Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c25fba7-e761-3f7f-aa44-840f199a8feb.roa
File:                     4c25fba7-e761-3f7f-aa44-840f199a8feb.roa (raw, json)
Hash identifier:          EZ4ChQjIx61dV66SKDo4XPvcotF4o5MIq3Ws7y2oZis=
Subject key identifier:   EE:8D:1E:FA:CE:75:76:D3:57:28:FC:88:A4:2B:7C:D3:6F:D5:79:85
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FB75814644C34FB5D19D3B100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c25fba7-e761-3f7f-aa44-840f199a8feb.roa
Signing time:             Thu 27 Oct 2022 21:18:08 +0000
ROA not before:           Thu 27 Oct 2022 21:18:08 +0000
ROA not after:            Fri 02 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        134.127.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b7:58:14:64:4c:34:fb:5d:19:d3:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 27 21:18:08 2022 GMT
            Not After : Dec  2 05:00:00 2022 GMT
        Subject: CN=198187bd-0d74-4e99-8809-3740ba7400bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:48:45:52:dd:ea:63:72:81:c0:87:b4:fa:36:
                    75:ce:82:1e:5b:ad:5d:16:d0:b9:55:1a:71:03:55:
                    dc:b2:54:d6:7a:d1:ee:ba:a6:03:44:86:48:fd:84:
                    3d:04:a3:c0:9c:11:3f:60:25:1d:3c:fd:c4:77:e5:
                    26:b1:22:0b:ab:f3:a5:53:dc:65:8a:b4:2b:f5:da:
                    32:0f:e3:ca:5a:51:11:f1:ee:ce:09:43:6e:b7:34:
                    cd:6e:1a:80:aa:57:ef:9c:32:09:a5:2c:32:fb:36:
                    06:36:45:8e:2f:18:bf:e6:82:66:ee:2a:2c:17:ad:
                    80:42:c3:22:84:11:67:94:7c:cb:d5:72:b9:f1:dc:
                    bc:30:4a:7f:5b:e0:26:16:fb:87:7f:5a:4d:16:80:
                    8f:3b:30:de:bf:41:9b:82:40:4a:07:80:b5:d8:14:
                    a4:35:22:57:af:9a:c3:76:0f:51:27:06:e4:44:88:
                    8e:d4:f6:7f:fc:08:bf:9f:41:fd:3d:11:42:90:1a:
                    96:3f:93:e5:0a:bd:98:46:57:25:40:85:d8:f6:e3:
                    5a:6e:7f:a0:6a:63:20:28:bb:4b:cb:d5:8a:5e:f7:
                    62:16:be:28:71:f8:b5:7a:f5:64:72:f4:ba:6f:d1:
                    21:31:e1:be:66:a6:4e:44:15:46:26:93:fc:09:a1:
                    16:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8D:1E:FA:CE:75:76:D3:57:28:FC:88:A4:2B:7C:D3:6F:D5:79:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c25fba7-e761-3f7f-aa44-840f199a8feb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.127.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:14:fc:57:61:94:4a:74:e9:d3:3b:10:aa:36:1b:f6:bc:c2:
         13:01:c8:b5:3b:58:9c:e0:c2:65:8b:5c:46:55:ab:90:64:98:
         7a:9f:80:c6:9d:e6:07:6b:d4:25:80:ff:cc:59:9d:e2:3b:ea:
         27:16:6f:dc:df:ff:27:d0:3b:73:8c:df:a6:42:8c:d9:5e:aa:
         52:24:79:df:42:cb:1e:fc:28:3d:b2:01:ce:4c:86:af:00:a0:
         5d:04:da:36:14:88:af:e0:9d:93:05:1e:89:77:f0:c2:c7:07:
         22:f9:bc:6a:b9:a1:63:c1:77:e3:ac:c3:48:dc:7e:6b:53:aa:
         d4:46:96:37:59:98:06:c9:31:57:82:e9:c5:5e:bd:ee:73:a0:
         bc:8c:86:b3:13:9a:fe:3f:07:59:f1:1e:d3:96:11:b5:b6:c1:
         69:fc:9d:92:ea:ac:6f:66:5f:63:82:63:79:35:2c:ed:a1:26:
         87:f9:a1:25:7a:6c:ed:27:58:93:47:60:f0:4b:58:c7:18:7f:
         0c:35:54:9a:15:ed:09:e0:e9:47:a6:63:14:b5:ee:d7:2e:8c:
         05:84:c9:93:e7:f3:e3:83:59:33:0b:ff:4c:36:f6:9b:6e:a2:
         11:08:6c:d9:7c:58:59:80:6d:22:88:fc:5b:fd:56:3a:37:d3:
         f6:9e:46:6a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+3WBRkTDT7XRnTsQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAyNzIxMTgwOFoXDTIyMTIwMjA1MDAwMFowLzEtMCsGA1UEAxMk
MTk4MTg3YmQtMGQ3NC00ZTk5LTg4MDktMzc0MGJhNzQwMGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkhFUt3qY3KBwIe0+jZ1zoIeW61dFtC5VRpx
A1XcslTWetHuuqYDRIZI/YQ9BKPAnBE/YCUdPP3Ed+UmsSILq/OlU9xlirQr9doy
D+PKWlER8e7OCUNutzTNbhqAqlfvnDIJpSwy+zYGNkWOLxi/5oJm7iosF62AQsMi
hBFnlHzL1XK58dy8MEp/W+AmFvuHf1pNFoCPOzDev0GbgkBKB4C12BSkNSJXr5rD
dg9RJwbkRIiO1PZ//Ai/n0H9PRFCkBqWP5PlCr2YRlclQIXY9uNabn+gamMgKLtL
y9WKXvdiFr4ocfi1evVkcvS6b9EhMeG+ZqZORBVGJpP8CaEWvQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFO6NHvrOdXbTVyj8iKQrfNNv1XmFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNGMyNWZiYTctZTc2MS0z
ZjdmLWFhNDQtODQwZjE5OWE4ZmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhn8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAbRT8V2GUSnTp0zsQqjYb9rzCEwHItTtYnODCZYtcRlWrkGSYep+Axp3m
B2vUJYD/zFmd4jvqJxZv3N//J9A7c4zfpkKM2V6qUiR530LLHvwoPbIBzkyGrwCg
XQTaNhSIr+CdkwUeiXfwwscHIvm8armhY8F346zDSNx+a1Oq1EaWN1mYBskxV4Lp
xV697nOgvIyGsxOa/j8HWfEe05YRtbbBafydkuqsb2ZfY4JjeTUs7aEmh/mhJXps
7SdYk0dg8EtYxxh/DDVUmhXtCeDpR6ZjFLXu1y6MBYTJk+fz44NZMwv/TDb2m26i
EQhs2XxYWYBtIoj8W/1WOjfT9p5Gag==
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:40:31 2025 by rpki-client