Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4da285c9-2916-315f-af60-a131001a54e7.roa
File:                     4da285c9-2916-315f-af60-a131001a54e7.roa (raw, json)
Hash identifier:          wJtQ8CxaNnVMt65xS9lbQwjSt4amcp5CFuT4Js5855k=
Subject key identifier:   23:C5:18:62:B6:C2:E1:E3:D9:AB:A5:4C:58:A5:BC:B9:9A:49:9F:B2
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F505EA17421455718069357A4
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4da285c9-2916-315f-af60-a131001a54e7.roa
Signing time:             Tue 20 Sep 2022 12:00:00 +0000
ROA not before:           Tue 20 Sep 2022 12:00:00 +0000
ROA not after:            Wed 26 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        56.67.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:50:5e:a1:74:21:45:57:18:06:93:57:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 20 12:00:00 2022 GMT
            Not After : Oct 26 04:00:00 2022 GMT
        Subject: CN=c4546b50-0221-4c6f-8008-1c9895843b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e0:4b:77:bd:69:48:00:10:43:bf:5f:42:dd:
                    cf:9f:e7:ff:de:e9:f5:b7:9e:52:3f:b5:2e:7a:83:
                    d4:c1:1e:20:4d:ef:0d:28:1b:5c:c9:f6:da:01:f5:
                    ab:e1:bb:00:ca:bf:5c:02:8c:50:73:b2:21:03:7d:
                    4c:8f:1d:c7:07:af:a4:1f:47:30:68:61:ff:6a:82:
                    8a:19:42:9d:78:6e:7f:56:90:a5:fb:ab:0b:27:02:
                    9a:aa:ae:46:9a:7f:70:b6:a7:20:f8:e2:ac:62:35:
                    cd:8d:20:c3:75:1c:04:c1:ea:90:8b:78:6f:cc:4d:
                    3f:8b:57:a1:4c:58:ce:34:73:a2:cb:44:51:bd:01:
                    9d:95:31:69:b1:54:8b:05:86:ef:15:0f:d1:5e:e1:
                    36:62:ed:e8:70:82:45:7d:aa:40:1d:aa:70:a4:8a:
                    3b:64:4e:87:1f:f9:c4:26:ad:de:7c:ed:9b:ce:2e:
                    31:01:5c:0a:8f:b3:4f:91:f2:db:4f:36:ae:d0:32:
                    fc:05:88:be:b8:af:51:08:89:f8:a8:48:45:73:77:
                    9e:6a:8f:de:7b:08:0d:49:67:b3:21:a8:20:76:15:
                    69:51:3a:8f:82:81:7c:20:81:54:2c:86:6f:44:fb:
                    00:56:0d:34:69:31:f3:f8:4c:4a:39:d4:60:e4:f5:
                    b7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C5:18:62:B6:C2:E1:E3:D9:AB:A5:4C:58:A5:BC:B9:9A:49:9F:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4da285c9-2916-315f-af60-a131001a54e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.67.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:bd:cb:f8:1f:9d:41:a6:72:d8:7a:33:15:97:87:cd:17:5d:
         da:52:28:d8:a9:d6:6b:b6:bb:ba:43:23:00:0d:70:5c:4f:af:
         92:f6:33:81:9c:21:56:e7:d4:c0:83:e8:1c:82:2a:a4:5a:9c:
         14:43:11:c0:a0:fc:12:1d:72:74:c2:75:9d:7c:ef:1e:bd:fb:
         22:be:78:1d:1e:91:7f:47:7a:17:e2:bb:06:d1:d9:e4:73:db:
         d8:8c:1e:80:86:d9:2d:cd:7a:43:ad:f0:47:3c:a7:a5:fc:a3:
         27:96:79:47:b8:5f:82:c8:d0:9e:41:b0:f3:38:70:65:e5:cd:
         52:9b:10:db:7b:39:aa:49:32:7e:f5:53:6e:da:98:2a:d2:b4:
         5e:f7:00:64:89:74:f9:9f:bf:dd:0d:41:3e:32:96:df:fc:c2:
         9a:cf:bd:f4:4a:2d:46:2e:ac:59:53:f6:5f:1b:dd:71:cc:61:
         21:ce:fb:63:54:09:2d:7c:16:ab:95:b3:87:d0:48:35:88:f6:
         6e:bd:57:88:34:d9:7f:83:b7:6f:35:ba:c1:53:65:61:b1:8b:
         cd:54:28:55:8d:92:f5:a0:91:d1:81:27:51:7b:ca:38:95:01:
         a7:d8:ec:a2:48:d1:60:6f:c7:6d:f2:5f:ac:23:17:4f:80:bb:
         2c:be:c0:1e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9QXqF0IUVXGAaTV6QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDkyMDEyMDAwMFoXDTIyMTAyNjA0MDAwMFowLzEtMCsGA1UEAxMk
YzQ1NDZiNTAtMDIyMS00YzZmLTgwMDgtMWM5ODk1ODQzYjZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uBLd71pSAAQQ79fQt3Pn+f/3un1t55SP7Uu
eoPUwR4gTe8NKBtcyfbaAfWr4bsAyr9cAoxQc7IhA31Mjx3HB6+kH0cwaGH/aoKK
GUKdeG5/VpCl+6sLJwKaqq5Gmn9wtqcg+OKsYjXNjSDDdRwEweqQi3hvzE0/i1eh
TFjONHOiy0RRvQGdlTFpsVSLBYbvFQ/RXuE2Yu3ocIJFfapAHapwpIo7ZE6HH/nE
Jq3efO2bzi4xAVwKj7NPkfLbTzau0DL8BYi+uK9RCIn4qEhFc3eeao/eewgNSWez
IaggdhVpUTqPgoF8IIFULIZvRPsAVg00aTHz+ExKOdRg5PW3HwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCPFGGK2wuHj2aulTFilvLmaSZ+yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNGRhMjg1YzktMjkxNi0z
MTVmLWFmNjAtYTEzMTAwMWE1NGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOEMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAW73L+B+dQaZy2HozFZeHzRdd2lIo2KnWa7a7ukMjAA1wXE+vkvYzgZwh
VufUwIPoHIIqpFqcFEMRwKD8Eh1ydMJ1nXzvHr37Ir54HR6Rf0d6F+K7BtHZ5HPb
2IwegIbZLc16Q63wRzynpfyjJ5Z5R7hfgsjQnkGw8zhwZeXNUpsQ23s5qkkyfvVT
btqYKtK0XvcAZIl0+Z+/3Q1BPjKW3/zCms+99EotRi6sWVP2XxvdccxhIc77Y1QJ
LXwWq5Wzh9BINYj2br1XiDTZf4O3bzW6wVNlYbGLzVQoVY2S9aCR0YEnUXvKOJUB
p9jsokjRYG/HbfJfrCMXT4C7LL7AHg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:28 2025 by rpki-client