Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6847711d-10e3-3043-9722-e6dc1df06262.roa
File:                     6847711d-10e3-3043-9722-e6dc1df06262.roa (raw, json)
Hash identifier:          CTAKqgOQAbWAreYruMpGVqcP4UMjme2viXJR6L1D/x0=
Subject key identifier:   34:6F:20:BD:D6:C9:A9:34:DF:26:46:0F:7D:6E:7A:07:2F:ED:6E:E2
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584019D7349DE3E9941D34F01100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6847711d-10e3-3043-9722-e6dc1df06262.roa
Signing time:             Thu 01 Dec 2022 12:00:00 +0000
ROA not before:           Thu 01 Dec 2022 12:00:00 +0000
ROA not after:            Fri 06 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        16.93.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:19:d7:34:9d:e3:e9:94:1d:34:f0:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  1 12:00:00 2022 GMT
            Not After : Jan  6 05:00:00 2023 GMT
        Subject: CN=fcbe5c01-2e7c-4b8a-aeac-44def65fc098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c2:d9:f1:bf:40:79:81:f0:f3:92:95:5c:75:
                    95:8e:55:f1:15:86:8a:47:6b:ef:47:59:53:3f:b0:
                    ec:1d:b7:31:ff:5f:a6:b7:99:ea:c0:04:fe:1b:c8:
                    80:66:5b:6f:e0:bb:35:77:f1:b7:ed:19:ce:90:60:
                    b8:4c:da:01:5c:e0:7d:d2:75:01:9c:4b:0b:91:f1:
                    62:bf:b1:99:0d:f8:b7:f9:0d:02:4c:51:c9:e5:8c:
                    a5:db:5b:4a:15:f4:2f:1e:5c:6b:2b:4b:d7:43:d1:
                    db:f2:71:11:0f:27:a3:d9:9b:c0:d5:77:40:21:59:
                    7a:82:ee:8e:47:21:e9:e0:ba:4f:8c:36:03:19:1a:
                    0b:55:85:b2:5f:52:ab:57:80:31:cc:37:8c:e7:d2:
                    b0:bc:c8:e6:c5:8b:2a:f1:8d:fa:3f:29:38:16:74:
                    12:c0:fe:8c:cf:91:e8:14:ae:00:ca:95:2a:ad:f9:
                    03:8c:96:a6:7b:0a:d6:4a:11:c6:91:e6:20:d4:a2:
                    76:a8:ab:3d:05:9b:cc:a6:9f:b1:94:b7:67:23:76:
                    88:ae:49:eb:83:3d:bc:50:ac:42:4f:da:f9:29:14:
                    dc:33:84:c7:4c:40:5d:0f:2f:16:6e:ee:94:9d:72:
                    05:4a:fc:2c:eb:4f:e9:4d:78:ba:71:06:47:30:20:
                    a9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6F:20:BD:D6:C9:A9:34:DF:26:46:0F:7D:6E:7A:07:2F:ED:6E:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6847711d-10e3-3043-9722-e6dc1df06262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.93.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:46:9e:ef:aa:1b:87:b6:98:8e:29:a3:d3:77:01:a9:51:a2:
         4a:20:6e:38:4a:3d:98:1a:d8:10:97:5a:5f:c6:92:b6:6f:b7:
         2c:88:ea:2d:45:d3:27:a5:67:92:26:51:d3:c3:30:ab:28:01:
         d5:e9:de:21:93:50:77:2b:7b:e7:b8:37:8a:51:9c:50:45:c8:
         3a:a7:85:5a:dc:fd:74:ee:7b:a3:9b:cf:05:4d:dd:99:81:76:
         14:99:30:f3:a8:2b:26:b0:17:e2:20:5b:aa:e2:87:3e:8a:5b:
         b0:36:e2:01:81:68:26:1b:91:86:02:2d:25:be:a5:fc:c2:8e:
         6b:9c:e3:da:b8:b4:ea:1e:ce:23:f8:af:5c:96:78:b4:a5:19:
         4d:fc:05:f6:9a:3b:da:c7:00:65:1b:5f:b9:21:37:1e:38:14:
         fe:a0:f6:62:ec:aa:d2:64:17:f6:97:3a:54:91:14:9f:bc:94:
         11:ce:2e:fd:d7:2f:5b:27:99:9b:cb:29:04:ef:82:13:cc:b4:
         4c:cc:3a:e5:1b:0a:b5:7a:9a:f2:36:c5:8c:78:17:e7:a2:c1:
         10:49:69:03:d7:04:d2:5b:c3:e8:e5:70:db:cb:a1:47:5b:a0:
         b8:7f:30:30:60:6f:24:d6:9c:f2:89:70:bb:db:59:fa:5a:e2:
         72:ef:ad:ef
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAZ1zSd4+mUHTTwEQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwMTEyMDAwMFoXDTIzMDEwNjA1MDAwMFowLzEtMCsGA1UEAxMk
ZmNiZTVjMDEtMmU3Yy00YjhhLWFlYWMtNDRkZWY2NWZjMDk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcLZ8b9AeYHw85KVXHWVjlXxFYaKR2vvR1lT
P7DsHbcx/1+mt5nqwAT+G8iAZltv4Ls1d/G37RnOkGC4TNoBXOB90nUBnEsLkfFi
v7GZDfi3+Q0CTFHJ5Yyl21tKFfQvHlxrK0vXQ9Hb8nERDyej2ZvA1XdAIVl6gu6O
RyHp4LpPjDYDGRoLVYWyX1KrV4AxzDeM59KwvMjmxYsq8Y36Pyk4FnQSwP6Mz5Ho
FK4AypUqrfkDjJamewrWShHGkeYg1KJ2qKs9BZvMpp+xlLdnI3aIrknrgz28UKxC
T9r5KRTcM4THTEBdDy8Wbu6UnXIFSvws60/pTXi6cQZHMCCpJwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDRvIL3Wyak03yZGD31uegcv7W7iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNjg0NzcxMWQtMTBlMy0z
MDQzLTk3MjItZTZkYzFkZjA2MjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEF0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAWEae76obh7aYjimj03cBqVGiSiBuOEo9mBrYEJdaX8aStm+3LIjqLUXT
J6VnkiZR08MwqygB1eneIZNQdyt757g3ilGcUEXIOqeFWtz9dO57o5vPBU3dmYF2
FJkw86grJrAX4iBbquKHPopbsDbiAYFoJhuRhgItJb6l/MKOa5zj2ri06h7OI/iv
XJZ4tKUZTfwF9po72scAZRtfuSE3HjgU/qD2Yuyq0mQX9pc6VJEUn7yUEc4u/dcv
WyeZm8spBO+CE8y0TMw65RsKtXqa8jbFjHgX56LBEElpA9cE0lvD6OVw28uhR1ug
uH8wMGBvJNac8olwu9tZ+lricu+t7w==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:26:17 2025 by rpki-client