw, json)
Hash identifier:          2L4tZ7oNBRnyJqiLUr6DW7n994PWOEqs9QppKkxb7ro=
Subject key identifier:   A4:22:22:3A:18:50:BA:F1:38:6B:B6:11:FF:6E:04:E4:13:C6:9C:37
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E7DAE4699212A14D48AE02480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41197057-9771-3a63-809a-de391ac6cd19.roa
Signing time:             Wed 06 Jul 2022 15:03:07 +0000
ROA not before:           Wed 06 Jul 2022 15:03:07 +0000
ROA not after:            Thu 11 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        168.241.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:7d:ae:46:99:21:2a:14:d4:8a:e0:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul  6 15:03:07 2022 GMT
            Not After : Aug 11 04:00:00 2022 GMT
        Subject: CN=7f96a861-2056-48b1-8d58-c7892b39339a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b9:9f:7f:13:f5:05:b9:2a:f2:24:6b:d8:08:
                    e1:58:82:18:bf:94:f4:ad:9e:11:d8:47:da:a9:27:
                    21:bd:1b:4a:65:8d:99:c3:97:23:3b:a4:4f:ee:c7:
                    62:9e:38:ff:8d:7a:0a:3c:22:74:e4:f7:56:d4:00:
                    a4:26:f8:f6:c0:2e:98:39:39:20:7b:06:63:72:9e:
                    6e:b1:07:d9:35:53:2c:35:2a:9e:9d:c8:eb:8e:f0:
                    2a:3b:61:cb:b8:99:2a:a5:e5:40:bc:25:68:8a:42:
                    c7:76:f4:a1:55:75:a7:94:20:97:a5:fe:95:2d:f1:
                    b4:7c:de:af:c5:91:e2:4f:be:77:48:f6:d3:76:25:
                    9d:cc:a4:8b:e7:d2:95:ce:6a:7b:7a:6f:15:5c:1f:
                    6e:80:c0:16:02:eb:92:11:73:6a:e2:c1:2e:5d:4e:
                    5b:46:75:06:21:ac:48:61:15:1d:10:25:8b:08:c1:
                    77:de:cd:6b:ad:b7:5d:30:e2:08:6f:b2:6c:37:09:
                    a9:28:18:20:8f:10:00:30:0e:fd:df:1b:b6:de:63:
                    ad:54:7d:9f:32:99:fe:cf:bc:0a:0c:ee:de:47:ad:
                    a4:6b:6d:bc:86:f1:b9:2f:17:c8:50:e8:2c:13:85:
                    ad:d3:c6:4f:6e:5d:01:6d:28:ea:65:2e:55:f0:78:
                    a7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:22:22:3A:18:50:BA:F1:38:6B:B6:11:FF:6E:04:E4:13:C6:9C:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41197057-9771-3a63-809a-de391ac6cd19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.241.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:12:d5:bb:53:20:24:d9:db:8d:4e:85:f9:9a:cf:08:67:23:
         69:06:a2:a5:f1:7a:96:79:ec:4b:f7:5c:db:04:7b:0d:bf:e8:
         34:ae:0d:0a:91:93:26:4c:29:0b:70:de:6d:22:6a:f3:43:59:
         45:87:fc:59:29:2d:bf:1b:d4:97:44:9f:e1:98:e1:30:c0:88:
         66:6d:69:12:64:cc:b9:f9:8b:ca:03:c8:70:c3:b1:ab:ed:87:
         e8:de:96:b9:74:6c:b1:82:26:c6:a5:48:c2:93:95:a4:2a:85:
         73:ce:51:e5:1f:8e:32:bf:e9:4a:f8:8b:5c:b7:69:c2:0c:25:
         6b:97:57:91:2c:9e:44:5d:24:9d:94:0a:44:75:3f:c3:d2:65:
         24:23:5b:43:92:ba:03:8d:72:e2:09:7a:5d:34:2e:27:b5:b3:
         05:fa:ad:f0:ba:32:d5:57:54:9e:83:68:8c:89:62:7c:fb:52:
         4f:47:05:5c:9f:f2:a2:a1:5f:4d:cf:bb:a2:bd:56:ce:af:ea:
         ba:8b:bc:40:13:7c:54:93:f6:7e:e0:ee:d3:ee:24:84:43:95:
         fd:44:16:60:73:f9:13:39:aa:d4:2d:65:87:e8:b3:a9:05:5e:
         64:9c:a6:f4:0c:7d:8d:00:18:82:54:02:a1:df:ba:d7:36:fc:
         dd:73:1a:c3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD59rkaZISoU1IrgJIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcwNjE1MDMwN1oXDTIyMDgxMTA0MDAwMFowLzEtMCsGA1UEAxMk
N2Y5NmE4NjEtMjA1Ni00OGIxLThkNTgtYzc4OTJiMzkzMzlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbmffxP1Bbkq8iRr2AjhWIIYv5T0rZ4R2Efa
qSchvRtKZY2Zw5cjO6RP7sdinjj/jXoKPCJ05PdW1ACkJvj2wC6YOTkgewZjcp5u
sQfZNVMsNSqencjrjvAqO2HLuJkqpeVAvCVoikLHdvShVXWnlCCXpf6VLfG0fN6v
xZHiT753SPbTdiWdzKSL59KVzmp7em8VXB9ugMAWAuuSEXNq4sEuXU5bRnUGIaxI
YRUdECWLCMF33s1rrbddMOIIb7JsNwmpKBggjxAAMA793xu23mOtVH2fMpn+z7wK
DO7eR62ka228hvG5LxfIUOgsE4Wt08ZPbl0BbSjqZS5V8HinEwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKQiIjoYULrxOGu2Ef9uBOQTxpw3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNDExOTcwNTctOTc3MS0z
YTYzLTgwOWEtZGUzOTFhYzZjZDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqPEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAihLVu1MgJNnbjU6F+ZrPCGcjaQaipfF6lnnsS/dc2wR7Db/oNK4NCpGT
JkwpC3DebSJq80NZRYf8WSktvxvUl0Sf4ZjhMMCIZm1pEmTMufmLygPIcMOxq+2H
6N6WuXRssYImxqVIwpOVpCqFc85R5R+OMr/pSviLXLdpwgwla5dXkSyeRF0knZQK
RHU/w9JlJCNbQ5K6A41y4gl6XTQuJ7WzBfqt8Loy1VdUnoNojIlifPtST0cFXJ/y
oqFfTc+7or1Wzq/quou8QBN8VJP2fuDu0+4khEOV/UQWYHP5Ezmq1C1lh+izqQVe
ZJym9Ax9jQAYglQCod+61zb83XMaww==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:15 2025 by rpki-client