Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/458124a2-af86-31bc-8eee-d7df632634cd.roa
File:                     458124a2-af86-31bc-8eee-d7df632634cd.roa (raw, json)
Hash identifier:          kQfa/ItlLA18yPKFhpjxDuq5iqdVeMDbzYZF7sTJOG0=
Subject key identifier:   DF:2D:E5:BE:1C:AB:28:E3:80:1F:6B:71:31:C5:7D:CD:0A:77:BF:BF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E469A204EA844A267AB5F7A40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/458124a2-af86-31bc-8eee-d7df632634cd.roa
Signing time:             Fri 17 Jun 2022 12:00:00 +0000
ROA not before:           Fri 17 Jun 2022 12:00:00 +0000
ROA not after:            Sat 23 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        192.189.197.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:46:9a:20:4e:a8:44:a2:67:ab:5f:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 17 12:00:00 2022 GMT
            Not After : Jul 23 04:00:00 2022 GMT
        Subject: CN=5a9345fa-26d3-4392-ba3e-bb1357e51595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e6:63:cc:0a:d0:7f:65:6a:ca:63:43:bc:83:
                    1e:e8:b9:c0:07:b5:4b:98:88:18:61:d4:30:c6:0a:
                    7c:02:59:28:9a:e3:52:85:7c:60:54:dc:c7:a2:ab:
                    ec:22:f5:40:ff:a2:19:eb:af:4e:a6:38:d2:b5:93:
                    21:4c:49:b0:38:91:91:b6:5f:d3:0c:24:fa:55:41:
                    71:0a:be:c0:60:ea:9c:cb:99:9e:a9:da:19:57:34:
                    11:05:55:30:89:5b:e3:f5:87:b4:13:56:a8:c8:58:
                    8a:54:53:e4:c8:dd:31:e3:5b:c9:64:f1:68:af:d1:
                    5e:a6:04:ea:69:b7:9a:94:c4:1f:0f:51:a8:a8:12:
                    03:6e:45:de:68:bf:ff:c0:77:3f:a3:14:d7:13:c0:
                    e7:8e:41:ef:55:94:64:f2:a3:b2:48:99:92:b2:24:
                    b3:eb:87:29:9d:69:5f:63:24:59:eb:c5:1f:c8:ab:
                    84:01:8b:c4:c9:04:f8:ed:95:e4:99:9d:54:04:93:
                    b6:e4:c5:73:23:c0:c7:e4:c1:fe:7d:39:67:8b:3a:
                    57:5d:26:61:88:3d:8d:3b:43:2f:65:77:a5:4c:d5:
                    9e:e7:1a:9c:10:e5:f0:fe:cb:1a:5e:48:f6:c4:79:
                    fd:59:92:3f:9d:1d:2a:97:2e:e3:a8:ab:55:f8:d4:
                    ad:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2D:E5:BE:1C:AB:28:E3:80:1F:6B:71:31:C5:7D:CD:0A:77:BF:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/458124a2-af86-31bc-8eee-d7df632634cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:7a:35:15:36:47:aa:35:52:c5:a5:49:2d:3e:34:4a:1e:77:
         4c:c9:b3:81:85:e7:34:7e:be:59:f9:52:fb:72:be:2a:e9:9e:
         16:11:8a:0f:4d:17:1d:c5:54:c9:f2:87:db:83:e9:6f:72:85:
         26:70:20:c1:4c:92:e8:af:d8:c9:88:18:df:d6:7f:6e:6e:38:
         ff:c6:6c:63:ec:0f:a0:5e:d7:a6:98:7d:54:ee:5d:5b:ff:19:
         18:db:74:d1:12:d6:4d:41:1f:5f:71:5f:bb:fd:3d:e9:38:ed:
         74:7f:86:27:b1:5a:2b:c4:a7:2d:77:5a:e1:a7:64:ad:f8:28:
         27:5f:76:3d:73:ae:69:bf:89:5a:7f:1a:1c:7e:6f:ab:77:ba:
         4d:cb:c6:6d:b1:40:73:b0:04:c3:1a:92:c1:90:60:b8:c4:90:
         34:b1:ad:b4:53:ff:07:d3:93:6c:26:2d:81:7b:ab:44:1a:31:
         08:0e:81:89:28:9c:2a:27:cb:c0:5c:98:f3:fc:53:35:77:41:
         ad:82:c4:64:9b:ed:aa:f9:2d:54:33:7c:56:63:de:65:39:69:
         63:63:6b:c4:86:a3:08:a8:59:94:4a:ba:5d:cb:54:75:bd:8d:
         43:c0:e8:95:80:aa:03:cf:83:3e:16:fd:7a:9f:5c:a6:c6:2b:
         5c:1f:27:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD5GmiBOqESiZ6tfekAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYxNzEyMDAwMFoXDTIyMDcyMzA0MDAwMFowLzEtMCsGA1UEAxMk
NWE5MzQ1ZmEtMjZkMy00MzkyLWJhM2UtYmIxMzU3ZTUxNTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeZjzArQf2VqymNDvIMe6LnAB7VLmIgYYdQw
xgp8AlkomuNShXxgVNzHoqvsIvVA/6IZ669OpjjStZMhTEmwOJGRtl/TDCT6VUFx
Cr7AYOqcy5meqdoZVzQRBVUwiVvj9Ye0E1aoyFiKVFPkyN0x41vJZPFor9FepgTq
abealMQfD1GoqBIDbkXeaL//wHc/oxTXE8DnjkHvVZRk8qOySJmSsiSz64cpnWlf
YyRZ68UfyKuEAYvEyQT47ZXkmZ1UBJO25MVzI8DH5MH+fTlnizpXXSZhiD2NO0Mv
ZXelTNWe5xqcEOXw/ssaXkj2xHn9WZI/nR0qly7jqKtV+NStLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN8t5b4cqyjjgB9rcTHFfc0Kd7+/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNDU4MTI0YTItYWY4Ni0z
MWJjLThlZWUtZDdkZjYzMjYzNGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL3FMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIN6NRU2R6o1UsWlSS0+NEoed0zJs4GF5zR+vln5UvtyvirpnhYRig9N
Fx3FVMnyh9uD6W9yhSZwIMFMkuiv2MmIGN/Wf25uOP/GbGPsD6Be16aYfVTuXVv/
GRjbdNES1k1BH19xX7v9Pek47XR/hiexWivEpy13WuGnZK34KCdfdj1zrmm/iVp/
Ghx+b6t3uk3Lxm2xQHOwBMMaksGQYLjEkDSxrbRT/wfTk2wmLYF7q0QaMQgOgYko
nCony8BcmPP8UzV3Qa2CxGSb7ar5LVQzfFZj3mU5aWNja8SGowioWZRKul3LVHW9
jUPA6JWAqgPPgz4W/XqfXKbGK1wfJ7Q=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:59 2025 by rpki-client