Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/527ec67d-1066-39cd-aa99-c9d8933ec657.roa
File:                     527ec67d-1066-39cd-aa99-c9d8933ec657.roa (raw, json)
Hash identifier:          mfB94WamJ6zHv+2g0EPsZhtyuLDB7g31CeT/uZMtXzY=
Subject key identifier:   30:CB:2A:86:BC:98:74:3B:65:67:35:57:A3:F3:DF:68:D1:A6:2F:49
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DDA1A6DB3B20615AD32C81C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/527ec67d-1066-39cd-aa99-c9d8933ec657.roa
Signing time:             Mon 09 May 2022 12:00:00 +0000
ROA not before:           Mon 09 May 2022 12:00:00 +0000
ROA not after:            Tue 14 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.175.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:da:1a:6d:b3:b2:06:15:ad:32:c8:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  9 12:00:00 2022 GMT
            Not After : Jun 14 04:00:00 2022 GMT
        Subject: CN=c0231cf8-ef4b-4e7f-8daf-73e1f320ad1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:aa:b7:b3:bc:a2:63:fc:56:0f:e7:73:48:d9:
                    c1:c6:f9:7c:ee:e5:84:44:20:24:47:d7:bb:1f:ba:
                    06:41:e6:44:b3:18:5f:d8:9f:c6:1d:6f:21:fd:a6:
                    1b:fa:d3:ca:36:47:e6:b5:5b:97:90:0d:8b:aa:7c:
                    ee:54:94:21:6a:02:a8:fc:63:ed:cf:3a:9e:f1:2a:
                    0b:fb:ff:b9:85:09:9c:a7:e9:f3:0a:f2:6d:8a:8b:
                    ef:84:8c:3d:88:2c:64:59:69:f4:3f:ef:eb:38:82:
                    17:e8:54:2b:35:6c:fc:09:d0:3c:47:ed:d8:99:84:
                    38:51:85:2a:68:48:41:5b:82:d5:94:7b:fd:d2:bb:
                    70:27:b0:e4:88:6f:1e:4b:8c:ee:90:97:88:34:8e:
                    7b:0f:25:03:25:89:76:9c:db:4f:21:87:09:28:3b:
                    1a:03:cd:98:a7:3e:1e:98:13:66:6f:fe:f5:60:57:
                    0b:0a:f3:6e:bc:98:63:8f:11:e1:ad:59:96:d4:50:
                    19:bb:6b:a8:33:5b:c0:b5:0f:bf:25:c7:34:ec:20:
                    32:5e:ab:ac:c3:b1:85:b8:98:ee:77:0f:7c:6c:22:
                    a1:aa:74:a8:ca:b3:01:7c:f2:1d:34:a7:1b:0f:7c:
                    71:89:88:2a:3b:0c:b5:9a:35:86:f6:17:41:45:9a:
                    ac:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CB:2A:86:BC:98:74:3B:65:67:35:57:A3:F3:DF:68:D1:A6:2F:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/527ec67d-1066-39cd-aa99-c9d8933ec657.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.175.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:79:1d:9b:21:87:cd:65:e3:6c:b9:82:dd:38:b0:b1:82:5e:
         3d:66:ac:ea:37:20:71:d7:92:e7:29:25:db:7e:b6:57:d2:4f:
         89:d9:6f:4a:f5:3c:d8:0e:04:ce:ab:33:5e:65:2e:44:21:de:
         56:60:32:c0:0d:f6:45:af:b4:49:a6:93:27:9b:53:5c:59:b0:
         14:d8:03:ff:30:63:e7:8b:a9:36:61:40:93:9e:76:13:0f:df:
         85:74:3b:fd:1b:a3:28:b9:30:ba:ec:b2:5e:19:bc:2e:f4:ad:
         23:4d:bc:9a:c8:5d:f6:84:74:38:51:26:1d:bd:2b:aa:7a:fb:
         68:52:9c:64:5b:be:e0:b9:f1:88:8f:0f:97:d5:8e:10:25:1c:
         0a:6d:5e:6f:e7:a8:0b:76:2f:d0:a5:79:97:08:46:ab:37:44:
         30:2a:8f:12:99:c3:71:fd:f8:0d:38:e6:48:56:aa:94:a6:51:
         c2:3f:4a:10:36:8b:c9:64:90:ff:36:56:b5:c6:8d:b5:66:23:
         52:b8:b1:c9:5c:8a:f7:5b:4e:59:e0:03:7d:f4:a7:af:2f:fa:
         aa:32:fc:1d:e4:5e:22:b7:23:9c:dc:c8:32:ab:43:4a:8c:5c:
         97:81:a0:52:5b:b5:66:65:74:ad:b8:f0:70:cd:fe:43:be:9b:
         03:32:49:20
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3aGm2zsgYVrTLIHIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDUwOTEyMDAwMFoXDTIyMDYxNDA0MDAwMFowLzEtMCsGA1UEAxMk
YzAyMzFjZjgtZWY0Yi00ZTdmLThkYWYtNzNlMWYzMjBhZDFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKq3s7yiY/xWD+dzSNnBxvl87uWERCAkR9e7
H7oGQeZEsxhf2J/GHW8h/aYb+tPKNkfmtVuXkA2LqnzuVJQhagKo/GPtzzqe8SoL
+/+5hQmcp+nzCvJtiovvhIw9iCxkWWn0P+/rOIIX6FQrNWz8CdA8R+3YmYQ4UYUq
aEhBW4LVlHv90rtwJ7DkiG8eS4zukJeINI57DyUDJYl2nNtPIYcJKDsaA82Ypz4e
mBNmb/71YFcLCvNuvJhjjxHhrVmW1FAZu2uoM1vAtQ+/Jcc07CAyXqusw7GFuJju
dw98bCKhqnSoyrMBfPIdNKcbD3xxiYgqOwy1mjWG9hdBRZqsbQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDDLKoa8mHQ7ZWc1V6Pz32jRpi9JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNTI3ZWM2N2QtMTA2Ni0z
OWNkLWFhOTktYzlkODkzM2VjNjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEK8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAQHkdmyGHzWXjbLmC3TiwsYJePWas6jcgcdeS5ykl2362V9JPidlvSvU8
2A4EzqszXmUuRCHeVmAywA32Ra+0SaaTJ5tTXFmwFNgD/zBj54upNmFAk552Ew/f
hXQ7/RujKLkwuuyyXhm8LvStI028mshd9oR0OFEmHb0rqnr7aFKcZFu+4LnxiI8P
l9WOECUcCm1eb+eoC3Yv0KV5lwhGqzdEMCqPEpnDcf34DTjmSFaqlKZRwj9KEDaL
yWSQ/zZWtcaNtWYjUrixyVyK91tOWeADffSnry/6qjL8HeReIrcjnNzIMqtDSoxc
l4GgUlu1ZmV0rbjwcM3+Q76bAzJJIA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:22 2025 by rpki-client