Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/61db4d0f-a471-3c13-83fb-1adc15b1108b.roa
File:                     61db4d0f-a471-3c13-83fb-1adc15b1108b.roa (raw, json)
Hash identifier:          GkVyVa8cL7yCy4hH+UrVHhzjJfvqi+x2hjnhwejPC/w=
Subject key identifier:   10:70:60:43:48:5E:69:FD:EC:6F:3B:EC:93:CE:3F:AB:47:95:F4:3A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840351E38837308892ABED47900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/61db4d0f-a471-3c13-83fb-1adc15b1108b.roa
Signing time:             Sun 11 Dec 2022 12:00:00 +0000
ROA not before:           Sun 11 Dec 2022 12:00:00 +0000
ROA not after:            Mon 16 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        16.78.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:35:1e:38:83:73:08:89:2a:be:d4:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 11 12:00:00 2022 GMT
            Not After : Jan 16 05:00:00 2023 GMT
        Subject: CN=ca497633-9e88-4467-88d3-b4765f2ffae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6b:67:9f:18:d1:c5:de:b9:82:44:9c:ee:67:
                    59:71:c1:f0:a4:e6:4e:1b:b6:a8:0d:43:36:6b:e0:
                    cd:b7:6c:0e:a6:49:ee:d6:74:33:6c:f5:4e:04:68:
                    ad:d5:17:95:34:68:df:7c:b6:53:10:a6:0e:9e:1b:
                    92:e8:11:a9:e0:19:da:8e:73:2a:9d:ac:84:87:d7:
                    fd:e3:9c:fd:fe:8e:95:ef:b3:c3:c1:d0:8d:ef:e6:
                    9c:fe:8e:ff:2c:a0:ac:b3:ab:5f:f9:4d:88:19:50:
                    d1:a4:8f:ca:69:8b:db:d6:4b:04:f4:57:27:67:ea:
                    89:46:2f:06:17:72:b4:74:62:7b:a7:04:5e:26:54:
                    c9:9b:67:27:b5:9e:19:40:08:88:51:22:96:ac:38:
                    c5:34:fe:d4:a9:7d:8d:48:15:af:cb:66:ef:84:ea:
                    44:c1:60:d6:20:2a:cf:2a:7c:90:24:81:4f:08:36:
                    d6:ed:5f:47:25:03:98:5b:53:af:e0:10:e6:53:d4:
                    03:16:ae:a2:46:7e:31:fc:01:77:0d:9b:32:5d:08:
                    2f:63:c0:b2:16:1f:99:f7:5d:79:ee:13:55:b3:74:
                    d2:82:b4:c6:c7:63:65:76:b1:c6:ba:17:be:af:80:
                    45:5c:21:3e:9f:7e:ca:6c:18:24:d3:23:d7:2b:20:
                    27:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:70:60:43:48:5E:69:FD:EC:6F:3B:EC:93:CE:3F:AB:47:95:F4:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/61db4d0f-a471-3c13-83fb-1adc15b1108b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.78.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:0f:8b:af:a1:60:7b:97:bf:77:37:a9:55:c8:8e:16:90:56:
         e3:d7:7e:05:4c:62:e4:27:4b:f9:ec:6b:fe:41:fc:d6:a7:b5:
         d6:18:cb:57:f1:ca:b8:83:e2:ac:e3:a9:4b:b0:37:97:a2:b8:
         74:42:66:b0:d7:e7:08:00:7b:31:7e:c2:df:41:7b:60:18:56:
         4a:84:bc:8a:18:e0:0b:02:54:12:ca:bf:07:bf:7b:cc:d9:a5:
         c3:d1:8f:5c:43:06:3f:70:36:2b:51:3c:f0:85:33:e1:c0:7c:
         73:6c:5f:e6:e1:e0:54:0d:f7:ff:fd:a8:fa:b2:f5:fa:98:95:
         3a:da:fa:b6:8a:cc:41:ff:94:76:70:01:e8:24:13:41:13:b5:
         f2:96:07:6c:0b:a4:a6:2a:1d:19:42:65:c3:32:58:f6:0e:12:
         04:89:48:95:0e:66:cc:25:ee:3e:9e:fc:d6:92:74:59:25:bb:
         94:ca:bd:e4:fc:84:0b:d5:3a:50:39:0b:4f:c1:6a:d9:af:28:
         9d:41:14:7c:90:ff:90:75:5b:f3:da:69:32:1d:16:4c:d6:31:
         4b:19:b2:ee:29:3f:b2:63:7c:21:db:30:19:09:ce:39:28:2d:
         29:13:17:4d:66:7d:36:05:a5:5b:7b:87:2e:50:d6:db:00:30:
         dc:a2:7c:ee
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEA1HjiDcwiJKr7UeQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxMTEyMDAwMFoXDTIzMDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
Y2E0OTc2MzMtOWU4OC00NDY3LTg4ZDMtYjQ3NjVmMmZmYWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmtnnxjRxd65gkSc7mdZccHwpOZOG7aoDUM2
a+DNt2wOpknu1nQzbPVOBGit1ReVNGjffLZTEKYOnhuS6BGp4BnajnMqnayEh9f9
45z9/o6V77PDwdCN7+ac/o7/LKCss6tf+U2IGVDRpI/KaYvb1ksE9FcnZ+qJRi8G
F3K0dGJ7pwReJlTJm2cntZ4ZQAiIUSKWrDjFNP7UqX2NSBWvy2bvhOpEwWDWICrP
KnyQJIFPCDbW7V9HJQOYW1Ov4BDmU9QDFq6iRn4x/AF3DZsyXQgvY8CyFh+Z9115
7hNVs3TSgrTGx2NldrHGuhe+r4BFXCE+n37KbBgk0yPXKyAnAQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBBwYENIXmn97G877JPOP6tHlfQ6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNjFkYjRkMGYtYTQ3MS0z
YzEzLTgzZmItMWFkYzE1YjExMDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEE4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAOA+Lr6Fge5e/dzepVciOFpBW49d+BUxi5CdL+exr/kH81qe11hjLV/HK
uIPirOOpS7A3l6K4dEJmsNfnCAB7MX7C30F7YBhWSoS8ihjgCwJUEsq/B797zNml
w9GPXEMGP3A2K1E88IUz4cB8c2xf5uHgVA33//2o+rL1+piVOtr6torMQf+UdnAB
6CQTQRO18pYHbAukpiodGUJlwzJY9g4SBIlIlQ5mzCXuPp781pJ0WSW7lMq95PyE
C9U6UDkLT8Fq2a8onUEUfJD/kHVb89ppMh0WTNYxSxmy7ik/smN8IdswGQnOOSgt
KRMXTWZ9NgWlW3uHLlDW2wAw3KJ87g==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:17 2025 by rpki-client