Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/521de0df-1855-3ef7-b5b1-0035b4bb3469.roa
File:                     521de0df-1855-3ef7-b5b1-0035b4bb3469.roa (raw, json)
Hash identifier:          cihns+GOPIMRyt/C0Ujqx09vMj6iU32mtD1WNPm0YhE=
Subject key identifier:   BD:58:09:E9:2C:45:20:5F:C6:D8:CD:C0:71:51:EC:27:F0:60:26:DE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584035522496AE990A2574267480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/521de0df-1855-3ef7-b5b1-0035b4bb3469.roa
Signing time:             Sun 11 Dec 2022 12:00:00 +0000
ROA not before:           Sun 11 Dec 2022 12:00:00 +0000
ROA not after:            Mon 16 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        192.251.142.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:35:52:24:96:ae:99:0a:25:74:26:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 11 12:00:00 2022 GMT
            Not After : Jan 16 05:00:00 2023 GMT
        Subject: CN=80c88495-dfc4-4be5-90ab-f7e31df043a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:95:c3:1c:d8:02:60:c9:66:ce:a6:d4:04:19:
                    58:88:f9:12:a1:98:f7:a2:da:69:3d:cc:12:71:53:
                    35:de:37:97:24:db:d9:80:6e:05:16:4e:74:31:f4:
                    c9:38:ff:b9:d7:0f:40:06:12:cc:87:15:c8:70:f1:
                    44:08:c5:86:ca:dc:14:5f:2d:27:c8:33:dd:99:c0:
                    68:96:50:6a:75:a8:d9:15:02:ba:8b:2d:a1:58:00:
                    28:ca:e0:b7:38:e2:ec:e8:c4:2b:a7:fb:7e:7f:a6:
                    eb:ac:2e:4b:4c:2f:c8:39:44:93:82:64:a1:55:5d:
                    2f:4d:8e:c4:5a:a7:45:fe:50:ee:75:cb:3a:84:e8:
                    70:11:fc:b5:97:05:10:61:9c:95:ee:d3:8d:63:e2:
                    7e:b3:42:fa:7c:f1:b4:2b:d0:d6:cd:7d:d3:10:ac:
                    71:6b:0f:2c:ef:cb:06:88:6b:72:de:b8:31:dd:6b:
                    73:9d:2b:e1:1a:ae:96:dc:5b:be:13:6b:7b:2b:89:
                    e6:ae:4a:c4:49:3d:ee:e0:c8:fa:d1:51:03:0c:b5:
                    2b:ee:33:96:31:b3:ad:4a:a8:f5:e5:66:af:c3:1f:
                    9d:a2:a3:5e:a4:60:a1:e8:c2:4f:84:a8:ed:3f:f6:
                    64:c9:d0:25:29:5f:db:f0:14:ff:d2:40:07:58:af:
                    29:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:58:09:E9:2C:45:20:5F:C6:D8:CD:C0:71:51:EC:27:F0:60:26:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/521de0df-1855-3ef7-b5b1-0035b4bb3469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.251.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:47:86:4f:8e:0f:3e:09:a1:1b:0a:c8:48:eb:d9:27:d8:ac:
         9d:1e:51:f8:50:9e:94:5a:f5:d8:a7:e4:62:25:5e:83:76:ec:
         96:9c:14:6c:8b:9f:e2:9a:14:bf:1f:e8:3e:13:1e:9f:72:ac:
         5a:46:4a:22:a7:7b:eb:18:c5:76:5e:39:47:02:40:15:bb:44:
         77:77:bf:61:f1:79:ef:3b:d7:73:22:b9:ef:9b:87:88:ac:a1:
         fe:a4:d0:84:22:de:10:a3:74:73:b9:ff:c1:f2:92:16:d0:51:
         46:c2:69:18:9d:11:b6:71:4d:a4:38:39:66:8a:a1:4f:57:2a:
         04:21:b5:fc:46:5a:1a:34:2b:0b:c7:9a:a3:02:18:06:1f:a0:
         75:9b:b8:9f:ae:42:b0:a0:6e:e7:cf:58:7d:d9:4e:8e:7f:cf:
         aa:88:74:4e:13:6b:07:98:42:f4:d1:0c:5f:a1:42:50:ad:6d:
         ae:0e:63:55:5b:d9:f4:3d:72:74:52:b1:62:13:28:44:59:a1:
         30:a0:21:4f:b3:5b:9d:fb:5b:09:84:06:5a:a9:b8:e1:a1:94:
         a5:5d:d3:9c:04:10:76:a4:f7:7a:d9:22:b1:15:14:2c:5a:f4:
         7c:61:56:66:59:80:86:a6:2f:d8:23:83:f2:28:8a:4d:1b:52:
         e4:dc:64:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEA1UiSWrpkKJXQmdIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxMTEyMDAwMFoXDTIzMDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
ODBjODg0OTUtZGZjNC00YmU1LTkwYWItZjdlMzFkZjA0M2EyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZXDHNgCYMlmzqbUBBlYiPkSoZj3otppPcwS
cVM13jeXJNvZgG4FFk50MfTJOP+51w9ABhLMhxXIcPFECMWGytwUXy0nyDPdmcBo
llBqdajZFQK6iy2hWAAoyuC3OOLs6MQrp/t+f6brrC5LTC/IOUSTgmShVV0vTY7E
WqdF/lDudcs6hOhwEfy1lwUQYZyV7tONY+J+s0L6fPG0K9DWzX3TEKxxaw8s78sG
iGty3rgx3WtznSvhGq6W3Fu+E2t7K4nmrkrEST3u4Mj60VEDDLUr7jOWMbOtSqj1
5Wavwx+doqNepGCh6MJPhKjtP/ZkydAlKV/b8BT/0kAHWK8pPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL1YCeksRSBfxtjNwHFR7CfwYCbeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNTIxZGUwZGYtMTg1NS0z
ZWY3LWI1YjEtMDAzNWI0YmIzNDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPuOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD9Hhk+ODz4JoRsKyEjr2SfYrJ0eUfhQnpRa9din5GIlXoN27JacFGyL
n+KaFL8f6D4THp9yrFpGSiKne+sYxXZeOUcCQBW7RHd3v2Hxee8713Miue+bh4is
of6k0IQi3hCjdHO5/8HykhbQUUbCaRidEbZxTaQ4OWaKoU9XKgQhtfxGWho0KwvH
mqMCGAYfoHWbuJ+uQrCgbufPWH3ZTo5/z6qIdE4TaweYQvTRDF+hQlCtba4OY1Vb
2fQ9cnRSsWITKERZoTCgIU+zW537WwmEBlqpuOGhlKVd05wEEHak93rZIrEVFCxa
9HxhVmZZgIamL9gjg/Ioik0bUuTcZJs=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:03 2025 by rpki-client