Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/73eb3c42-9a69-3740-aa9b-e4e79d2b422f.roa
File:                     73eb3c42-9a69-3740-aa9b-e4e79d2b422f.roa (raw, json)
Hash identifier:          xyLM4FC9tpsJKTxST8k1m1nGDCWgghNwHpwGqU7Ando=
Subject key identifier:   E9:61:70:18:E6:CC:13:99:AD:41:C5:D1:10:5D:48:C0:FB:76:F8:6D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C9677E87E893D3FA2702EE240
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/73eb3c42-9a69-3740-aa9b-e4e79d2b422f.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        70.251.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:96:77:e8:7e:89:3d:3f:a2:70:2e:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=94f51566-96d3-4479-bb1f-a6c9505b29ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b0:ca:ff:a0:1f:d1:2e:32:c3:66:6b:06:90:
                    83:b1:9f:34:28:1c:8c:50:ef:2b:e9:04:c1:3e:a7:
                    af:53:5c:2d:38:04:4f:da:d8:79:38:87:20:3f:ec:
                    cf:5d:df:53:3c:28:20:07:5c:f6:a5:fa:b7:ba:05:
                    f7:cc:41:c1:35:ec:7d:7f:8a:ef:13:65:26:13:ab:
                    4a:01:b2:b4:2e:64:7d:26:de:3a:32:9c:5f:66:d6:
                    9a:6f:67:62:33:21:7a:81:c7:e1:11:6a:c5:36:72:
                    b8:86:01:1f:fa:f6:36:d4:f0:5e:99:8a:8c:f6:c0:
                    05:c1:23:2a:00:2c:26:0e:50:51:35:b1:fc:81:4f:
                    3f:77:20:a7:36:80:02:cf:20:75:89:81:c7:f3:3a:
                    48:39:15:fd:48:77:52:9d:cd:b1:08:3c:62:4b:d9:
                    e4:69:65:98:76:2b:b9:99:d0:1e:37:d8:60:62:af:
                    08:51:d5:cb:3f:58:5d:7f:a4:2e:95:51:c7:da:4b:
                    5f:d2:3d:68:5d:2f:5e:80:f6:2c:5f:37:68:eb:c1:
                    74:12:62:02:26:1b:8e:db:22:65:a1:95:ec:92:af:
                    52:0a:4a:d4:52:63:2c:7b:45:32:9e:30:df:a8:83:
                    64:89:b9:56:52:6e:7d:52:79:bf:b1:01:41:91:d8:
                    aa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:61:70:18:E6:CC:13:99:AD:41:C5:D1:10:5D:48:C0:FB:76:F8:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/73eb3c42-9a69-3740-aa9b-e4e79d2b422f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.251.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:ce:74:ee:6e:2d:7c:23:fe:ad:02:00:6a:80:4e:e7:e4:b6:
         88:49:49:7a:a9:d5:13:31:10:e3:4d:91:aa:e9:9d:4e:ea:67:
         2c:e6:23:a9:44:6d:2b:ce:ea:13:8d:bc:63:26:11:e7:96:43:
         48:7b:66:35:f9:01:6e:d9:63:ce:71:5b:7b:ee:76:4e:f7:e7:
         74:7d:6c:9f:27:21:5a:21:dc:e0:c9:ed:25:34:7e:92:8c:b5:
         6a:99:59:3e:bf:ba:4b:b1:71:52:78:47:c2:86:bd:13:f9:8e:
         27:a4:c1:74:a9:8b:4b:cf:14:08:ca:05:fc:fc:d8:35:6e:80:
         64:46:e1:6a:86:aa:52:e6:65:ce:d2:31:d1:f8:cf:f1:98:1e:
         3d:b9:c6:59:e8:43:54:1a:30:36:0b:05:65:4d:5a:88:42:42:
         81:c7:4d:5c:05:fe:9c:21:40:46:70:6f:e5:4b:12:8f:92:84:
         e7:11:e0:be:7f:fb:b7:48:92:ee:9e:81:36:b3:d7:61:01:10:
         7f:7e:18:74:22:57:9d:47:44:1e:a9:6d:43:45:fd:f9:2d:33:
         e0:85:a7:f4:8d:ed:65:aa:7f:0f:0d:50:d6:e2:5e:2f:d8:5d:
         75:00:5f:0b:35:37:e3:ba:db:c2:e5:70:d5:15:48:0a:87:45:
         93:3e:56:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDyWd+h+iT0/onAu4kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDExNDA1MDAwMFoXDTIyMDIxODA1MDAwMFowLzEtMCsGA1UEAxMk
OTRmNTE1NjYtOTZkMy00NDc5LWJiMWYtYTZjOTUwNWIyOWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLDK/6Af0S4yw2ZrBpCDsZ80KByMUO8r6QTB
PqevU1wtOARP2th5OIcgP+zPXd9TPCggB1z2pfq3ugX3zEHBNex9f4rvE2UmE6tK
AbK0LmR9Jt46MpxfZtaab2diMyF6gcfhEWrFNnK4hgEf+vY21PBemYqM9sAFwSMq
ACwmDlBRNbH8gU8/dyCnNoACzyB1iYHH8zpIORX9SHdSnc2xCDxiS9nkaWWYdiu5
mdAeN9hgYq8IUdXLP1hdf6QulVHH2ktf0j1oXS9egPYsXzdo68F0EmICJhuO2yJl
oZXskq9SCkrUUmMse0UynjDfqINkiblWUm59Unm/sQFBkdiqSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOlhcBjmzBOZrUHF0RBdSMD7dvhtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNzNlYjNjNDItOWE2OS0z
NzQwLWFhOWItZTRlNzlkMmI0MjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRvtAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGHOdO5uLXwj/q0CAGqATufktohJSXqp1RMxEONNkarpnU7qZyzmI6lE
bSvO6hONvGMmEeeWQ0h7ZjX5AW7ZY85xW3vudk7353R9bJ8nIVoh3ODJ7SU0fpKM
tWqZWT6/ukuxcVJ4R8KGvRP5jiekwXSpi0vPFAjKBfz82DVugGRG4WqGqlLmZc7S
MdH4z/GYHj25xlnoQ1QaMDYLBWVNWohCQoHHTVwF/pwhQEZwb+VLEo+ShOcR4L5/
+7dIku6egTaz12EBEH9+GHQiV51HRB6pbUNF/fktM+CFp/SN7WWqfw8NUNbiXi/Y
XXUAXws1N+O628LlcNUVSAqHRZM+Vt4=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:22:32 2025 by rpki-client