Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4bf9dc46-2428-395d-a269-67d0395f8307.roa
File:                     4bf9dc46-2428-395d-a269-67d0395f8307.roa (raw, json)
Hash identifier:          S/YQQIdMr/slizX9AvBShjMErZDO5njy+EnGDHggh1M=
Subject key identifier:   EE:CE:F6:2F:DE:F0:01:3E:34:EC:C0:EC:FD:58:AC:D0:80:AC:B2:16
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FEC97477DE02596F72F4D0F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4bf9dc46-2428-395d-a269-67d0395f8307.roa
Signing time:             Tue 15 Nov 2022 15:06:07 +0000
ROA not before:           Tue 15 Nov 2022 15:06:07 +0000
ROA not after:            Wed 21 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        146.167.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ec:97:47:7d:e0:25:96:f7:2f:4d:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 15 15:06:07 2022 GMT
            Not After : Dec 21 05:00:00 2022 GMT
        Subject: CN=abdc6764-5451-4aad-8a76-9c8908c9f660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:94:cf:2f:6f:a0:6c:5e:85:4e:64:ba:b2:87:
                    36:53:55:d4:f2:d7:4f:ad:40:03:76:f6:8c:3a:f4:
                    be:76:21:52:57:3c:55:59:aa:c6:72:2a:95:1e:23:
                    41:3d:68:89:d4:73:a2:63:bc:d2:37:83:76:ae:a9:
                    40:56:91:7e:44:3e:00:0a:ae:af:e9:7b:db:bf:ea:
                    90:e5:58:dc:bd:60:bf:ab:94:f0:73:73:90:f5:48:
                    c1:a2:28:c7:78:0a:13:ee:1b:00:88:01:b7:01:85:
                    e5:bc:09:5f:c4:10:6f:d3:bd:4b:6f:22:40:c8:53:
                    ae:20:8c:c0:37:7f:ed:22:4f:54:16:c2:0c:5a:c1:
                    d1:ce:ba:49:a6:60:a9:c4:74:68:58:97:49:b9:80:
                    fe:7b:d8:c2:c6:c5:72:aa:1f:ae:e7:18:3a:15:a6:
                    a2:ea:13:02:c1:28:91:f2:27:98:f5:ba:de:c5:ae:
                    64:78:f3:6c:eb:88:0e:cb:1a:70:47:76:15:39:b9:
                    e6:49:ff:ff:80:bc:3d:9a:b1:23:c1:11:66:4e:21:
                    1d:ef:74:53:fa:6a:29:dc:30:e8:cc:c6:b9:b5:50:
                    f9:94:98:7e:87:21:e6:e5:f1:af:56:36:f5:1b:4a:
                    e0:c0:20:72:e6:e0:df:26:83:5b:a2:e1:56:42:13:
                    c8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CE:F6:2F:DE:F0:01:3E:34:EC:C0:EC:FD:58:AC:D0:80:AC:B2:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4bf9dc46-2428-395d-a269-67d0395f8307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.167.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ea:46:27:18:ae:46:28:69:45:e5:dd:7c:bb:1d:a0:50:e6:
         5b:fc:79:a3:c3:ca:48:04:d6:cf:ee:ad:5c:79:44:a0:57:7c:
         31:40:1e:bf:7d:72:67:66:54:94:55:57:a7:1a:82:92:4e:da:
         6d:99:ca:3a:f0:da:c9:c0:e0:32:62:6b:33:f3:02:14:3a:ec:
         36:16:e2:c4:08:f4:83:d4:b6:e6:33:f5:84:12:70:3e:65:95:
         1c:75:40:f7:80:5e:bb:fb:6a:96:b2:ab:a0:ac:00:bc:89:06:
         e6:58:ae:a2:6f:d0:46:e4:e2:c3:52:90:9b:d3:59:05:5a:14:
         d7:3e:cf:b6:11:e6:dc:c8:95:3c:c4:1e:65:a1:3d:38:63:b3:
         27:43:b9:22:92:2e:e7:f1:b8:ed:28:d0:c6:de:ac:ae:e5:7a:
         61:61:50:79:37:e9:89:24:1e:27:e8:e6:cc:94:d6:7f:37:d6:
         2f:7d:60:8a:9f:a0:f4:2c:83:e9:cf:f4:ee:68:b9:0c:a3:e8:
         0e:85:c8:4b:9e:a7:97:1b:d0:50:9f:40:04:8c:a9:ac:b7:40:
         24:35:5e:02:75:25:5a:58:90:01:ec:44:ac:e2:3e:4a:50:63:
         e0:ca:12:f5:a1:68:94:9c:38:1f:a2:2a:a6:1f:9a:dd:ff:57:
         a1:a7:b9:67
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/sl0d94CWW9y9NDwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTExNTE1MDYwN1oXDTIyMTIyMTA1MDAwMFowLzEtMCsGA1UEAxMk
YWJkYzY3NjQtNTQ1MS00YWFkLThhNzYtOWM4OTA4YzlmNjYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJTPL2+gbF6FTmS6soc2U1XU8tdPrUADdvaM
OvS+diFSVzxVWarGciqVHiNBPWiJ1HOiY7zSN4N2rqlAVpF+RD4ACq6v6Xvbv+qQ
5VjcvWC/q5Twc3OQ9UjBoijHeAoT7hsAiAG3AYXlvAlfxBBv071LbyJAyFOuIIzA
N3/tIk9UFsIMWsHRzrpJpmCpxHRoWJdJuYD+e9jCxsVyqh+u5xg6Faai6hMCwSiR
8ieY9brexa5kePNs64gOyxpwR3YVObnmSf//gLw9mrEjwRFmTiEd73RT+mop3DDo
zMa5tVD5lJh+hyHm5fGvVjb1G0rgwCBy5uDfJoNbouFWQhPIZQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFO7O9i/e8AE+NOzA7P1YrNCArLIWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNGJmOWRjNDYtMjQyOC0z
OTVkLWEyNjktNjdkMDM5NWY4MzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkqcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAJupGJxiuRihpReXdfLsdoFDmW/x5o8PKSATWz+6tXHlEoFd8MUAev31y
Z2ZUlFVXpxqCkk7abZnKOvDaycDgMmJrM/MCFDrsNhbixAj0g9S25jP1hBJwPmWV
HHVA94Beu/tqlrKroKwAvIkG5liuom/QRuTiw1KQm9NZBVoU1z7PthHm3MiVPMQe
ZaE9OGOzJ0O5IpIu5/G47SjQxt6sruV6YWFQeTfpiSQeJ+jmzJTWfzfWL31gip+g
9CyD6c/07mi5DKPoDoXIS56nlxvQUJ9ABIyprLdAJDVeAnUlWliQAexErOI+SlBj
4MoS9aFolJw4H6Iqph+a3f9Xoae5Zw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:19:46 2025 by rpki-client