Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70f45779-3fc3-3c86-ad21-1b2bb45585b7.roa
File:                     70f45779-3fc3-3c86-ad21-1b2bb45585b7.roa (raw, json)
Hash identifier:          br83GvhCQUj49D2+G9IIsnNLA4/k4HuZJyp2a7te4R4=
Subject key identifier:   B5:71:0E:57:48:AF:5E:86:72:C0:0B:A9:73:59:39:A0:78:A2:5B:4F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858401CD5D13C5067B994BBFB31A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70f45779-3fc3-3c86-ad21-1b2bb45585b7.roa
Signing time:             Fri 02 Dec 2022 12:00:00 +0000
ROA not before:           Fri 02 Dec 2022 12:00:00 +0000
ROA not after:            Sat 07 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        173.228.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1c:d5:d1:3c:50:67:b9:94:bb:fb:31:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  2 12:00:00 2022 GMT
            Not After : Jan  7 05:00:00 2023 GMT
        Subject: CN=edeb6dbb-b7ee-484a-80c9-ce7c9be75e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4f:03:01:42:9b:f2:96:ea:43:5b:07:38:fc:
                    68:06:8e:5f:d0:7f:66:55:88:e2:2b:e2:d2:b1:4e:
                    c5:1a:a3:42:65:bc:f0:b8:c6:60:97:72:67:8e:f1:
                    f5:35:47:52:82:a2:75:b3:ef:05:3f:c2:7c:e3:79:
                    36:a8:0c:f0:ed:3c:9f:bf:35:b3:83:2f:b0:45:4a:
                    2c:30:7b:fa:a2:6f:82:7b:89:eb:37:56:29:59:75:
                    8c:40:43:44:57:e3:aa:5a:98:5c:45:86:0b:8a:91:
                    46:07:93:a6:a9:ee:3b:f2:27:91:38:eb:9f:a0:f2:
                    4e:b8:cc:57:70:6d:31:a7:c8:85:54:93:43:16:07:
                    bc:44:04:68:01:b2:44:71:70:49:8a:92:4d:3b:b8:
                    a5:c9:aa:fe:29:03:54:db:72:5f:e1:31:a1:bb:9d:
                    7b:7f:4f:4f:f5:39:ee:a5:75:44:04:42:57:87:c0:
                    e9:45:74:c7:a0:a8:15:38:3b:5e:e3:d8:52:7c:65:
                    f6:42:30:4c:43:38:38:ef:80:2e:92:8d:88:a3:32:
                    b4:99:38:d0:1e:31:03:c4:8c:fc:a0:63:89:69:2b:
                    b3:55:62:3c:ba:d1:ee:29:14:6c:67:68:2b:f4:33:
                    07:65:fe:59:bf:1e:d1:03:83:e4:41:46:2c:03:65:
                    38:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:71:0E:57:48:AF:5E:86:72:C0:0B:A9:73:59:39:A0:78:A2:5B:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70f45779-3fc3-3c86-ad21-1b2bb45585b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.228.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:9a:a1:ed:44:68:8d:7c:c0:2b:75:6a:8e:98:81:54:a7:24:
         cd:ae:b1:ad:e7:03:fc:6a:4d:7f:db:3c:76:8d:e4:04:af:8e:
         da:f2:87:bf:56:07:3c:87:b6:a4:63:4a:9b:f1:ad:44:4c:a6:
         e7:02:05:04:81:96:c3:4d:0c:50:d9:63:dc:d3:22:85:04:fb:
         d8:61:59:6d:c3:16:9b:6e:73:8c:5a:17:35:26:1f:2a:55:bd:
         b8:02:c1:2c:c8:68:d9:a8:75:08:36:a3:5d:18:f7:fa:2e:59:
         52:e4:5f:c1:6f:3a:6f:a4:61:d4:88:94:83:7a:90:d1:3e:5a:
         7f:31:3f:d4:0e:ab:fa:86:db:92:7d:c3:50:10:7b:0d:fd:82:
         ae:65:bf:35:ae:91:79:d0:7a:7a:02:c9:ee:49:45:f2:df:d8:
         ac:8a:18:e1:0b:83:07:7d:49:84:ca:a9:63:ba:90:95:27:4f:
         c1:1e:2b:bd:63:52:58:a6:5e:63:19:75:09:da:79:ca:19:f6:
         8a:a7:1d:ed:2a:0b:8c:5c:c3:f7:08:2e:78:8e:dc:fc:a3:3f:
         af:54:75:ed:42:4e:fb:ca:18:22:68:29:6f:b0:06:7d:bd:66:
         da:04:ce:59:32:d7:d2:2e:f5:e7:11:b2:d8:31:80:d9:d5:b2:
         e2:49:c9:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEAc1dE8UGe5lLv7MaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwMjEyMDAwMFoXDTIzMDEwNzA1MDAwMFowLzEtMCsGA1UEAxMk
ZWRlYjZkYmItYjdlZS00ODRhLTgwYzktY2U3YzliZTc1ZTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU8DAUKb8pbqQ1sHOPxoBo5f0H9mVYjiK+LS
sU7FGqNCZbzwuMZgl3JnjvH1NUdSgqJ1s+8FP8J843k2qAzw7TyfvzWzgy+wRUos
MHv6om+Ce4nrN1YpWXWMQENEV+OqWphcRYYLipFGB5Omqe478ieROOufoPJOuMxX
cG0xp8iFVJNDFge8RARoAbJEcXBJipJNO7ilyar+KQNU23Jf4TGhu517f09P9Tnu
pXVEBEJXh8DpRXTHoKgVODte49hSfGX2QjBMQzg474Auko2IozK0mTjQHjEDxIz8
oGOJaSuzVWI8utHuKRRsZ2gr9DMHZf5Zvx7RA4PkQUYsA2U4hQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLVxDldIr16GcsALqXNZOaB4oltPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNzBmNDU3NzktM2ZjMy0z
Yzg2LWFkMjEtMWIyYmI0NTU4NWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFreSgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIyaoe1EaI18wCt1ao6YgVSnJM2usa3nA/xqTX/bPHaN5ASvjtryh79W
BzyHtqRjSpvxrURMpucCBQSBlsNNDFDZY9zTIoUE+9hhWW3DFptuc4xaFzUmHypV
vbgCwSzIaNmodQg2o10Y9/ouWVLkX8FvOm+kYdSIlIN6kNE+Wn8xP9QOq/qG25J9
w1AQew39gq5lvzWukXnQenoCye5JRfLf2KyKGOELgwd9SYTKqWO6kJUnT8EeK71j
UlimXmMZdQnaecoZ9oqnHe0qC4xcw/cILniO3PyjP69Ude1CTvvKGCJoKW+wBn29
ZtoEzlky19Iu9ecRstgxgNnVsuJJyes=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:17:20 2025 by rpki-client