Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/60174721-d72d-3824-87ee-122aa68bf422.roa
File:                     60174721-d72d-3824-87ee-122aa68bf422.roa (raw, json)
Hash identifier:          6GOAq1Va4qtSnjqMyxJjllrE/mB910fYt3N/IJL4LO4=
Subject key identifier:   C6:28:75:B1:61:D6:54:98:8E:B8:93:D7:1F:60:B4:98:DE:47:8E:FC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584044A576E50C771E2F9A38C000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/60174721-d72d-3824-87ee-122aa68bf422.roa
Signing time:             Fri 16 Dec 2022 12:00:00 +0000
ROA not before:           Fri 16 Dec 2022 12:00:00 +0000
ROA not after:            Sat 21 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        172.103.40.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:44:a5:76:e5:0c:77:1e:2f:9a:38:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 16 12:00:00 2022 GMT
            Not After : Jan 21 05:00:00 2023 GMT
        Subject: CN=282b0d12-5823-486b-9fd0-78eb15a193dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:af:d9:43:0e:67:26:4b:e0:0d:32:16:cf:a5:
                    3b:0f:58:2d:3a:c1:3e:07:9c:d8:a3:79:7e:e1:8f:
                    c3:02:83:20:71:1c:2f:46:e4:a6:64:e1:7e:15:22:
                    72:f6:9d:ce:1b:f7:04:27:8e:54:37:86:38:dd:cc:
                    72:8c:79:b7:ef:81:53:6c:9e:6e:85:44:35:3b:c0:
                    c7:a9:28:75:72:88:ca:6b:7e:28:71:13:20:fc:24:
                    c1:5d:e6:5f:f8:89:2f:7c:f8:66:13:e7:56:a8:92:
                    cc:6b:22:04:da:e1:50:b7:4c:8d:90:67:5c:aa:55:
                    83:07:45:5c:99:94:46:d6:f0:65:82:ea:28:19:a7:
                    f7:45:c5:04:73:58:48:df:7e:aa:9e:54:ab:26:1d:
                    cd:29:b2:8a:0f:97:b1:cb:07:a2:73:d8:e2:3d:c4:
                    d2:32:63:ec:fe:3a:9a:2b:87:25:6e:ba:0c:94:96:
                    a4:3c:d6:da:14:52:8a:6b:0b:8c:a2:d6:ff:5f:b8:
                    df:92:b9:31:65:47:35:63:d0:6e:50:40:c2:be:8e:
                    d8:d2:fd:7a:52:7e:b0:1c:01:01:0b:8d:0d:89:c8:
                    6f:6b:f3:6f:00:85:3b:ae:ae:25:17:0a:7c:2d:d4:
                    ac:f9:c9:a5:1d:5b:51:15:d2:98:c8:ea:3a:7c:05:
                    75:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:28:75:B1:61:D6:54:98:8E:B8:93:D7:1F:60:B4:98:DE:47:8E:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/60174721-d72d-3824-87ee-122aa68bf422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.103.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:9c:48:be:6a:92:93:99:d1:86:0b:f8:8f:ad:ec:a4:a9:6c:
         e8:06:f4:34:8f:d9:72:9c:b1:e5:dc:c2:09:ad:6e:0b:67:1a:
         65:5a:33:6b:4d:2c:10:0f:9e:e9:bf:17:a1:c2:09:e4:9c:44:
         9f:db:3e:46:11:91:51:1d:ad:0d:ae:de:fe:39:0e:7e:85:47:
         a3:d2:f0:22:c2:b6:31:76:23:65:fc:24:92:c6:ca:b3:db:12:
         93:9c:1f:72:3c:ef:64:1b:bb:17:28:97:67:6b:fc:69:4f:69:
         cf:d1:6b:fd:fe:af:5f:15:85:75:20:ee:0e:a6:6e:2f:9f:ca:
         97:2c:7b:50:ce:1d:1e:10:da:95:4f:a8:f1:cf:5d:72:5a:82:
         ff:9d:d9:a0:ec:64:14:8f:8a:f4:3a:6d:96:1f:5f:e9:47:02:
         d8:ec:8e:97:04:81:38:e0:d5:3c:24:5a:7a:10:ee:54:18:17:
         02:b6:60:cc:6b:08:c0:2f:2a:15:51:46:64:b6:3f:1c:5c:bb:
         c9:e6:55:3b:85:ec:53:55:a6:b8:0b:b2:bf:f8:06:02:86:2d:
         e6:33:7e:59:72:1a:95:ab:88:e8:77:02:ec:6d:ce:71:f2:07:
         68:a0:39:a6:fa:fe:17:22:d2:75:88:a3:a8:43:ea:be:df:ab:
         8a:b2:ba:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBEpXblDHceL5o4wAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxNjEyMDAwMFoXDTIzMDEyMTA1MDAwMFowLzEtMCsGA1UEAxMk
MjgyYjBkMTItNTgyMy00ODZiLTlmZDAtNzhlYjE1YTE5M2RjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6/ZQw5nJkvgDTIWz6U7D1gtOsE+B5zYo3l+
4Y/DAoMgcRwvRuSmZOF+FSJy9p3OG/cEJ45UN4Y43cxyjHm374FTbJ5uhUQ1O8DH
qSh1cojKa34ocRMg/CTBXeZf+IkvfPhmE+dWqJLMayIE2uFQt0yNkGdcqlWDB0Vc
mZRG1vBlguooGaf3RcUEc1hI336qnlSrJh3NKbKKD5exyweic9jiPcTSMmPs/jqa
K4clbroMlJakPNbaFFKKawuMotb/X7jfkrkxZUc1Y9BuUEDCvo7Y0v16Un6wHAEB
C40Nichva/NvAIU7rq4lFwp8LdSs+cmlHVtRFdKYyOo6fAV16QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMYodbFh1lSYjriT1x9gtJjeR478MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNjAxNzQ3MjEtZDcyZC0z
ODI0LTg3ZWUtMTIyYWE2OGJmNDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrGcoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABGcSL5qkpOZ0YYL+I+t7KSpbOgG9DSP2XKcseXcwgmtbgtnGmVaM2tN
LBAPnum/F6HCCeScRJ/bPkYRkVEdrQ2u3v45Dn6FR6PS8CLCtjF2I2X8JJLGyrPb
EpOcH3I872Qbuxcol2dr/GlPac/Ra/3+r18VhXUg7g6mbi+fypcse1DOHR4Q2pVP
qPHPXXJagv+d2aDsZBSPivQ6bZYfX+lHAtjsjpcEgTjg1TwkWnoQ7lQYFwK2YMxr
CMAvKhVRRmS2Pxxcu8nmVTuF7FNVprgLsr/4BgKGLeYzfllyGpWriOh3AuxtznHy
B2igOab6/hci0nWIo6hD6r7fq4qyum4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:28 2025 by rpki-client