Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5b6cd1d9-af2b-3793-b11e-6567adaccf91.roa
File:                     5b6cd1d9-af2b-3793-b11e-6567adaccf91.roa (raw, json)
Hash identifier:          k4XHvbDl3TA13cOz7XpkD7XpbO5HDkO/5GGEMBnSxZo=
Subject key identifier:   AA:BF:86:2E:83:9A:6B:15:C3:EF:F1:9C:86:AF:33:55:60:07:FF:B9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C95C495660838DBF654C1A5B8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5b6cd1d9-af2b-3793-b11e-6567adaccf91.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.214.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:95:c4:95:66:08:38:db:f6:54:c1:a5:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=d02e594c-8928-47db-a450-0180f6ee3344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:21:e2:ae:9e:89:92:0e:11:3d:b7:5a:4a:f1:
                    25:35:23:5a:11:9d:6d:94:dc:33:6e:95:0a:c6:04:
                    ed:4c:0d:55:57:26:33:50:5d:79:b4:f3:20:7a:45:
                    de:99:7b:03:20:36:7e:c3:c8:fb:67:fa:c4:ec:47:
                    8e:16:86:8a:6f:49:2f:3c:e8:cb:68:6f:53:21:c4:
                    ff:a9:86:dc:44:78:41:7a:7b:97:17:a4:4f:d7:d9:
                    a5:4f:55:38:96:ae:0c:9f:56:6b:a4:ae:51:ee:d8:
                    e1:c9:8d:ee:27:d0:a4:24:46:75:9c:9b:70:59:0b:
                    ae:93:bb:12:08:ee:17:7a:f5:ad:62:19:43:95:f7:
                    3a:d2:e7:f4:15:46:14:c0:1c:7f:82:a1:8a:58:97:
                    67:dd:0a:3d:59:4c:a3:52:7e:b8:25:28:4b:30:4d:
                    da:95:43:92:44:bc:ad:d6:7f:9f:16:b6:19:7f:24:
                    e5:58:fd:c3:b9:53:bd:78:9c:35:27:1c:39:dc:64:
                    85:1f:c9:37:23:c1:d8:e6:b7:95:eb:43:f7:44:01:
                    11:d2:a3:58:ea:f0:9c:d3:19:c4:96:54:6a:dd:9a:
                    49:47:9a:9c:cf:5b:1b:17:b8:0d:c8:7e:e1:69:c5:
                    d6:67:32:85:2c:3f:6f:92:7d:a2:10:2e:85:6b:18:
                    73:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BF:86:2E:83:9A:6B:15:C3:EF:F1:9C:86:AF:33:55:60:07:FF:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5b6cd1d9-af2b-3793-b11e-6567adaccf91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.214.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:d7:f7:b6:14:81:c5:5a:11:03:86:1f:6c:2c:04:7f:4c:6d:
         10:5b:f1:82:58:9c:0f:af:1d:cb:3c:98:3f:6e:da:90:18:fe:
         c7:b4:d9:91:ab:68:f3:a5:26:ce:48:db:0c:bf:f4:36:7d:df:
         57:7b:e0:5b:7a:13:87:5a:51:53:4e:5b:9a:b2:3f:27:8b:0d:
         03:35:5d:27:c2:80:bc:35:b7:0e:07:47:fc:bd:68:9b:fd:3e:
         bc:53:f4:25:51:47:8f:8e:53:8d:91:f0:d2:3e:8c:2e:a9:c9:
         bd:5b:d4:2a:b8:08:61:4b:91:54:5a:2b:d9:d2:3e:92:fe:9b:
         80:7f:36:0b:c4:97:d3:f1:cb:db:12:f8:03:b7:ff:37:d1:54:
         c0:40:a9:7b:d4:b1:56:b0:12:84:db:61:57:43:2b:d9:97:e5:
         72:78:03:d9:2d:5a:af:44:eb:97:19:27:65:a8:ee:8a:a2:37:
         f4:48:b9:ab:ac:2a:e9:cb:5e:51:d3:f6:16:5f:13:6c:4e:97:
         dd:39:a7:4f:3a:ab:ef:16:7f:da:f9:43:95:e7:4a:81:88:b0:
         9b:dd:51:1c:1f:c0:14:39:9d:84:31:91:50:42:a0:78:b4:96:
         b6:34:60:02:b4:08:96:d7:b5:03:5c:b9:e8:28:57:ae:7a:2f:
         15:48:2f:af
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDyVxJVmCDjb9lTBpbgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDExNDA1MDAwMFoXDTIyMDIxODA1MDAwMFowLzEtMCsGA1UEAxMk
ZDAyZTU5NGMtODkyOC00N2RiLWE0NTAtMDE4MGY2ZWUzMzQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CHirp6Jkg4RPbdaSvElNSNaEZ1tlNwzbpUK
xgTtTA1VVyYzUF15tPMgekXemXsDIDZ+w8j7Z/rE7EeOFoaKb0kvPOjLaG9TIcT/
qYbcRHhBenuXF6RP19mlT1U4lq4Mn1ZrpK5R7tjhyY3uJ9CkJEZ1nJtwWQuuk7sS
CO4XevWtYhlDlfc60uf0FUYUwBx/gqGKWJdn3Qo9WUyjUn64JShLME3alUOSRLyt
1n+fFrYZfyTlWP3DuVO9eJw1Jxw53GSFH8k3I8HY5reV60P3RAER0qNY6vCc0xnE
llRq3ZpJR5qcz1sbF7gNyH7hacXWZzKFLD9vkn2iEC6FaxhzhQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKq/hi6DmmsVw+/xnIavM1VgB/+5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNWI2Y2QxZDktYWYyYi0z
NzkzLWIxMWUtNjU2N2FkYWNjZjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAENYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgNf3thSBxVoRA4YfbCwEf0xtEFvxglicD68dyzyYP27akBj+x7TZkato
86UmzkjbDL/0Nn3fV3vgW3oTh1pRU05bmrI/J4sNAzVdJ8KAvDW3DgdH/L1om/0+
vFP0JVFHj45TjZHw0j6MLqnJvVvUKrgIYUuRVFor2dI+kv6bgH82C8SX0/HL2xL4
A7f/N9FUwECpe9SxVrAShNthV0Mr2ZflcngD2S1ar0TrlxknZajuiqI39Ei5q6wq
6cteUdP2Fl8TbE6X3TmnTzqr7xZ/2vlDledKgYiwm91RHB/AFDmdhDGRUEKgeLSW
tjRgArQIlte1A1y56ChXrnovFUgvrw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:21:01 2025 by rpki-client