Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5e0d3d90-a607-375c-b436-7e0835d862ce.roa
File:                     5e0d3d90-a607-375c-b436-7e0835d862ce.roa (raw, json)
Hash identifier:          YSvgH9uz+cnP0HATRqnv5v+xDUr5t0SdQDlepwCak/I=
Subject key identifier:   53:2D:26:61:79:76:2A:83:1C:07:D7:E8:3A:F8:CE:64:35:41:3A:B0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FC810E79C3B1CB4892AC1F3C8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5e0d3d90-a607-375c-b436-7e0835d862ce.roa
Signing time:             Wed 02 Nov 2022 12:00:00 +0000
ROA not before:           Wed 02 Nov 2022 12:00:00 +0000
ROA not after:            Thu 08 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        16.75.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c8:10:e7:9c:3b:1c:b4:89:2a:c1:f3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  2 12:00:00 2022 GMT
            Not After : Dec  8 05:00:00 2022 GMT
        Subject: CN=7782372a-de31-40de-a2f3-356e096193ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:65:70:02:41:5d:b4:60:e4:82:12:61:62:60:
                    77:49:51:66:28:53:92:bd:0b:fd:11:46:97:bf:26:
                    3d:a3:f5:d8:08:20:93:0e:be:b4:15:04:d0:fd:12:
                    2f:ac:89:6d:df:4b:b5:57:15:39:85:9f:08:b3:d3:
                    78:ea:93:e8:29:c6:1f:45:21:e2:b8:2b:34:0c:1b:
                    f8:8f:20:41:cd:b8:e3:08:3a:4d:0c:57:44:fb:53:
                    d4:00:f5:41:37:20:00:06:a5:0f:fe:3b:b6:36:ae:
                    a5:99:f4:f4:b3:67:c3:97:6f:50:28:31:b9:06:85:
                    82:4f:eb:4d:ae:60:94:6c:5d:eb:5a:af:de:23:af:
                    8e:b5:c1:08:54:c3:12:49:b7:6e:8c:94:63:a4:48:
                    3a:2e:73:f4:70:78:73:74:28:98:bf:50:a7:9a:92:
                    18:cb:89:56:64:78:22:1c:94:f0:55:e5:0f:f7:cb:
                    6e:7b:33:57:19:aa:23:e6:84:95:7c:58:7c:64:7e:
                    b9:cc:60:7b:1d:29:be:9f:74:23:5a:df:57:16:43:
                    78:e9:98:8e:82:2d:5b:aa:50:86:40:d9:0b:1d:e6:
                    d5:c5:c9:a0:fe:dc:fd:a9:3c:f3:e3:66:50:80:74:
                    0c:04:1a:fe:34:80:af:f8:5e:19:d6:74:3d:dc:40:
                    ad:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2D:26:61:79:76:2A:83:1C:07:D7:E8:3A:F8:CE:64:35:41:3A:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5e0d3d90-a607-375c-b436-7e0835d862ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.75.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:f6:e6:79:e4:40:24:d9:6f:ce:19:24:25:0e:f2:2b:fb:49:
         54:33:ff:53:3c:7c:ce:e6:42:72:15:b4:a3:ba:92:f1:10:2a:
         9f:10:ee:31:e0:f3:6f:01:d7:c0:40:a8:94:d7:bc:e9:be:4f:
         6f:2b:87:e3:19:2e:21:77:c2:64:2a:0e:e3:ec:52:a6:d5:7e:
         5a:48:59:52:5a:9d:66:4a:d4:2f:5e:ef:9a:b9:ea:ac:ee:b7:
         c6:28:26:d1:26:b8:30:51:c5:7d:ba:c1:81:4e:48:3b:ce:d3:
         2e:91:e6:e9:72:db:7d:fd:ef:73:98:2d:df:bd:39:47:34:99:
         bf:12:96:68:bc:9c:08:36:fb:02:bf:e8:9e:a6:0e:4b:6e:3d:
         ea:7d:f5:43:ba:9b:46:9c:00:1f:49:60:77:19:52:78:4b:07:
         4d:88:40:7c:c5:e4:f8:45:ec:b8:a7:91:f4:21:f3:01:25:83:
         c3:ea:0e:da:75:5a:d7:3c:9f:9d:c9:02:a5:4d:c7:64:2c:23:
         5a:7a:ca:86:49:ad:0f:9d:3c:e5:08:68:62:65:75:97:ee:80:
         ed:09:12:a2:7f:53:6a:74:e4:6e:d3:c4:1d:3d:bb:34:14:8b:
         37:5a:47:73:ca:ff:29:e0:fe:92:cd:80:8f:ca:63:1b:98:c1:
         2a:75:ff:1c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/IEOecOxy0iSrB88gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEwMjEyMDAwMFoXDTIyMTIwODA1MDAwMFowLzEtMCsGA1UEAxMk
Nzc4MjM3MmEtZGUzMS00MGRlLWEyZjMtMzU2ZTA5NjE5M2FlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWVwAkFdtGDkghJhYmB3SVFmKFOSvQv9EUaX
vyY9o/XYCCCTDr60FQTQ/RIvrIlt30u1VxU5hZ8Is9N46pPoKcYfRSHiuCs0DBv4
jyBBzbjjCDpNDFdE+1PUAPVBNyAABqUP/ju2Nq6lmfT0s2fDl29QKDG5BoWCT+tN
rmCUbF3rWq/eI6+OtcEIVMMSSbdujJRjpEg6LnP0cHhzdCiYv1CnmpIYy4lWZHgi
HJTwVeUP98tuezNXGaoj5oSVfFh8ZH65zGB7HSm+n3QjWt9XFkN46ZiOgi1bqlCG
QNkLHebVxcmg/tz9qTzz42ZQgHQMBBr+NICv+F4Z1nQ93ECtbQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFMtJmF5diqDHAfX6Dr4zmQ1QTqwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNWUwZDNkOTAtYTYwNy0z
NzVjLWI0MzYtN2UwODM1ZDg2MmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEEswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAGPbmeeRAJNlvzhkkJQ7yK/tJVDP/Uzx8zuZCchW0o7qS8RAqnxDuMeDz
bwHXwEColNe86b5PbyuH4xkuIXfCZCoO4+xSptV+WkhZUlqdZkrUL17vmrnqrO63
xigm0Sa4MFHFfbrBgU5IO87TLpHm6XLbff3vc5gt3705RzSZvxKWaLycCDb7Ar/o
nqYOS2496n31Q7qbRpwAH0lgdxlSeEsHTYhAfMXk+EXsuKeR9CHzASWDw+oO2nVa
1zyfnckCpU3HZCwjWnrKhkmtD5085QhoYmV1l+6A7QkSon9TanTkbtPEHT27NBSL
N1pHc8r/KeD+ks2Aj8pjG5jBKnX/HA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:11 2025 by rpki-client