Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4f0b098c-8296-3724-a8c4-fa92860d9714.roa
File:                     4f0b098c-8296-3724-a8c4-fa92860d9714.roa (raw, json)
Hash identifier:          E6d1lUUTrMWA9FPrdGIxWjJdlkZ9KlXSK9hOOfj9sdY=
Subject key identifier:   82:17:B2:41:71:A3:67:CD:CD:1D:FA:15:5B:AB:4B:6E:86:76:D8:9F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CBD94A9752E99B13D7057C280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4f0b098c-8296-3724-a8c4-fa92860d9714.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        71.143.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:bd:94:a9:75:2e:99:b1:3d:70:57:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=84814fe9-cc6f-49fe-9577-305e6bd7895a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:90:ec:3d:d0:7a:f5:ae:b3:5f:0e:87:6c:fc:
                    af:a5:aa:f7:d2:84:8e:33:05:ab:a6:2f:1b:09:6d:
                    1b:d8:e2:34:49:46:02:28:71:ab:95:9f:8a:33:16:
                    19:47:34:2e:87:e4:4e:29:f7:58:34:4a:23:13:eb:
                    df:b3:e2:a0:75:53:d4:f1:03:b2:2f:ab:72:f7:d7:
                    2f:b5:69:1e:16:52:cc:52:17:bd:a8:82:1e:46:66:
                    76:0e:58:de:9c:3d:0b:34:5b:84:35:2d:8d:15:68:
                    02:f9:f4:e3:b8:92:06:f4:74:6c:da:08:60:5b:a7:
                    b7:c7:cc:ba:cf:87:c7:1a:1b:77:10:bd:34:18:dc:
                    b5:21:2e:d0:d5:ce:dd:f1:51:a9:2c:43:ba:9c:cc:
                    22:6f:b5:c0:dd:da:24:f0:8f:51:49:3c:5d:22:1e:
                    e6:9e:c7:a7:87:51:01:66:2b:b9:c7:ef:58:5f:88:
                    b8:19:67:a1:e9:ef:d1:b9:91:74:95:39:1c:61:89:
                    34:31:51:80:f6:d9:41:b6:81:79:8d:ee:8b:e5:25:
                    1a:d5:c4:80:5d:09:a2:1c:e5:61:0e:f8:8b:8d:c8:
                    e6:ef:4b:78:b6:01:b5:86:b0:03:5d:b3:68:06:a3:
                    bd:f3:ca:38:42:62:e6:d5:9c:0a:08:95:a1:45:7d:
                    56:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:17:B2:41:71:A3:67:CD:CD:1D:FA:15:5B:AB:4B:6E:86:76:D8:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4f0b098c-8296-3724-a8c4-fa92860d9714.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.143.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:f2:1c:83:14:71:64:61:c0:09:31:10:49:a9:18:57:07:35:
         43:bf:ee:49:e7:4c:54:a4:06:16:ee:6c:10:4b:ae:b3:36:62:
         7e:53:ce:0c:89:76:4d:d6:89:f3:5e:c3:96:5c:d8:74:c9:03:
         70:5c:01:9f:27:50:5d:16:7c:a2:03:62:aa:59:1d:2a:27:e6:
         d9:94:3e:52:c4:44:13:76:fb:2f:8c:c5:9f:9a:e5:cb:c2:57:
         49:6b:9f:f0:8a:3d:3e:b6:17:68:f8:01:9a:73:10:00:37:a9:
         73:15:0f:e5:b7:46:59:17:2e:23:5f:89:b2:d9:12:44:dd:6f:
         f9:75:ee:15:9e:65:c1:f8:d1:cd:2a:60:32:bf:a3:55:49:bd:
         e2:35:12:3b:0b:fd:ca:23:5b:aa:de:0d:f3:a3:d3:06:d9:e6:
         15:79:c5:47:e0:ae:00:0a:f5:80:76:09:f8:86:64:09:85:ef:
         2d:95:cf:19:d4:46:aa:39:35:67:b8:72:8d:81:d5:5c:2d:95:
         5a:81:af:39:40:ea:e5:b2:02:58:20:6c:73:7b:fc:5d:fb:29:
         cd:eb:06:05:a3:ab:00:31:98:6e:d1:e0:4f:69:18:96:29:40:
         09:5a:52:55:20:ca:f0:2b:d6:ea:ea:ad:5c:90:5b:a7:51:b7:
         cd:57:eb:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDy9lKl1LpmxPXBXwoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDEyODA1MDAwMFoXDTIyMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
ODQ4MTRmZTktY2M2Zi00OWZlLTk1NzctMzA1ZTZiZDc4OTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5DsPdB69a6zXw6HbPyvpar30oSOMwWrpi8b
CW0b2OI0SUYCKHGrlZ+KMxYZRzQuh+ROKfdYNEojE+vfs+KgdVPU8QOyL6ty99cv
tWkeFlLMUhe9qIIeRmZ2DljenD0LNFuENS2NFWgC+fTjuJIG9HRs2ghgW6e3x8y6
z4fHGht3EL00GNy1IS7Q1c7d8VGpLEO6nMwib7XA3dok8I9RSTxdIh7mnsenh1EB
Ziu5x+9YX4i4GWeh6e/RuZF0lTkcYYk0MVGA9tlBtoF5je6L5SUa1cSAXQmiHOVh
DviLjcjm70t4tgG1hrADXbNoBqO988o4QmLm1ZwKCJWhRX1WHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIIXskFxo2fNzR36FVurS26GdtifMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNGYwYjA5OGMtODI5Ni0z
NzI0LWE4YzQtZmE5Mjg2MGQ5NzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGR48AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACjyHIMUcWRhwAkxEEmpGFcHNUO/7knnTFSkBhbubBBLrrM2Yn5TzgyJ
dk3WifNew5Zc2HTJA3BcAZ8nUF0WfKIDYqpZHSon5tmUPlLERBN2+y+MxZ+a5cvC
V0lrn/CKPT62F2j4AZpzEAA3qXMVD+W3RlkXLiNfibLZEkTdb/l17hWeZcH40c0q
YDK/o1VJveI1EjsL/cojW6reDfOj0wbZ5hV5xUfgrgAK9YB2CfiGZAmF7y2VzxnU
Rqo5NWe4co2B1VwtlVqBrzlA6uWyAlggbHN7/F37Kc3rBgWjqwAxmG7R4E9pGJYp
QAlaUlUgyvAr1urqrVyQW6dRt81X67I=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:41:23 2025 by rpki-client