Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5401b58d-12ae-3af1-8776-c7322a697f79.roa
File:                     5401b58d-12ae-3af1-8776-c7322a697f79.roa (raw, json)
Hash identifier:          L+ukkK7HQy8Awsa3yca4xcKXmxEvrOurGXVS5BM8tek=
Subject key identifier:   6E:AC:6C:2D:BA:70:7B:62:40:C9:EB:16:96:96:18:26:82:7F:25:4F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DCBF0ADBDFEB482759C95C280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5401b58d-12ae-3af1-8776-c7322a697f79.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Thu 09 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.61.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cb:f0:ad:bd:fe:b4:82:75:9c:95:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : Jun  9 04:00:00 2022 GMT
        Subject: CN=4c714d80-0937-4925-afb3-5cedfd6131de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b7:8d:1d:0f:06:96:e6:8e:db:40:4c:50:97:
                    1d:a5:d8:7a:8c:70:3e:c6:6f:a9:07:32:3f:91:9c:
                    98:37:74:63:95:ec:a4:96:d4:6d:77:67:b2:b4:9e:
                    67:e7:2c:c5:dc:bc:69:b7:e4:5b:e7:0b:4d:42:f3:
                    5c:8f:73:d3:06:12:4f:42:d7:c4:16:7b:f8:6a:94:
                    ef:42:ba:7b:4e:0c:55:c5:d1:55:19:05:c6:77:dd:
                    fa:2f:b6:88:36:63:a5:64:78:0d:a5:b3:82:83:35:
                    6c:93:8c:ca:a2:d5:96:f1:f6:32:78:e1:22:fe:3d:
                    b8:ea:72:3c:5d:81:da:a3:9f:9a:86:29:bf:4d:dc:
                    d0:84:0f:d6:15:80:21:66:2a:67:c1:0a:9d:d1:47:
                    95:68:6e:d4:25:6a:9e:cb:40:30:19:e6:4e:6a:d6:
                    4f:14:d8:a8:43:dc:03:35:9e:ed:e0:05:67:04:34:
                    e8:ac:f2:86:ed:7c:af:70:1d:6f:7c:09:a2:55:eb:
                    e2:2d:7b:d8:fa:2b:88:55:66:7d:4c:2e:e8:8e:95:
                    85:a8:47:66:2b:8b:9f:45:77:3f:ce:dd:d9:05:ba:
                    e0:46:17:d4:c1:35:ab:bc:55:7e:e7:2e:2c:f6:61:
                    fd:c2:38:e1:40:f7:db:e2:ac:95:80:26:72:cc:54:
                    14:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AC:6C:2D:BA:70:7B:62:40:C9:EB:16:96:96:18:26:82:7F:25:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5401b58d-12ae-3af1-8776-c7322a697f79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.61.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:cb:03:ae:c7:db:45:47:6d:a0:c1:80:0f:b1:f3:4a:49:79:
         70:4c:c6:94:c1:ae:16:54:c6:49:53:8d:9a:c7:4d:9d:b6:a2:
         c0:eb:61:4d:01:3e:9a:d6:1f:81:ee:85:7b:d1:68:38:ac:ff:
         e2:f2:c4:8b:8d:1e:77:5a:be:e9:bf:18:a9:54:b6:50:3e:89:
         2b:92:4f:f8:35:7c:cb:d7:f6:0c:65:72:16:4d:91:1e:91:17:
         29:1b:a4:6e:9e:d4:e5:42:c0:48:a9:73:13:e5:d8:5f:12:08:
         cd:0c:8a:27:29:80:6e:08:c2:38:82:53:61:b2:b9:b2:13:9f:
         61:09:17:1a:f8:7e:5d:e7:90:b6:1a:b7:0e:c4:6a:97:c8:fc:
         8c:a8:bf:1a:43:41:35:1d:65:61:60:c4:bf:ce:57:7e:93:4a:
         8e:40:43:a3:8c:e6:81:a8:1e:d7:ff:c4:ea:b4:e8:75:27:e4:
         7b:b3:63:3e:25:7d:62:b7:0c:67:99:e7:2c:f9:72:b7:2b:a0:
         69:c8:29:f2:e6:5e:51:3f:11:33:cd:dc:ac:c0:da:6a:87:20:
         45:cf:ad:4b:4e:c1:11:b3:5a:73:57:60:20:8c:e7:73:09:9e:
         76:70:0a:eb:1e:cd:4b:4e:c6:06:6f:de:d0:d3:38:07:fd:5f:
         57:bd:44:ca
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3L8K29/rSCdZyVwoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDUwNDEyMDAwMFoXDTIyMDYwOTA0MDAwMFowLzEtMCsGA1UEAxMk
NGM3MTRkODAtMDkzNy00OTI1LWFmYjMtNWNlZGZkNjEzMWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtreNHQ8GluaO20BMUJcdpdh6jHA+xm+pBzI/
kZyYN3RjleykltRtd2eytJ5n5yzF3Lxpt+Rb5wtNQvNcj3PTBhJPQtfEFnv4apTv
Qrp7TgxVxdFVGQXGd936L7aINmOlZHgNpbOCgzVsk4zKotWW8fYyeOEi/j246nI8
XYHao5+ahim/TdzQhA/WFYAhZipnwQqd0UeVaG7UJWqey0AwGeZOatZPFNioQ9wD
NZ7t4AVnBDTorPKG7XyvcB1vfAmiVeviLXvY+iuIVWZ9TC7ojpWFqEdmK4ufRXc/
zt3ZBbrgRhfUwTWrvFV+5y4s9mH9wjjhQPfb4qyVgCZyzFQUXwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFG6sbC26cHtiQMnrFpaWGCaCfyVPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNTQwMWI1OGQtMTJhZS0z
YWYxLTg3NzYtYzczMjJhNjk3Zjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAED0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAeMsDrsfbRUdtoMGAD7HzSkl5cEzGlMGuFlTGSVONmsdNnbaiwOthTQE+
mtYfge6Fe9FoOKz/4vLEi40ed1q+6b8YqVS2UD6JK5JP+DV8y9f2DGVyFk2RHpEX
KRukbp7U5ULASKlzE+XYXxIIzQyKJymAbgjCOIJTYbK5shOfYQkXGvh+XeeQthq3
DsRql8j8jKi/GkNBNR1lYWDEv85XfpNKjkBDo4zmgage1//E6rTodSfke7NjPiV9
YrcMZ5nnLPlytyugacgp8uZeUT8RM83crMDaaocgRc+tS07BEbNac1dgIIzncwme
dnAK6x7NS07GBm/e0NM4B/1fV71Eyg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:07:21 2025 by rpki-client