Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/524ac3a2-25e8-33d4-ad6e-56b17ec4d76e.roa
File:                     524ac3a2-25e8-33d4-ad6e-56b17ec4d76e.roa (raw, json)
Hash identifier:          c4earAaMLwCvM87QELBmipGQ7HBsjce2CVzAsKnxqyU=
Subject key identifier:   8C:80:68:7D:1F:3C:91:F0:46:B1:F7:5B:36:1D:59:3F:9B:5E:3B:75
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DB234891632EF7E0E98866A48
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/524ac3a2-25e8-33d4-ad6e-56b17ec4d76e.roa
Signing time:             Sun 24 Apr 2022 12:00:00 +0000
ROA not before:           Sun 24 Apr 2022 12:00:00 +0000
ROA not after:            Mon 30 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        40.180.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b2:34:89:16:32:ef:7e:0e:98:86:6a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 24 12:00:00 2022 GMT
            Not After : May 30 04:00:00 2022 GMT
        Subject: CN=9016b1ce-54cf-4caa-b26b-bd7aabe6844e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e6:17:e4:da:cf:fe:81:53:67:01:8f:e2:d3:
                    e3:06:30:b2:d9:15:3f:8a:3d:57:b0:44:f8:c7:7e:
                    89:c7:aa:99:f1:8f:e3:2e:eb:5b:f6:05:a5:f3:4e:
                    81:9a:00:21:6d:fe:14:67:80:bc:f7:67:91:2a:81:
                    7d:45:2a:5c:03:f7:61:88:14:1e:1c:3b:e0:5f:e1:
                    83:fd:03:40:ba:e0:fd:d0:69:d2:f9:95:1d:24:f4:
                    46:19:3b:76:8f:9b:0d:d2:c7:4d:39:9f:db:f2:c9:
                    8c:fa:96:44:ca:50:c7:1d:e5:f1:a2:cc:33:27:78:
                    28:65:fd:6e:06:b9:0f:41:36:64:3e:d2:f7:85:3c:
                    9a:02:0a:59:a8:84:ab:25:bc:58:a3:45:1f:cd:37:
                    01:3c:4a:83:68:45:c1:c5:ed:c7:cd:d2:3f:e3:59:
                    5b:70:1b:43:4b:53:6d:eb:8a:a4:20:90:76:45:ef:
                    b8:9f:c7:70:7b:78:50:2a:eb:9f:29:2c:4c:db:c0:
                    74:92:d4:b8:70:1b:33:a4:b5:9f:85:cc:f9:85:5c:
                    57:de:83:63:bd:da:55:12:be:90:ed:61:68:5b:6e:
                    a1:10:62:ab:d5:c5:fc:f6:a0:f7:08:91:45:cb:f0:
                    7d:b2:9b:40:e1:7c:a1:f5:c5:72:33:f2:41:b6:5f:
                    4f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:80:68:7D:1F:3C:91:F0:46:B1:F7:5B:36:1D:59:3F:9B:5E:3B:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/524ac3a2-25e8-33d4-ad6e-56b17ec4d76e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.180.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:f1:98:87:67:ee:67:35:68:e2:ea:81:73:54:fd:d1:81:74:
         b9:06:d2:25:c0:ea:d0:21:82:84:3e:1e:8f:9f:13:fa:41:b1:
         ef:64:30:27:2d:01:ff:58:d0:b4:fd:2c:4f:e7:e1:30:60:5b:
         51:f0:f9:fe:73:f4:f1:60:c7:eb:f3:2c:af:75:77:9d:4d:f9:
         54:c2:28:4f:22:1f:89:bb:27:4f:08:20:79:76:2c:26:11:d9:
         e2:fd:a1:ef:1e:c9:76:6f:48:fa:49:e4:8f:58:d5:62:ac:77:
         0f:c8:ae:bf:9b:69:24:1a:ec:a3:38:18:33:91:33:2e:7c:bb:
         72:57:c7:d7:49:eb:43:62:1f:b7:b8:77:b2:cd:10:5f:9a:1e:
         da:27:44:42:da:19:9f:a0:b5:8a:d0:53:f3:54:ce:a0:3f:74:
         a7:63:7a:61:c6:36:3c:ab:96:c8:54:9c:f7:c0:98:7d:03:85:
         4a:69:cb:06:e3:9d:c6:e6:c8:df:74:20:11:c0:9f:09:38:66:
         59:9d:4c:24:e6:1e:2d:8b:0a:1c:cd:f2:ce:14:ef:85:c0:d2:
         73:92:35:36:45:e7:13:67:b6:86:ff:d5:3a:35:07:71:73:1e:
         c0:ec:54:2e:c6:76:59:85:ba:b7:13:7f:9b:86:fd:bf:d3:a7:
         2b:53:5b:77
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2yNIkWMu9+DpiGakgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDQyNDEyMDAwMFoXDTIyMDUzMDA0MDAwMFowLzEtMCsGA1UEAxMk
OTAxNmIxY2UtNTRjZi00Y2FhLWIyNmItYmQ3YWFiZTY4NDRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOYX5NrP/oFTZwGP4tPjBjCy2RU/ij1XsET4
x36Jx6qZ8Y/jLutb9gWl806BmgAhbf4UZ4C892eRKoF9RSpcA/dhiBQeHDvgX+GD
/QNAuuD90GnS+ZUdJPRGGTt2j5sN0sdNOZ/b8smM+pZEylDHHeXxoswzJ3goZf1u
BrkPQTZkPtL3hTyaAgpZqISrJbxYo0UfzTcBPEqDaEXBxe3HzdI/41lbcBtDS1Nt
64qkIJB2Re+4n8dwe3hQKuufKSxM28B0ktS4cBszpLWfhcz5hVxX3oNjvdpVEr6Q
7WFoW26hEGKr1cX89qD3CJFFy/B9sptA4Xyh9cVyM/JBtl9PHwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIyAaH0fPJHwRrH3WzYdWT+bXjt1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNTI0YWMzYTItMjVlOC0z
M2Q0LWFkNmUtNTZiMTdlYzRkNzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKLQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAU/GYh2fuZzVo4uqBc1T90YF0uQbSJcDq0CGChD4ej58T+kGx72QwJy0B
/1jQtP0sT+fhMGBbUfD5/nP08WDH6/Msr3V3nU35VMIoTyIfibsnTwggeXYsJhHZ
4v2h7x7Jdm9I+knkj1jVYqx3D8iuv5tpJBrsozgYM5EzLny7clfH10nrQ2Ift7h3
ss0QX5oe2idEQtoZn6C1itBT81TOoD90p2N6YcY2PKuWyFSc98CYfQOFSmnLBuOd
xubI33QgEcCfCThmWZ1MJOYeLYsKHM3yzhTvhcDSc5I1NkXnE2e2hv/VOjUHcXMe
wOxULsZ2WYW6txN/m4b9v9OnK1Nbdw==
-----END CERTIFICATE-----
Generated at Tue Apr 15 17:00:57 2025 by rpki-client