Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5b88714e-1a22-31f7-9b0f-52baf3de0ef3.roa
File:                     5b88714e-1a22-31f7-9b0f-52baf3de0ef3.roa (raw, json)
Hash identifier:          GVd3B6XNrWSq9n5M1dbS1UOYgIjm65w8Y5drWUfxE5Q=
Subject key identifier:   30:8D:CD:79:4C:95:98:F0:65:4E:72:5E:4B:B6:4D:F1:BB:FD:6F:45
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EBC95009A5E2FBF9BD8DFA100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5b88714e-1a22-31f7-9b0f-52baf3de0ef3.roa
Signing time:             Fri 29 Jul 2022 12:00:00 +0000
ROA not before:           Fri 29 Jul 2022 12:00:00 +0000
ROA not after:            Sat 03 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        76.223.168.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:bc:95:00:9a:5e:2f:bf:9b:d8:df:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 29 12:00:00 2022 GMT
            Not After : Sep  3 04:00:00 2022 GMT
        Subject: CN=fc5fd33b-f438-4662-a6ac-20ed3831a67e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:21:97:f0:ba:45:72:1b:cc:00:6e:de:3a:b1:
                    b2:bd:db:ec:ae:db:6b:46:88:67:63:26:1b:5f:18:
                    08:e6:1c:10:76:10:50:87:c1:14:56:06:21:f2:ad:
                    b2:8d:9f:df:5e:bf:3a:f7:ed:4c:4d:30:6b:b2:db:
                    44:5a:11:f2:40:c0:cc:7a:24:a7:31:4c:03:cd:e2:
                    42:51:02:f5:f7:66:eb:27:30:ed:bc:27:e1:a2:35:
                    93:d2:37:a4:ba:38:f6:3d:87:91:21:ea:d9:88:33:
                    18:36:d4:3b:cc:28:fb:26:76:9f:51:8b:f1:52:ec:
                    a2:6e:e6:92:1f:41:2c:4f:5c:d7:4e:93:ee:52:5d:
                    e7:41:21:02:b3:b4:f2:8b:dc:4c:21:a1:2d:f0:a8:
                    e3:5c:e8:f9:59:7d:50:73:56:84:9d:f8:89:6a:2a:
                    60:70:83:8d:fc:93:ed:45:a1:17:f8:11:bf:47:35:
                    b5:10:92:6f:a0:c4:b3:87:c3:bd:9a:4a:54:14:5e:
                    5e:59:4c:84:76:12:d7:7a:ec:01:08:b1:cd:8d:58:
                    f5:21:5b:a5:ba:52:17:93:8e:d2:2f:a4:48:ed:0a:
                    3e:67:a6:88:91:80:28:d5:71:44:7c:ad:20:3d:22:
                    ab:f1:0c:c2:d5:06:e5:38:23:94:ee:a2:69:34:4c:
                    28:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8D:CD:79:4C:95:98:F0:65:4E:72:5E:4B:B6:4D:F1:BB:FD:6F:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5b88714e-1a22-31f7-9b0f-52baf3de0ef3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:58:fa:c8:c6:c7:ee:75:31:72:13:3b:a8:18:70:c2:b4:35:
         59:d4:ed:05:56:d1:6b:ef:af:f6:d9:3b:a8:21:7f:85:01:a7:
         34:30:33:09:8f:08:43:09:3e:ab:6e:54:7b:4a:d4:4a:5d:f9:
         78:33:c3:0a:84:dd:9a:1b:8e:18:43:25:1f:46:b6:aa:91:87:
         70:a4:a4:83:02:38:ff:5d:70:b1:90:a7:c7:af:51:07:0f:5d:
         7a:97:a6:6f:8e:85:8a:7b:29:97:c3:4f:66:70:d1:21:89:19:
         2d:f8:72:f6:4f:ba:e5:c4:a2:bd:75:b6:8a:2a:dc:81:91:92:
         33:46:71:3e:d7:a1:48:33:6d:f5:04:ee:95:e0:5d:43:47:88:
         b1:c5:19:9e:96:b0:be:4c:2e:6c:69:af:27:79:63:79:cb:b1:
         98:50:f9:c1:dd:ca:8b:3f:d6:f8:9d:a4:f7:69:a3:97:3d:34:
         3e:a4:70:a2:8d:aa:46:2c:fc:30:24:4c:b5:5f:d3:c7:d7:11:
         bc:ee:c2:96:62:af:0c:4a:50:4d:08:82:e4:f9:b8:6a:36:4e:
         1d:e6:83:2d:68:a6:49:ff:8b:0f:89:bd:b1:e7:d8:cd:4e:72:
         d9:3c:e1:ef:1a:bc:c0:c0:ed:db:33:b9:c1:9c:6a:30:cf:dc:
         77:89:31:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD68lQCaXi+/m9jfoQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcyOTEyMDAwMFoXDTIyMDkwMzA0MDAwMFowLzEtMCsGA1UEAxMk
ZmM1ZmQzM2ItZjQzOC00NjYyLWE2YWMtMjBlZDM4MzFhNjdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiGX8LpFchvMAG7eOrGyvdvsrttrRohnYyYb
XxgI5hwQdhBQh8EUVgYh8q2yjZ/fXr869+1MTTBrsttEWhHyQMDMeiSnMUwDzeJC
UQL192brJzDtvCfhojWT0jekujj2PYeRIerZiDMYNtQ7zCj7JnafUYvxUuyibuaS
H0EsT1zXTpPuUl3nQSECs7Tyi9xMIaEt8KjjXOj5WX1Qc1aEnfiJaipgcION/JPt
RaEX+BG/RzW1EJJvoMSzh8O9mkpUFF5eWUyEdhLXeuwBCLHNjVj1IVululIXk47S
L6RI7Qo+Z6aIkYAo1XFEfK0gPSKr8QzC1QblOCOU7qJpNEwoVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDCNzXlMlZjwZU5yXku2TfG7/W9FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNWI4ODcxNGUtMWEyMi0z
MWY3LTliMGYtNTJiYWYzZGUwZWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTN+oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKBY+sjGx+51MXITO6gYcMK0NVnU7QVW0Wvvr/bZO6ghf4UBpzQwMwmP
CEMJPqtuVHtK1Epd+XgzwwqE3ZobjhhDJR9GtqqRh3CkpIMCOP9dcLGQp8evUQcP
XXqXpm+OhYp7KZfDT2Zw0SGJGS34cvZPuuXEor11tooq3IGRkjNGcT7XoUgzbfUE
7pXgXUNHiLHFGZ6WsL5MLmxpryd5Y3nLsZhQ+cHdyos/1vidpPdpo5c9ND6kcKKN
qkYs/DAkTLVf08fXEbzuwpZirwxKUE0IguT5uGo2Th3mgy1opkn/iw+JvbHn2M1O
ctk84e8avMDA7dszucGcajDP3HeJMSg=
-----END CERTIFICATE-----
Generated at Thu Jul 10 04:36:08 2025 by rpki-client