Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/711452e4-acff-36bd-acb4-eaec17175e62.roa
File:                     711452e4-acff-36bd-acb4-eaec17175e62.roa (raw, json)
Hash identifier:          t8FYVvdEYVP0pfEHCCC1OklVHhZG6dVdbeWgPxdK19I=
Subject key identifier:   79:E1:30:97:2F:6D:19:44:8B:ED:D0:74:79:56:B8:39:04:F9:86:67
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C6EA02C67B70F03251F661C70
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/711452e4-acff-36bd-acb4-eaec17175e62.roa
Signing time:             Fri 31 Dec 2021 05:00:00 +0000
ROA not before:           Fri 31 Dec 2021 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        16.170.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6e:a0:2c:67:b7:0f:03:25:1f:66:1c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 31 05:00:00 2021 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=4fc1c011-28d0-48fc-b2d3-336a68484f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fb:d8:79:d3:69:9d:e6:25:a0:8b:36:1f:58:
                    59:64:74:c6:8e:1f:a2:8e:4c:2b:b6:bb:7d:f7:14:
                    7d:0e:3b:f1:76:07:e8:c2:de:ce:a3:e2:a0:14:2f:
                    9f:de:d4:52:63:27:ad:f0:33:03:f9:50:59:54:3f:
                    9d:69:fd:3b:ab:1f:8d:49:01:bb:1b:2b:4f:95:42:
                    76:09:d9:92:4e:51:a1:3f:28:63:6d:8b:3e:d9:82:
                    fd:35:85:bb:5f:59:3e:f4:0c:a1:a9:62:79:4f:52:
                    91:7a:20:93:43:fd:d4:35:6c:48:14:bc:2a:7d:9a:
                    d7:1b:c7:4b:05:b7:74:31:18:ca:bf:2a:4f:00:ee:
                    64:69:f3:2b:12:5f:53:e8:b5:6c:91:a5:43:48:ee:
                    69:16:9f:65:84:af:d4:c2:0a:e0:73:7f:54:62:65:
                    05:0a:24:41:6f:be:87:92:a5:dc:c6:f6:e1:33:d9:
                    00:06:07:81:5c:0e:85:c2:be:e1:bb:43:7d:a3:39:
                    2a:cb:a9:73:48:cc:51:85:bb:64:5c:6c:b1:13:a2:
                    68:c3:86:14:51:72:93:df:e2:cd:7b:00:53:ad:60:
                    0b:a2:7d:49:ba:58:bb:93:80:95:13:0f:a5:56:5a:
                    b4:2d:ed:e6:fc:1e:28:9c:93:90:79:3a:41:42:b2:
                    5d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E1:30:97:2F:6D:19:44:8B:ED:D0:74:79:56:B8:39:04:F9:86:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/711452e4-acff-36bd-acb4-eaec17175e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.170.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:1b:b2:0d:53:e8:14:78:25:07:a5:b8:17:03:8b:a3:72:1b:
         3f:19:7f:11:cc:fc:f8:ed:85:0d:9c:07:c9:b8:36:1a:72:ba:
         d7:7e:bc:61:5f:1e:28:0a:a0:5b:46:30:0e:48:d4:5c:45:ee:
         58:34:e7:14:4b:fe:88:85:2a:8e:3d:ca:2a:5c:16:56:32:5c:
         10:9d:9e:22:a6:f8:ba:25:3b:e2:96:65:b3:04:b7:cc:32:52:
         2f:6f:f9:72:e8:53:87:4f:3a:3a:2e:b7:b1:05:de:46:6a:60:
         4c:e9:9c:8e:54:1d:2f:a6:bb:e5:29:d2:e0:fc:37:04:2c:a3:
         d5:09:1f:bc:58:80:06:73:f5:a0:bf:21:6d:50:7b:e6:82:51:
         1b:ff:20:2d:04:74:3a:22:be:38:9b:62:b6:2b:ed:96:9e:f7:
         be:94:88:d0:40:a9:4e:f0:08:76:34:56:9e:2d:1e:e2:a4:08:
         02:31:52:1f:7c:eb:c2:80:f2:4e:0d:8a:bd:00:4b:7e:59:ac:
         54:2f:26:78:4a:19:dc:6d:a6:ac:a3:a2:53:e1:8a:12:15:f8:
         80:da:23:39:39:31:9d:eb:39:3f:91:9d:ee:e3:ee:c3:63:72:
         ff:0b:be:af:b7:59:c1:b0:e6:9b:aa:c3:69:63:24:bc:ba:29:
         74:29:0c:fb
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDxuoCxntw8DJR9mHHAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIxMTIzMTA1MDAwMFoXDTIyMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
NGZjMWMwMTEtMjhkMC00OGZjLWIyZDMtMzM2YTY4NDg0ZjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/vYedNpneYloIs2H1hZZHTGjh+ijkwrtrt9
9xR9Djvxdgfowt7Oo+KgFC+f3tRSYyet8DMD+VBZVD+daf07qx+NSQG7GytPlUJ2
CdmSTlGhPyhjbYs+2YL9NYW7X1k+9AyhqWJ5T1KReiCTQ/3UNWxIFLwqfZrXG8dL
Bbd0MRjKvypPAO5kafMrEl9T6LVskaVDSO5pFp9lhK/Uwgrgc39UYmUFCiRBb76H
kqXcxvbhM9kABgeBXA6Fwr7hu0N9ozkqy6lzSMxRhbtkXGyxE6Jow4YUUXKT3+LN
ewBTrWALon1Juli7k4CVEw+lVlq0Le3m/B4onJOQeTpBQrJdMQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHnhMJcvbRlEi+3QdHlWuDkE+YZnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNzExNDUyZTQtYWNmZi0z
NmJkLWFjYjQtZWFlYzE3MTc1ZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEKowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAlRuyDVPoFHglB6W4FwOLo3IbPxl/Ecz8+O2FDZwHybg2GnK61368YV8e
KAqgW0YwDkjUXEXuWDTnFEv+iIUqjj3KKlwWVjJcEJ2eIqb4uiU74pZlswS3zDJS
L2/5cuhTh086Oi63sQXeRmpgTOmcjlQdL6a75SnS4Pw3BCyj1QkfvFiABnP1oL8h
bVB75oJRG/8gLQR0OiK+OJtitivtlp73vpSI0ECpTvAIdjRWni0e4qQIAjFSH3zr
woDyTg2KvQBLflmsVC8meEoZ3G2mrKOiU+GKEhX4gNojOTkxnes5P5Gd7uPuw2Ny
/wu+r7dZwbDmm6rDaWMkvLopdCkM+w==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:38 2025 by rpki-client