Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/68d7d9b8-53f1-3620-b235-318551d16d32.roa
File:                     68d7d9b8-53f1-3620-b235-318551d16d32.roa (raw, json)
Hash identifier:          soMd9KvKI+HPnfK8yOhNR7MGapB3lAR+Xc2kQIlomko=
Subject key identifier:   26:89:55:82:4B:77:C3:10:BE:13:86:2E:6B:4A:74:C5:40:CC:59:AA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E70D3BC687F497ADB749C2FC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/68d7d9b8-53f1-3620-b235-318551d16d32.roa
Signing time:             Sat 02 Jul 2022 12:00:00 +0000
ROA not before:           Sat 02 Jul 2022 12:00:00 +0000
ROA not after:            Sun 07 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.159.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:70:d3:bc:68:7f:49:7a:db:74:9c:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul  2 12:00:00 2022 GMT
            Not After : Aug  7 04:00:00 2022 GMT
        Subject: CN=1161721f-8ce2-455a-952d-a0d2b5a0a8c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:da:a7:93:6a:18:08:f6:cb:68:bd:e3:d3:df:
                    82:e5:bc:88:02:ce:08:9d:e4:62:bc:da:be:43:a2:
                    d7:73:33:c2:c6:f3:eb:c4:1b:67:ef:84:d6:19:f2:
                    63:a5:0f:55:54:a6:90:a3:42:75:d4:97:08:2f:36:
                    e3:cd:47:e6:c9:af:29:3d:5d:87:04:85:79:7a:14:
                    7b:6e:fa:b0:82:f0:18:00:39:a2:e1:95:6d:5a:b5:
                    bb:f6:9c:fd:2d:18:da:99:fc:c0:b7:93:c3:f2:c1:
                    7e:6b:27:5b:1b:51:8f:62:45:74:b8:68:29:e9:d2:
                    e6:8d:9c:82:6d:3a:94:8b:e8:ad:8b:a5:27:89:d8:
                    4a:6c:53:a6:19:17:3f:0d:6e:3b:a9:b2:38:3d:a2:
                    7b:4a:14:0d:f4:6e:c8:b1:a2:db:42:b7:71:b5:b8:
                    e0:5d:05:1f:c5:1b:cd:4d:77:8a:f7:cb:24:c7:81:
                    78:da:b2:b6:28:af:b9:09:97:1f:56:df:5e:a4:68:
                    7e:9d:36:c8:78:d1:0d:30:56:cd:c9:38:58:bb:56:
                    71:42:ee:db:09:32:e8:c1:42:a3:cb:47:2b:0c:86:
                    a2:25:ff:a3:12:32:15:19:6c:16:a9:04:08:df:d6:
                    28:53:40:c0:0c:af:d2:9d:56:7d:3a:b6:fb:12:2f:
                    bf:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:89:55:82:4B:77:C3:10:BE:13:86:2E:6B:4A:74:C5:40:CC:59:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/68d7d9b8-53f1-3620-b235-318551d16d32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.159.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:22:ef:3c:71:5a:b1:24:de:70:99:43:b2:1f:5a:90:95:38:
         8a:93:71:13:8a:b3:fd:48:c6:4b:d0:0e:29:af:b5:8f:2e:34:
         0e:9a:1a:21:8e:3e:88:64:f1:cc:0a:c0:06:22:da:ce:a2:61:
         41:37:f2:84:d6:5b:bd:b9:e7:ea:3e:86:dd:3c:d0:d4:e0:aa:
         40:00:08:bb:a2:86:d5:04:e2:3a:f1:35:cf:64:5c:4e:ff:0e:
         a9:15:91:c4:f6:0e:c7:12:f6:f4:cc:81:b9:0a:6e:05:32:e5:
         7e:0e:d8:77:0b:cb:cc:70:6e:f6:28:67:76:22:dc:32:cb:62:
         37:84:6e:84:c5:ec:3a:46:24:42:78:e4:f3:a0:e5:6f:86:58:
         1d:2e:53:4c:df:ae:a5:05:29:be:f6:e6:ac:45:17:d2:0f:c5:
         a3:d6:a8:a7:73:f6:4a:d7:14:1d:b2:f5:ac:77:3f:8b:56:e1:
         f8:0a:f4:d4:53:27:c3:d2:ab:10:21:3b:fc:9d:62:e4:47:0a:
         26:49:9c:a6:90:c5:03:cf:24:3e:6b:65:c7:aa:7d:fc:71:5e:
         56:84:60:80:6c:b5:7e:84:7a:61:f2:b8:7b:fa:c2:bd:0b:73:
         4b:74:87:b3:81:fd:fe:3a:e9:68:e8:6b:3a:72:58:68:1d:4e:
         75:6d:68:fe
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5w07xof0l623ScL8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcwMjEyMDAwMFoXDTIyMDgwNzA0MDAwMFowLzEtMCsGA1UEAxMk
MTE2MTcyMWYtOGNlMi00NTVhLTk1MmQtYTBkMmI1YTBhOGMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9qnk2oYCPbLaL3j09+C5byIAs4IneRivNq+
Q6LXczPCxvPrxBtn74TWGfJjpQ9VVKaQo0J11JcILzbjzUfmya8pPV2HBIV5ehR7
bvqwgvAYADmi4ZVtWrW79pz9LRjamfzAt5PD8sF+aydbG1GPYkV0uGgp6dLmjZyC
bTqUi+iti6UnidhKbFOmGRc/DW47qbI4PaJ7ShQN9G7IsaLbQrdxtbjgXQUfxRvN
TXeK98skx4F42rK2KK+5CZcfVt9epGh+nTbIeNENMFbNyThYu1ZxQu7bCTLowUKj
y0crDIaiJf+jEjIVGWwWqQQI39YoU0DADK/SnVZ9Orb7Ei+/twIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCaJVYJLd8MQvhOGLmtKdMVAzFmqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNjhkN2Q5YjgtNTNmMS0z
NjIwLWIyMzUtMzE4NTUxZDE2ZDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEJ8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgSLvPHFasSTecJlDsh9akJU4ipNxE4qz/UjGS9AOKa+1jy40DpoaIY4+
iGTxzArABiLazqJhQTfyhNZbvbnn6j6G3TzQ1OCqQAAIu6KG1QTiOvE1z2RcTv8O
qRWRxPYOxxL29MyBuQpuBTLlfg7YdwvLzHBu9ihndiLcMstiN4RuhMXsOkYkQnjk
86Dlb4ZYHS5TTN+upQUpvvbmrEUX0g/Fo9aop3P2StcUHbL1rHc/i1bh+Ar01FMn
w9KrECE7/J1i5EcKJkmcppDFA88kPmtlx6p9/HFeVoRggGy1foR6YfK4e/rCvQtz
S3SHs4H9/jrpaOhrOnJYaB1OdW1o/g==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:00 2025 by rpki-client