Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c5b3237-b324-358f-869f-aa3294d05f89.roa
File:                     4c5b3237-b324-358f-869f-aa3294d05f89.roa (raw, json)
Hash identifier:          lYzLk2kx7jMMbgoOUuN+A+mT9uebipHBmZ26IYFEbKE=
Subject key identifier:   47:48:F5:92:FF:8B:2D:F4:42:5D:2B:42:36:81:D3:64:C5:AA:5F:A3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840690E5AA0443A63BE51496700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c5b3237-b324-358f-869f-aa3294d05f89.roa
Signing time:             Fri 30 Dec 2022 19:54:08 +0000
ROA not before:           Fri 30 Dec 2022 19:54:08 +0000
ROA not after:            Fri 03 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        16.77.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:69:0e:5a:a0:44:3a:63:be:51:49:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 30 19:54:08 2022 GMT
            Not After : Feb  3 05:00:00 2023 GMT
        Subject: CN=0415cba3-bc09-483a-a718-0e4b2bf965c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a8:43:72:a4:64:db:b2:27:be:c8:07:1f:9f:
                    2e:74:ad:9d:76:6b:00:26:29:a6:04:d3:e0:65:9b:
                    bd:11:49:91:73:44:35:b6:67:7f:92:69:a0:89:3e:
                    db:35:fd:17:7b:1d:ac:87:04:9c:c9:db:cb:6a:c3:
                    c1:81:49:41:27:1d:04:b2:41:6f:93:eb:3d:00:31:
                    29:f2:c8:5f:66:82:87:05:c2:4b:1d:7b:ef:5a:25:
                    27:1d:3f:3b:a5:20:14:de:37:fb:70:0f:0d:e5:cd:
                    7f:38:bf:0e:73:6a:ec:37:ae:93:0d:eb:f4:40:fd:
                    59:20:72:cb:1b:8f:f5:24:29:e8:9b:f5:47:f3:69:
                    7d:8c:4e:d9:f2:1f:bc:ac:c8:f4:59:b5:c7:6a:fd:
                    a9:c2:0e:d8:0c:94:ce:23:3a:21:98:35:f5:d9:0a:
                    5c:2b:1a:10:e2:2b:c4:3e:e5:b5:12:6a:36:a1:84:
                    84:b7:90:c8:5f:73:d0:aa:12:4d:98:f2:18:ab:1b:
                    b4:eb:7e:86:40:93:63:a4:a7:75:64:f1:11:68:20:
                    73:74:4e:3a:a9:57:5a:10:eb:4d:ef:cf:08:ba:d4:
                    26:66:ab:b7:ef:78:66:e2:7f:7c:53:22:49:a0:5f:
                    8f:a1:6b:15:ee:2a:b1:48:1b:e4:df:17:b5:14:49:
                    34:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:48:F5:92:FF:8B:2D:F4:42:5D:2B:42:36:81:D3:64:C5:AA:5F:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c5b3237-b324-358f-869f-aa3294d05f89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.77.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:e2:0c:8b:ea:84:6c:2f:64:b2:3d:d7:4a:6a:68:bb:6a:bd:
         01:2f:7f:91:5c:fd:aa:c4:91:92:20:39:da:9c:a1:1a:ba:a0:
         a9:0a:85:b4:04:1f:a7:2d:08:af:bc:29:49:1e:96:5b:59:cb:
         62:05:11:ed:24:5d:f2:2e:d1:58:3d:57:3a:51:8b:7d:42:79:
         56:db:9f:68:ed:d0:89:76:90:a5:64:9f:8d:23:97:93:3f:61:
         e6:30:54:84:d7:de:73:93:0e:b8:e1:48:4f:27:f6:b9:23:db:
         59:33:b2:7d:71:ed:70:e6:fd:4e:2e:c3:ee:18:29:bb:95:ca:
         0d:33:be:45:1c:ac:e5:9e:f7:3e:0a:44:aa:af:e7:61:b4:ae:
         dd:e6:ac:7c:b5:2d:e5:0e:f3:fd:b3:72:ec:10:9c:74:f0:aa:
         4f:1b:b9:93:2d:99:ed:0c:ed:61:d9:79:78:d2:e5:ab:95:b9:
         82:68:b4:d7:12:e3:31:83:55:59:dd:01:e4:55:55:dd:cb:07:
         25:1e:45:c2:c1:97:21:aa:0f:63:bb:42:4f:f0:ff:f2:d2:94:
         11:ef:e8:4e:c8:fc:75:35:78:4a:58:3d:70:8f:32:2b:01:22:
         ba:27:69:4c:0c:b1:06:77:85:64:1e:b5:d5:22:cc:5c:81:be:
         8b:5e:dc:d9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBpDlqgRDpjvlFJZwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIzMDE5NTQwOFoXDTIzMDIwMzA1MDAwMFowLzEtMCsGA1UEAxMk
MDQxNWNiYTMtYmMwOS00ODNhLWE3MTgtMGU0YjJiZjk2NWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKhDcqRk27InvsgHH58udK2ddmsAJimmBNPg
ZZu9EUmRc0Q1tmd/kmmgiT7bNf0Xex2shwScydvLasPBgUlBJx0EskFvk+s9ADEp
8shfZoKHBcJLHXvvWiUnHT87pSAU3jf7cA8N5c1/OL8Oc2rsN66TDev0QP1ZIHLL
G4/1JCnom/VH82l9jE7Z8h+8rMj0WbXHav2pwg7YDJTOIzohmDX12QpcKxoQ4ivE
PuW1Emo2oYSEt5DIX3PQqhJNmPIYqxu0636GQJNjpKd1ZPERaCBzdE46qVdaEOtN
788IutQmZqu373hm4n98UyJJoF+PoWsV7iqxSBvk3xe1FEk0awIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEdI9ZL/iy30Ql0rQjaB02TFql+jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNGM1YjMyMzctYjMyNC0z
NThmLTg2OWYtYWEzMjk0ZDA1Zjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEE0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAX+IMi+qEbC9ksj3XSmpou2q9AS9/kVz9qsSRkiA52pyhGrqgqQqFtAQf
py0Ir7wpSR6WW1nLYgUR7SRd8i7RWD1XOlGLfUJ5VtufaO3QiXaQpWSfjSOXkz9h
5jBUhNfec5MOuOFITyf2uSPbWTOyfXHtcOb9Ti7D7hgpu5XKDTO+RRys5Z73PgpE
qq/nYbSu3easfLUt5Q7z/bNy7BCcdPCqTxu5ky2Z7QztYdl5eNLlq5W5gmi01xLj
MYNVWd0B5FVV3csHJR5FwsGXIaoPY7tCT/D/8tKUEe/oTsj8dTV4Slg9cI8yKwEi
uidpTAyxBneFZB611SLMXIG+i17c2Q==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:53:11 2025 by rpki-client