Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70cb41ad-6154-31dd-9271-65926faa48b3.roa
File:                     70cb41ad-6154-31dd-9271-65926faa48b3.roa (raw, json)
Hash identifier:          Tv3GpdR+XmFkZV6TnPeZD5BprFvyBQqd2S8ngB79148=
Subject key identifier:   FD:73:0C:92:4A:1B:08:01:F9:E5:DA:D5:67:98:FA:AC:86:20:36:F6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DF7BC945C710AFF34D6FF6280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70cb41ad-6154-31dd-9271-65926faa48b3.roa
Signing time:             Thu 19 May 2022 12:00:00 +0000
ROA not before:           Thu 19 May 2022 12:00:00 +0000
ROA not after:            Fri 24 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        155.134.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f7:bc:94:5c:71:0a:ff:34:d6:ff:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 19 12:00:00 2022 GMT
            Not After : Jun 24 04:00:00 2022 GMT
        Subject: CN=0a8e76c7-e615-4f77-b390-c67edd70bb81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:71:71:d7:dc:52:4b:66:a2:55:f9:3d:47:e7:
                    e1:2c:b2:66:6a:44:65:ef:97:ae:4c:5f:2f:e0:38:
                    31:f4:33:b9:e6:d4:ce:f7:b7:16:7a:bb:84:bc:cc:
                    59:15:24:c8:b8:aa:11:f9:0c:7a:21:c8:ac:82:25:
                    23:d9:51:2e:93:ff:10:3d:43:a6:70:39:ba:e5:6d:
                    8e:74:63:b7:1a:a2:75:ec:f4:fb:87:be:e1:bd:b9:
                    5e:a8:8b:13:b1:20:e6:81:86:d5:6a:e3:79:e9:80:
                    d2:e8:a6:de:ea:db:dc:be:66:95:76:04:24:24:a2:
                    9a:1e:6e:5d:0e:29:00:ac:7c:aa:0a:0c:28:d2:9f:
                    86:f9:84:bb:c3:42:40:56:5f:eb:2f:f9:c4:02:f4:
                    f2:e5:01:ad:c3:9c:af:4c:3e:5c:dd:ea:03:af:5b:
                    5f:92:b7:13:a4:b1:23:3c:a7:27:9e:76:bc:df:a0:
                    08:e9:30:f0:40:43:e5:d8:de:2f:f7:09:f6:f9:1b:
                    93:68:a9:3c:7a:19:a6:39:64:7b:7b:44:eb:b1:ac:
                    1e:b4:d4:00:3b:6c:ed:2c:9f:cd:cb:46:d7:21:7d:
                    eb:42:9f:ac:37:58:04:8d:8e:29:0d:07:46:94:a8:
                    15:0b:48:2b:1f:63:62:b0:6a:cd:0a:21:aa:28:bc:
                    28:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:73:0C:92:4A:1B:08:01:F9:E5:DA:D5:67:98:FA:AC:86:20:36:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70cb41ad-6154-31dd-9271-65926faa48b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.134.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:ff:ce:04:5f:34:52:a9:16:34:15:5b:71:e9:61:cb:83:52:
         bb:41:12:d7:77:0d:65:d7:dc:3a:b4:86:a5:8b:7a:93:33:d6:
         fa:7e:ee:8f:77:8f:cb:61:7e:10:56:c5:23:5e:6c:e9:43:e5:
         ac:c6:d6:f2:78:87:05:6c:e5:1c:1c:31:25:50:5d:d7:2a:02:
         d3:b4:78:86:0f:e2:4d:29:73:8d:eb:1e:87:8c:ce:d4:13:96:
         a1:77:a6:a2:9e:73:e9:72:1d:76:6b:ab:30:38:80:8f:3c:e8:
         5c:04:86:82:dd:64:c0:f1:a3:51:97:59:81:6b:77:a6:46:7c:
         f1:6a:b8:0b:9a:bb:c5:eb:f2:a1:9c:7c:9c:64:09:e1:c7:25:
         68:b3:b3:c1:6e:85:12:08:ad:4a:9d:82:04:bf:9c:1c:07:48:
         06:87:75:fa:2d:fa:e0:0b:07:ac:b8:a3:2a:93:9c:c1:04:56:
         9e:6e:39:be:6d:d8:83:fa:f6:48:c5:31:31:43:e6:a5:e3:03:
         be:a8:62:be:0b:52:d9:68:8a:9c:f5:7d:d5:6c:fb:32:95:9c:
         ca:3b:4a:52:99:4e:0c:a6:ae:6b:75:83:16:d6:32:e0:9c:0d:
         17:62:ba:11:a6:38:d6:8e:75:53:37:e7:ac:99:ac:d0:24:58:
         8a:22:a8:82
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD33vJRccQr/NNb/YoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDUxOTEyMDAwMFoXDTIyMDYyNDA0MDAwMFowLzEtMCsGA1UEAxMk
MGE4ZTc2YzctZTYxNS00Zjc3LWIzOTAtYzY3ZWRkNzBiYjgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXFx19xSS2aiVfk9R+fhLLJmakRl75euTF8v
4Dgx9DO55tTO97cWeruEvMxZFSTIuKoR+Qx6IcisgiUj2VEuk/8QPUOmcDm65W2O
dGO3GqJ17PT7h77hvbleqIsTsSDmgYbVauN56YDS6Kbe6tvcvmaVdgQkJKKaHm5d
DikArHyqCgwo0p+G+YS7w0JAVl/rL/nEAvTy5QGtw5yvTD5c3eoDr1tfkrcTpLEj
PKcnnna836AI6TDwQEPl2N4v9wn2+RuTaKk8ehmmOWR7e0TrsawetNQAO2ztLJ/N
y0bXIX3rQp+sN1gEjY4pDQdGlKgVC0grH2NisGrNCiGqKLwoQwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFP1zDJJKGwgB+eXa1WeY+qyGIDb2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNzBjYjQxYWQtNjE1NC0z
MWRkLTkyNzEtNjU5MjZmYWE0OGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAm4YwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEArf/OBF80UqkWNBVbcelhy4NSu0ES13cNZdfcOrSGpYt6kzPW+n7uj3eP
y2F+EFbFI15s6UPlrMbW8niHBWzlHBwxJVBd1yoC07R4hg/iTSlzjeseh4zO1BOW
oXemop5z6XIddmurMDiAjzzoXASGgt1kwPGjUZdZgWt3pkZ88Wq4C5q7xevyoZx8
nGQJ4cclaLOzwW6FEgitSp2CBL+cHAdIBod1+i364AsHrLijKpOcwQRWnm45vm3Y
g/r2SMUxMUPmpeMDvqhivgtS2WiKnPV91Wz7MpWcyjtKUplODKaua3WDFtYy4JwN
F2K6EaY41o51UzfnrJms0CRYiiKogg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:02 2025 by rpki-client