Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5972c3f4-9f58-3645-8ff8-99777144d2ff.roa
File:                     5972c3f4-9f58-3645-8ff8-99777144d2ff.roa (raw, json)
Hash identifier:          TPQcFwQj+r6lWCoUR+y3YG6UzItKEa3wH3Nf29/6AlI=
Subject key identifier:   C2:C3:5E:B9:F2:F1:07:C4:80:46:C6:60:1C:0F:BD:B4:36:53:7D:1B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D2ECA30473D9703DF600A8500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5972c3f4-9f58-3645-8ff8-99777144d2ff.roa
Signing time:             Wed 09 Mar 2022 05:00:00 +0000
ROA not before:           Wed 09 Mar 2022 05:00:00 +0000
ROA not after:            Wed 13 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.156.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:2e:ca:30:47:3d:97:03:df:60:0a:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar  9 05:00:00 2022 GMT
            Not After : Apr 13 04:00:00 2022 GMT
        Subject: CN=d0df8a68-db90-4b19-93c6-48b55e420588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9a:86:77:d5:64:c3:c7:91:d3:fd:9a:b4:eb:
                    a4:dc:5d:8d:56:80:9c:97:9f:70:b3:79:23:a5:7c:
                    37:60:d6:42:77:2c:c0:1d:e4:1d:18:30:ab:ae:a0:
                    d4:2a:ce:02:70:67:82:33:c2:64:30:d6:ab:0a:04:
                    42:c9:94:1e:21:f4:14:77:8e:1d:89:85:b3:46:9e:
                    c7:71:ee:b2:86:dc:81:1c:b1:f1:30:3a:c8:12:6e:
                    23:21:ed:2c:91:f0:0f:52:0f:f4:29:cf:29:50:de:
                    61:75:4c:4e:68:ed:3a:36:9e:88:b4:5a:b3:25:ad:
                    79:ea:a4:d2:68:c6:b5:09:60:03:92:ea:73:7f:5c:
                    ee:02:90:9c:8d:ed:bb:1e:56:3a:0f:f3:f7:cb:eb:
                    84:7d:63:7c:8d:12:02:8b:da:db:ad:71:26:56:6e:
                    f0:8e:15:85:ce:0f:16:21:6a:10:d1:5f:6c:4d:dd:
                    7d:37:ed:52:f8:bd:ec:29:52:62:28:46:a5:27:c2:
                    dc:56:01:08:0a:af:d9:d0:cb:75:b9:33:f7:08:f8:
                    de:e9:94:09:cd:4c:2b:46:79:dc:a3:8b:8a:1e:6f:
                    f6:98:62:cd:e7:3d:2f:e2:e6:42:cb:db:28:d5:dd:
                    b3:08:21:6a:e0:bb:8c:4a:12:6c:e5:09:e7:e8:45:
                    02:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C3:5E:B9:F2:F1:07:C4:80:46:C6:60:1C:0F:BD:B4:36:53:7D:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5972c3f4-9f58-3645-8ff8-99777144d2ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.156.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:19:31:d8:90:ae:7f:0b:b9:14:b3:e1:16:ee:7d:d6:15:20:
         16:af:3b:f8:fb:32:cd:7c:f1:73:aa:f7:1d:b3:e6:40:d7:25:
         a6:e3:d6:1c:3f:64:9f:3b:49:f9:a9:89:d0:2c:a8:31:8a:dc:
         7f:90:67:17:5c:e4:8d:1c:dd:71:f2:38:8b:2b:c2:1f:3e:dd:
         01:df:d0:a7:d4:ce:48:e3:7a:f0:e5:38:a3:42:17:23:9d:c7:
         2d:26:a4:96:b5:e8:b7:ec:24:c4:4c:72:f3:62:19:f8:6a:47:
         a7:7c:52:71:86:ee:bc:53:eb:7c:01:f8:54:49:8d:18:d9:3a:
         0a:06:ee:7c:b9:4d:17:69:03:2d:7b:3f:e2:0d:f1:b3:02:09:
         e8:89:f4:8f:1a:17:db:c9:6c:3f:48:c8:84:ba:10:70:8b:af:
         b4:a3:e7:85:63:2e:2d:e3:cb:b5:8f:08:4d:2e:e5:20:e4:de:
         3f:2e:00:ab:67:44:41:df:04:82:6a:11:5d:8e:49:79:10:89:
         f5:7c:1d:33:de:97:df:64:41:fb:f1:b9:6f:72:9c:2d:a7:49:
         4c:a2:f5:29:9b:3f:8d:46:87:47:33:30:e6:5c:38:de:e4:71:
         d3:ec:3b:c9:b7:e0:40:1a:d2:7e:8f:5c:a2:c2:26:65:38:bf:
         88:bc:21:3f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0uyjBHPZcD32AKhQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMwOTA1MDAwMFoXDTIyMDQxMzA0MDAwMFowLzEtMCsGA1UEAxMk
ZDBkZjhhNjgtZGI5MC00YjE5LTkzYzYtNDhiNTVlNDIwNTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpqGd9Vkw8eR0/2atOuk3F2NVoCcl59ws3kj
pXw3YNZCdyzAHeQdGDCrrqDUKs4CcGeCM8JkMNarCgRCyZQeIfQUd44diYWzRp7H
ce6yhtyBHLHxMDrIEm4jIe0skfAPUg/0Kc8pUN5hdUxOaO06Np6ItFqzJa156qTS
aMa1CWADkupzf1zuApCcje27HlY6D/P3y+uEfWN8jRICi9rbrXEmVm7wjhWFzg8W
IWoQ0V9sTd19N+1S+L3sKVJiKEalJ8LcVgEICq/Z0Mt1uTP3CPje6ZQJzUwrRnnc
o4uKHm/2mGLN5z0v4uZCy9so1d2zCCFq4LuMShJs5Qnn6EUCpwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMLDXrny8QfEgEbGYBwPvbQ2U30bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNTk3MmMzZjQtOWY1OC0z
NjQ1LThmZjgtOTk3NzcxNDRkMmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEJwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAlRkx2JCufwu5FLPhFu591hUgFq87+PsyzXzxc6r3HbPmQNclpuPWHD9k
nztJ+amJ0CyoMYrcf5BnF1zkjRzdcfI4iyvCHz7dAd/Qp9TOSON68OU4o0IXI53H
LSaklrXot+wkxExy82IZ+GpHp3xScYbuvFPrfAH4VEmNGNk6CgbufLlNF2kDLXs/
4g3xswIJ6In0jxoX28lsP0jIhLoQcIuvtKPnhWMuLePLtY8ITS7lIOTePy4Aq2dE
Qd8EgmoRXY5JeRCJ9XwdM96X32RB+/G5b3KcLadJTKL1KZs/jUaHRzMw5lw43uRx
0+w7ybfgQBrSfo9cosImZTi/iLwhPw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:38 2025 by rpki-client