Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/61e7f289-de0e-379a-a2e1-4ba6b2e459b8.roa
File:                     61e7f289-de0e-379a-a2e1-4ba6b2e459b8.roa (raw, json)
Hash identifier:          e+MMUrGvw0o+8zHOyi125xvvjVEL5Ci9xcXBtf+UqkY=
Subject key identifier:   38:DE:0D:F1:8F:6E:3F:B4:F9:6A:6D:BB:16:9E:44:52:25:C2:09:4C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CB6CD90876AFA06612D2AF7C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/61e7f289-de0e-379a-a2e1-4ba6b2e459b8.roa
Signing time:             Tue 25 Jan 2022 05:00:00 +0000
ROA not before:           Tue 25 Jan 2022 05:00:00 +0000
ROA not after:            Tue 01 Mar 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        167.241.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:b6:cd:90:87:6a:fa:06:61:2d:2a:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 25 05:00:00 2022 GMT
            Not After : Mar  1 05:00:00 2022 GMT
        Subject: CN=5e5968a6-6481-4293-b03e-2ddd619bf086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bd:f3:9d:18:62:41:3c:a5:5b:3e:c3:63:be:
                    17:64:71:2b:25:e5:c6:b3:99:6b:cc:6f:cf:b3:53:
                    87:d5:9b:84:f8:31:38:7f:2b:52:7b:34:69:40:7c:
                    26:65:65:2c:7e:fc:2f:f0:03:d1:41:31:55:66:0f:
                    50:de:78:b8:5b:0f:fa:4d:e1:8e:fe:06:24:d7:db:
                    83:7e:aa:be:d1:8e:5e:fe:37:f7:e0:19:ef:0d:89:
                    8c:18:e9:11:7c:90:d5:d6:df:f9:19:e6:60:3a:55:
                    98:19:73:d7:23:23:ca:46:f8:ff:59:71:b7:2a:10:
                    d8:42:44:93:90:a4:e3:cd:70:48:59:82:85:3a:5a:
                    88:00:f6:f3:0e:91:bb:94:97:5f:41:ab:56:e1:f1:
                    50:8d:e0:ec:38:75:ac:e4:91:bb:a2:87:39:22:54:
                    87:35:2d:af:8a:3a:62:cb:b9:47:a6:ee:4d:48:e9:
                    b4:88:f1:12:84:f3:15:35:3b:fb:88:d3:f4:90:82:
                    78:0a:8f:90:36:7f:7c:d1:2f:eb:ff:a3:5e:6a:e2:
                    93:97:bc:98:a7:42:8c:5c:f0:8a:42:05:22:25:59:
                    55:2e:65:54:da:20:3a:1a:6e:26:24:47:3e:0b:fc:
                    e4:ee:03:f4:13:59:53:76:9b:a7:d3:b6:9f:e2:06:
                    b5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DE:0D:F1:8F:6E:3F:B4:F9:6A:6D:BB:16:9E:44:52:25:C2:09:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/61e7f289-de0e-379a-a2e1-4ba6b2e459b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.241.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:8e:39:8d:a6:f7:20:3f:b1:24:4a:89:18:a8:f9:6e:0d:e0:
         25:bc:b9:1c:7e:83:82:7a:aa:0f:b5:4f:47:bb:8d:3e:13:98:
         02:92:14:12:4e:49:05:5a:71:9c:62:98:76:53:70:c5:59:50:
         9e:66:9b:67:99:05:ca:2a:b3:79:c7:ce:e3:c3:f0:c1:c5:8a:
         85:66:71:32:56:35:7b:ed:5a:74:f9:19:83:d9:96:95:21:f8:
         da:27:5a:e6:60:75:a7:6e:5d:b9:50:45:37:d6:c7:c0:44:8f:
         49:85:f0:72:bb:7c:10:4c:3f:f0:54:6f:a6:46:22:a9:5c:a2:
         cf:51:07:89:46:ee:d9:0c:a4:0d:bc:4f:65:e3:48:24:bb:3f:
         65:80:c4:64:3f:41:3d:e3:e0:54:75:6d:7c:16:e0:ee:55:ca:
         68:01:14:fb:0c:b2:ac:5f:31:98:11:26:b5:f5:2c:78:8f:f3:
         b4:97:9e:d6:c8:15:11:cb:11:c5:d0:35:8a:fa:5f:58:75:e2:
         dc:e6:7b:9b:d7:fe:f5:c1:4c:b3:cb:1e:ae:0b:20:d0:34:3d:
         1e:d5:1d:36:95:ff:3b:65:84:43:43:35:e9:37:e6:9b:98:f8:
         ae:f4:3f:cd:7a:c9:82:cb:9d:c3:c2:c5:87:8e:64:99:3c:c5:
         54:b5:c2:a7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDy2zZCHavoGYS0q98AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDEyNTA1MDAwMFoXDTIyMDMwMTA1MDAwMFowLzEtMCsGA1UEAxMk
NWU1OTY4YTYtNjQ4MS00MjkzLWIwM2UtMmRkZDYxOWJmMDg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb3znRhiQTylWz7DY74XZHErJeXGs5lrzG/P
s1OH1ZuE+DE4fytSezRpQHwmZWUsfvwv8APRQTFVZg9Q3ni4Ww/6TeGO/gYk19uD
fqq+0Y5e/jf34BnvDYmMGOkRfJDV1t/5GeZgOlWYGXPXIyPKRvj/WXG3KhDYQkST
kKTjzXBIWYKFOlqIAPbzDpG7lJdfQatW4fFQjeDsOHWs5JG7ooc5IlSHNS2vijpi
y7lHpu5NSOm0iPEShPMVNTv7iNP0kIJ4Co+QNn980S/r/6NeauKTl7yYp0KMXPCK
QgUiJVlVLmVU2iA6Gm4mJEc+C/zk7gP0E1lTdpun07af4ga1vwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDjeDfGPbj+0+WptuxaeRFIlwglMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNjFlN2YyODktZGUwZS0z
NzlhLWEyZTEtNGJhNmIyZTQ1OWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAp/EwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAd445jab3ID+xJEqJGKj5bg3gJby5HH6DgnqqD7VPR7uNPhOYApIUEk5J
BVpxnGKYdlNwxVlQnmabZ5kFyiqzecfO48PwwcWKhWZxMlY1e+1adPkZg9mWlSH4
2ida5mB1p25duVBFN9bHwESPSYXwcrt8EEw/8FRvpkYiqVyiz1EHiUbu2QykDbxP
ZeNIJLs/ZYDEZD9BPePgVHVtfBbg7lXKaAEU+wyyrF8xmBEmtfUseI/ztJee1sgV
EcsRxdA1ivpfWHXi3OZ7m9f+9cFMs8sergsg0DQ9HtUdNpX/O2WEQ0M16Tfmm5j4
rvQ/zXrJgsudw8LFh45kmTzFVLXCpw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:18 2025 by rpki-client