Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/62943455-4c04-3d9f-970b-ffda537e3365.roa
File:                     62943455-4c04-3d9f-970b-ffda537e3365.roa (raw, json)
Hash identifier:          9RGXFewCmnT6PRxSPB3UN/W1KS1Zom3m6SWpfyL7+Yk=
Subject key identifier:   4F:A2:33:9C:E7:45:F8:4B:13:65:37:26:9E:08:B8:2F:FC:0C:84:71
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E7D3E9F8DD615C8C087C5B780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/62943455-4c04-3d9f-970b-ffda537e3365.roa
Signing time:             Wed 06 Jul 2022 15:03:07 +0000
ROA not before:           Wed 06 Jul 2022 15:03:07 +0000
ROA not after:            Thu 11 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        157.152.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:7d:3e:9f:8d:d6:15:c8:c0:87:c5:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul  6 15:03:07 2022 GMT
            Not After : Aug 11 04:00:00 2022 GMT
        Subject: CN=a41a99f0-1e89-431c-a745-b2f83ce6e3a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3b:f8:e6:18:1c:80:b7:89:6b:b4:b2:95:1f:
                    29:39:d9:f8:11:c8:b1:b8:aa:5e:1c:92:49:70:1e:
                    8e:9a:4a:11:d3:c0:5b:3a:72:e7:82:b8:34:cb:43:
                    eb:4b:7e:1a:e1:16:57:bc:2e:66:31:ca:07:11:ee:
                    e3:24:02:e3:ad:f5:e6:31:bd:ba:d6:c7:f9:b4:fd:
                    ea:70:06:0b:07:84:85:64:b8:06:b8:31:2f:b3:b0:
                    1c:d4:a8:c0:66:fe:ff:38:b7:1a:8a:04:2c:fc:fd:
                    6f:60:54:9c:b0:67:cd:4a:dd:db:81:64:ad:87:30:
                    70:cb:67:7d:be:30:49:8a:fe:f2:d5:17:4e:be:f7:
                    93:55:31:82:38:bc:e8:16:97:12:d6:b4:b8:88:b5:
                    43:65:49:63:fd:7b:bd:bb:a3:10:a6:78:e1:e2:90:
                    f5:b8:63:4b:b5:b2:fb:65:a6:2e:fa:f4:b0:83:05:
                    e6:ea:78:69:99:10:c9:2b:43:6f:6f:a5:0e:e5:4e:
                    c6:33:e2:40:e8:b5:5c:8f:71:00:3c:2a:44:4e:be:
                    91:34:23:14:37:73:3c:a2:50:ca:4e:4f:51:39:a2:
                    6b:ae:f6:ee:89:53:02:62:e3:c1:96:b2:25:65:a7:
                    5f:5a:37:39:f1:96:e5:39:44:2a:c9:e3:11:dd:49:
                    0a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A2:33:9C:E7:45:F8:4B:13:65:37:26:9E:08:B8:2F:FC:0C:84:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/62943455-4c04-3d9f-970b-ffda537e3365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.152.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:42:33:36:8f:e0:93:98:c0:80:16:28:a3:be:ce:28:49:df:
         60:15:f2:2c:47:52:7b:10:b4:43:f8:a8:9c:e2:04:fe:08:90:
         9c:c0:cd:48:61:b8:59:41:74:77:58:5d:72:bf:4f:49:0e:90:
         f9:6e:df:fc:ae:fd:f1:80:09:40:22:5f:c1:36:1c:eb:c3:2a:
         1e:9b:b1:12:bf:3f:41:2e:ef:34:ef:d8:52:b1:65:a0:b3:bd:
         69:3c:32:f3:94:7a:14:ae:7a:31:b7:71:1c:99:90:e3:2e:78:
         7f:a1:58:94:c2:fb:52:f7:36:f2:62:64:55:2f:55:55:66:ad:
         7f:8e:6d:0c:b1:5b:f6:f5:70:c7:fa:ee:83:db:9e:09:c2:17:
         34:8c:a5:06:1f:5d:d8:40:35:c7:38:83:4b:57:89:eb:69:54:
         eb:da:80:c7:f6:95:a4:86:9b:cc:e3:22:d4:69:1a:60:35:9c:
         19:32:22:0b:b8:3a:1a:78:0e:46:e9:3e:02:38:08:c8:a0:01:
         83:e2:3b:80:1e:e3:7c:a4:9a:8a:e2:bf:7d:ff:b9:ef:32:10:
         83:85:0b:bd:bb:ee:05:7c:ab:74:1a:84:74:21:7d:fa:34:ae:
         8a:4c:5b:03:be:52:e2:84:85:60:63:95:c1:aa:33:2d:5a:b6:
         8a:53:7a:7d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD59Pp+N1hXIwIfFt4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcwNjE1MDMwN1oXDTIyMDgxMTA0MDAwMFowLzEtMCsGA1UEAxMk
YTQxYTk5ZjAtMWU4OS00MzFjLWE3NDUtYjJmODNjZTZlM2ExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzv45hgcgLeJa7SylR8pOdn4EcixuKpeHJJJ
cB6OmkoR08BbOnLngrg0y0PrS34a4RZXvC5mMcoHEe7jJALjrfXmMb261sf5tP3q
cAYLB4SFZLgGuDEvs7Ac1KjAZv7/OLcaigQs/P1vYFScsGfNSt3bgWSthzBwy2d9
vjBJiv7y1RdOvveTVTGCOLzoFpcS1rS4iLVDZUlj/Xu9u6MQpnjh4pD1uGNLtbL7
ZaYu+vSwgwXm6nhpmRDJK0Nvb6UO5U7GM+JA6LVcj3EAPCpETr6RNCMUN3M8olDK
Tk9ROaJrrvbuiVMCYuPBlrIlZadfWjc58ZblOUQqyeMR3UkKGQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFE+iM5znRfhLE2U3Jp4IuC/8DIRxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNjI5NDM0NTUtNGMwNC0z
ZDlmLTk3MGItZmZkYTUzN2UzMzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnZgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAiEIzNo/gk5jAgBYoo77OKEnfYBXyLEdSexC0Q/ionOIE/giQnMDNSGG4
WUF0d1hdcr9PSQ6Q+W7f/K798YAJQCJfwTYc68MqHpuxEr8/QS7vNO/YUrFloLO9
aTwy85R6FK56MbdxHJmQ4y54f6FYlML7Uvc28mJkVS9VVWatf45tDLFb9vVwx/ru
g9ueCcIXNIylBh9d2EA1xziDS1eJ62lU69qAx/aVpIabzOMi1GkaYDWcGTIiC7g6
GngORuk+AjgIyKABg+I7gB7jfKSaiuK/ff+57zIQg4ULvbvuBXyrdBqEdCF9+jSu
ikxbA75S4oSFYGOVwaozLVq2ilN6fQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:36 2025 by rpki-client