Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/58cd8682-7337-38f0-8953-19ada08e75cf.roa
File:                     58cd8682-7337-38f0-8953-19ada08e75cf.roa (raw, json)
Hash identifier:          12OnwrHshovX699H8INt/cKWP5NDDlV5wrheLAP0fxk=
Subject key identifier:   D1:A7:B5:EE:5F:E4:F0:93:6A:70:03:22:EA:BA:25:C4:F4:3F:EF:75
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EBBD3782FCC7BB56CD513A550
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/58cd8682-7337-38f0-8953-19ada08e75cf.roa
Signing time:             Fri 29 Jul 2022 12:00:00 +0000
ROA not before:           Fri 29 Jul 2022 12:00:00 +0000
ROA not after:            Sat 03 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        204.236.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:bb:d3:78:2f:cc:7b:b5:6c:d5:13:a5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 29 12:00:00 2022 GMT
            Not After : Sep  3 04:00:00 2022 GMT
        Subject: CN=156e9a6a-9250-4dcb-835f-75371b5b3edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c2:17:d8:f7:6e:a3:77:ce:56:4e:7b:a0:fe:
                    f4:e3:46:3c:e9:d5:81:4f:0a:c2:f9:fa:1d:d6:a6:
                    67:e7:6d:c6:9b:15:2f:1e:16:6d:5e:ed:4f:cc:46:
                    12:50:70:09:88:1d:37:c3:26:45:e1:69:8d:24:31:
                    0c:06:09:0d:45:df:f6:ca:18:26:b1:8a:55:23:43:
                    22:d2:4a:97:45:88:bd:f3:85:22:76:4f:7a:6e:01:
                    9e:93:fb:13:1f:a7:e4:4a:eb:64:af:32:4c:d0:b8:
                    06:fe:34:15:a5:18:b8:28:5d:eb:0a:cb:81:42:ba:
                    46:12:9c:78:50:c5:19:da:32:44:aa:ae:cf:92:66:
                    3d:0f:22:9d:40:db:a0:c4:7c:52:4d:12:4b:5c:3a:
                    ab:a7:73:67:8c:e8:5f:72:0d:38:0b:52:95:fc:6d:
                    21:07:c3:f0:21:ad:7f:f7:ec:c9:24:34:1f:15:90:
                    dc:f6:27:b5:c2:53:1b:8b:ef:7c:bb:fd:31:88:fd:
                    66:32:fd:45:03:96:f8:b7:92:02:67:3e:2a:99:65:
                    67:f9:12:3e:9f:75:ad:7e:6a:1f:f4:8d:3f:66:2e:
                    65:94:53:76:a3:ff:b9:c5:dc:f8:cd:25:7d:24:4a:
                    7e:2d:8b:0e:ab:53:3b:53:55:50:03:0d:b2:3c:15:
                    14:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A7:B5:EE:5F:E4:F0:93:6A:70:03:22:EA:BA:25:C4:F4:3F:EF:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/58cd8682-7337-38f0-8953-19ada08e75cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.236.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:92:3d:dc:8d:c3:88:c0:30:4e:b1:58:f4:2d:94:4c:82:61:
         05:44:9c:93:49:f2:9a:72:e1:d7:4c:8b:74:a8:71:0c:c3:42:
         e9:83:29:b7:dc:45:4a:79:6e:b0:0b:e1:39:bb:0c:7b:f2:dc:
         d7:84:b7:88:98:00:4b:4e:04:e2:f8:e4:c7:05:94:77:99:56:
         ed:9b:a3:29:d4:68:0e:52:cb:d1:cf:b6:b0:ad:a3:88:53:ec:
         2d:42:0c:ed:c8:6b:2d:d8:d4:8c:26:cc:8d:62:d4:16:08:31:
         8d:48:52:21:b6:c8:71:cb:cd:0d:b6:c7:ee:b9:4d:52:fe:ed:
         ee:96:fd:e7:5d:01:40:b0:02:81:df:84:8c:80:39:5d:eb:17:
         c1:bb:35:fc:e1:17:2a:4b:96:ac:49:5d:b0:e8:8c:d9:9a:16:
         06:b7:1c:8d:63:af:59:8c:d7:5f:9c:5c:87:fa:36:14:86:95:
         25:f2:fc:59:7f:32:18:24:10:7c:f2:ac:e5:99:fd:27:c7:51:
         7d:cb:c1:41:78:b5:2c:4b:57:fd:df:93:69:2b:4d:a4:0d:97:
         02:36:1b:ee:42:39:5e:c7:17:51:dd:22:18:58:31:ee:a3:cc:
         8f:1d:e2:38:d3:18:0b:a0:ae:26:d6:bc:cb:d6:39:e8:4b:15:
         36:fd:fb:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD6703gvzHu1bNUTpVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcyOTEyMDAwMFoXDTIyMDkwMzA0MDAwMFowLzEtMCsGA1UEAxMk
MTU2ZTlhNmEtOTI1MC00ZGNiLTgzNWYtNzUzNzFiNWIzZWRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8IX2Pduo3fOVk57oP7040Y86dWBTwrC+fod
1qZn523GmxUvHhZtXu1PzEYSUHAJiB03wyZF4WmNJDEMBgkNRd/2yhgmsYpVI0Mi
0kqXRYi984Uidk96bgGek/sTH6fkSutkrzJM0LgG/jQVpRi4KF3rCsuBQrpGEpx4
UMUZ2jJEqq7PkmY9DyKdQNugxHxSTRJLXDqrp3NnjOhfcg04C1KV/G0hB8PwIa1/
9+zJJDQfFZDc9ie1wlMbi+98u/0xiP1mMv1FA5b4t5ICZz4qmWVn+RI+n3Wtfmof
9I0/Zi5llFN2o/+5xdz4zSV9JEp+LYsOq1M7U1VQAw2yPBUUNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNGnte5f5PCTanADIuq6JcT0P+91MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNThjZDg2ODItNzMzNy0z
OGYwLTg5NTMtMTlhZGEwOGU3NWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzOyAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEqSPdyNw4jAME6xWPQtlEyCYQVEnJNJ8ppy4ddMi3SocQzDQumDKbfc
RUp5brAL4Tm7DHvy3NeEt4iYAEtOBOL45McFlHeZVu2boynUaA5Sy9HPtrCto4hT
7C1CDO3Iay3Y1IwmzI1i1BYIMY1IUiG2yHHLzQ22x+65TVL+7e6W/eddAUCwAoHf
hIyAOV3rF8G7NfzhFypLlqxJXbDojNmaFga3HI1jr1mM11+cXIf6NhSGlSXy/Fl/
MhgkEHzyrOWZ/SfHUX3LwUF4tSxLV/3fk2krTaQNlwI2G+5COV7HF1HdIhhYMe6j
zI8d4jjTGAugribWvMvWOehLFTb9+/Y=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:27 2025 by rpki-client