Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5f291e43-d402-39cb-b21d-381a8de785ab.roa
File:                     5f291e43-d402-39cb-b21d-381a8de785ab.roa (raw, json)
Hash identifier:          HQSIHe3j406NZfb66URH2rGgTacCJ/H21ue1wJ5lwLA=
Subject key identifier:   DF:5B:CB:B0:34:2F:D3:53:12:7C:83:D3:A7:7C:A6:B6:45:17:95:5E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CBE21F8E364111EA528F26F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5f291e43-d402-39cb-b21d-381a8de785ab.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        216.39.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:be:21:f8:e3:64:11:1e:a5:28:f2:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=cd2e712a-e3b3-4e1f-b72f-aea1b18e4c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7e:5f:d8:45:5f:39:c7:43:d8:ee:be:86:fd:
                    aa:dc:d8:84:b5:f3:7f:68:da:31:61:39:5f:a8:a8:
                    d0:70:4b:85:e2:a7:3f:f2:d4:2e:19:24:c5:9d:4d:
                    bc:86:7b:de:05:61:f9:ff:f3:b7:eb:0f:6b:f3:2b:
                    34:f3:3a:aa:77:05:b8:6d:9b:81:04:14:13:49:e2:
                    b0:7f:df:2e:b6:49:ec:b7:74:89:39:a0:cc:49:b8:
                    d1:70:9f:cc:dd:88:03:1c:d0:f1:c8:1c:61:cc:ad:
                    40:e7:99:73:5c:74:50:0d:3e:79:2c:63:03:b9:1d:
                    c5:85:99:39:67:9d:7a:48:86:7b:27:6f:5d:b6:5b:
                    3c:b3:85:86:9d:e4:2d:5b:83:a1:94:cd:aa:12:bb:
                    74:39:9a:b2:c7:c9:11:a0:c0:13:5b:61:d4:18:76:
                    18:50:02:f6:75:da:7d:b9:df:64:97:80:88:fe:28:
                    6a:5d:85:65:48:b3:36:fe:cd:56:3b:98:2a:f1:d3:
                    ab:43:83:b1:66:98:ad:f7:9b:49:98:94:a1:db:62:
                    f8:d1:36:67:02:89:9e:36:f3:20:ae:75:6a:c4:07:
                    32:ac:81:ab:15:44:4d:69:3d:99:41:7b:9b:b7:ff:
                    69:c8:88:6a:d3:15:c6:6d:fc:61:85:28:62:e0:c1:
                    48:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5B:CB:B0:34:2F:D3:53:12:7C:83:D3:A7:7C:A6:B6:45:17:95:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5f291e43-d402-39cb-b21d-381a8de785ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.39.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:4e:71:9a:c0:58:0c:e7:15:6b:ad:84:78:3e:c5:3e:c8:e1:
         f1:28:fb:aa:49:a3:63:5e:3d:c7:d3:04:56:6d:ee:17:66:3d:
         bd:ce:70:30:3d:60:67:de:6f:dc:18:a1:33:6a:0d:76:4d:3c:
         95:c7:98:41:94:e6:74:4a:a3:76:92:1d:1e:36:c4:eb:94:bc:
         5f:8e:3a:c9:a1:9d:eb:97:14:72:40:f3:11:6f:26:24:8c:bf:
         9d:af:19:a3:2f:ce:85:6b:69:7f:6a:2b:74:e5:61:b6:87:9b:
         b4:58:67:f7:4b:f9:83:b2:9d:42:cb:df:30:a6:d3:38:f7:38:
         d7:1c:8f:30:8c:76:9f:41:dd:99:62:7a:36:da:94:33:6f:f1:
         52:82:76:06:91:99:24:f6:91:eb:b4:27:4e:a3:ae:48:1a:e2:
         b1:72:fc:48:c2:1c:39:74:a4:e2:1c:d0:37:87:b8:01:13:57:
         c5:b2:8a:df:d0:e0:3f:75:07:04:18:2e:09:39:11:69:98:d6:
         5d:24:4b:0f:39:79:ef:83:f9:e7:1d:08:08:5e:40:33:b6:2b:
         30:9a:66:6a:b7:c5:3f:5b:cf:68:f6:bb:64:dc:0f:a1:36:9e:
         c4:b3:a0:c9:79:f4:80:a2:a5:b5:90:2f:4d:8f:9a:86:59:96:
         c5:6f:95:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDy+IfjjZBEepSjyb4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDEyODA1MDAwMFoXDTIyMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
Y2QyZTcxMmEtZTNiMy00ZTFmLWI3MmYtYWVhMWIxOGU0YzBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH5f2EVfOcdD2O6+hv2q3NiEtfN/aNoxYTlf
qKjQcEuF4qc/8tQuGSTFnU28hnveBWH5//O36w9r8ys08zqqdwW4bZuBBBQTSeKw
f98utknst3SJOaDMSbjRcJ/M3YgDHNDxyBxhzK1A55lzXHRQDT55LGMDuR3FhZk5
Z516SIZ7J29dtls8s4WGneQtW4OhlM2qErt0OZqyx8kRoMATW2HUGHYYUAL2ddp9
ud9kl4CI/ihqXYVlSLM2/s1WO5gq8dOrQ4OxZpit95tJmJSh22L40TZnAomeNvMg
rnVqxAcyrIGrFURNaT2ZQXubt/9pyIhq0xXGbfxhhShi4MFIEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN9by7A0L9NTEnyD06d8prZFF5VeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNWYyOTFlNDMtZDQwMi0z
OWNiLWIyMWQtMzgxYThkZTc4NWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2CeAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADROcZrAWAznFWuthHg+xT7I4fEo+6pJo2NePcfTBFZt7hdmPb3OcDA9
YGfeb9wYoTNqDXZNPJXHmEGU5nRKo3aSHR42xOuUvF+OOsmhneuXFHJA8xFvJiSM
v52vGaMvzoVraX9qK3TlYbaHm7RYZ/dL+YOynULL3zCm0zj3ONccjzCMdp9B3Zli
ejbalDNv8VKCdgaRmST2keu0J06jrkga4rFy/EjCHDl0pOIc0DeHuAETV8Wyit/Q
4D91BwQYLgk5EWmY1l0kSw85ee+D+ecdCAheQDO2KzCaZmq3xT9bz2j2u2TcD6E2
nsSzoMl59ICipbWQL02PmoZZlsVvlSY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:17:22 2025 by rpki-client