Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/43726837-95f1-342c-961d-07a3b0eb967a.roa
File:                     43726837-95f1-342c-961d-07a3b0eb967a.roa (raw, json)
Hash identifier:          YCIJ2Cbt5UsQOnOxEGinu6FG5lK3G1Qw9GnRrwwCjOo=
Subject key identifier:   EC:BB:EE:FF:93:16:0F:7F:3F:C8:DD:93:86:94:9C:58:28:BF:2C:6B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FCB6908F8745E471F434F7900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/43726837-95f1-342c-961d-07a3b0eb967a.roa
Signing time:             Thu 03 Nov 2022 12:00:00 +0000
ROA not before:           Thu 03 Nov 2022 12:00:00 +0000
ROA not after:            Fri 09 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        57.204.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cb:69:08:f8:74:5e:47:1f:43:4f:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  3 12:00:00 2022 GMT
            Not After : Dec  9 05:00:00 2022 GMT
        Subject: CN=67d4f8ce-0c12-4d4c-a68a-4d8aaa07ddd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:99:67:cf:f2:15:03:13:03:57:7d:8b:54:4d:
                    52:b6:8d:14:3e:fb:a0:1c:36:78:5a:d9:c8:f3:3d:
                    06:9d:f2:50:97:5c:1d:6f:8a:a6:27:a4:c1:52:1c:
                    6b:a1:63:28:54:e8:f4:3b:89:a6:d7:e4:64:d1:14:
                    c8:ac:b8:8f:6b:d0:bb:04:fa:62:93:6c:b7:11:b2:
                    88:10:da:72:c3:9f:2d:76:40:76:cf:37:8c:4e:56:
                    9c:f6:62:08:6b:af:7b:f6:43:a4:a8:a9:af:0a:fa:
                    3b:71:a8:37:10:56:8e:e8:ce:44:2a:54:e0:b6:f0:
                    bd:cd:75:aa:14:ea:08:e8:d5:b3:bf:bb:a8:89:47:
                    93:9e:a2:e2:b7:c8:74:7c:fe:e0:97:b3:22:32:40:
                    7f:b8:78:68:5d:a1:36:88:38:cb:3c:3c:e2:a3:23:
                    6b:81:e0:cd:70:04:33:d5:57:e9:6e:46:9d:56:2c:
                    9d:1d:e7:e3:a9:a0:78:a9:31:7f:56:c9:6a:77:b3:
                    59:e0:40:5f:6a:b5:4a:f3:4a:87:44:a3:26:d9:ae:
                    97:01:15:fe:2b:e7:1b:ca:3d:f0:8b:94:da:27:44:
                    37:fe:aa:4d:28:13:e5:37:44:48:a4:30:0b:8d:d9:
                    f2:5b:90:54:8e:59:00:db:c4:c5:7a:0f:71:9a:de:
                    30:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BB:EE:FF:93:16:0F:7F:3F:C8:DD:93:86:94:9C:58:28:BF:2C:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/43726837-95f1-342c-961d-07a3b0eb967a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.204.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:3d:98:dc:24:ff:ac:33:97:0c:ee:08:0c:02:5c:84:4b:d8:
         43:a8:74:fe:4e:3d:b6:10:c0:2f:81:92:50:70:64:b5:a0:ef:
         89:75:5b:60:fb:4a:02:28:a5:ff:f8:04:f7:ba:5b:83:02:de:
         22:98:f7:39:ce:2a:ce:5d:5b:e5:90:70:00:18:68:16:40:4e:
         a8:48:97:ef:45:1d:2c:c2:d6:a3:62:aa:c8:64:09:48:9f:bd:
         40:44:0a:70:f4:5b:07:6c:48:fe:21:ed:02:13:23:85:01:33:
         69:ae:1f:1e:b7:31:d3:d0:fb:4a:56:8c:b5:9a:73:71:6a:11:
         05:d1:1a:77:ea:b4:2b:f9:d4:63:ef:ee:08:3a:70:ba:12:e3:
         ac:47:57:72:27:3f:59:8d:83:dd:d3:d5:53:20:1b:de:28:96:
         4d:34:95:f7:4a:ce:ad:38:43:41:29:23:b6:1d:57:49:c6:68:
         7c:5b:65:ab:72:79:48:34:96:e7:36:63:df:6d:e0:6a:d2:9c:
         4e:3f:82:66:02:68:e7:8d:f3:a1:e7:36:fb:66:65:d5:70:11:
         58:b3:e9:cf:df:29:e4:a7:4f:67:a4:1f:6f:81:a1:8c:43:67:
         b2:5a:fc:6f:30:f7:e6:8d:88:06:e4:4f:dc:01:c2:04:c1:9a:
         ce:30:ea:23
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/LaQj4dF5HH0NPeQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEwMzEyMDAwMFoXDTIyMTIwOTA1MDAwMFowLzEtMCsGA1UEAxMk
NjdkNGY4Y2UtMGMxMi00ZDRjLWE2OGEtNGQ4YWFhMDdkZGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5lnz/IVAxMDV32LVE1Sto0UPvugHDZ4WtnI
8z0GnfJQl1wdb4qmJ6TBUhxroWMoVOj0O4mm1+Rk0RTIrLiPa9C7BPpik2y3EbKI
ENpyw58tdkB2zzeMTlac9mIIa6979kOkqKmvCvo7cag3EFaO6M5EKlTgtvC9zXWq
FOoI6NWzv7uoiUeTnqLit8h0fP7gl7MiMkB/uHhoXaE2iDjLPDzioyNrgeDNcAQz
1VfpbkadViydHefjqaB4qTF/Vslqd7NZ4EBfarVK80qHRKMm2a6XARX+K+cbyj3w
i5TaJ0Q3/qpNKBPlN0RIpDALjdnyW5BUjlkA28TFeg9xmt4wjwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOy77v+TFg9/P8jdk4aUnFgovyxrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNDM3MjY4MzctOTVmMS0z
NDJjLTk2MWQtMDdhM2IwZWI5NjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOcwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAaD2Y3CT/rDOXDO4IDAJchEvYQ6h0/k49thDAL4GSUHBktaDviXVbYPtK
Aiil//gE97pbgwLeIpj3Oc4qzl1b5ZBwABhoFkBOqEiX70UdLMLWo2KqyGQJSJ+9
QEQKcPRbB2xI/iHtAhMjhQEzaa4fHrcx09D7SlaMtZpzcWoRBdEad+q0K/nUY+/u
CDpwuhLjrEdXcic/WY2D3dPVUyAb3iiWTTSV90rOrThDQSkjth1XScZofFtlq3J5
SDSW5zZj323gatKcTj+CZgJo543zoec2+2Zl1XARWLPpz98p5KdPZ6Qfb4GhjENn
slr8bzD35o2IBuRP3AHCBMGazjDqIw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:10:15 2025 by rpki-client