Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7558f4f1-d11a-3794-90cd-41e44ae3aa50.roa
File:                     7558f4f1-d11a-3794-90cd-41e44ae3aa50.roa (raw, json)
Hash identifier:          fg5cPnjQCBXXSpgA9UET5ZBEqnYszie30qs8+t2d6PI=
Subject key identifier:   70:2B:AD:29:78:C7:CD:E2:C1:4A:F1:79:0F:7C:75:03:0D:3E:92:5F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C95C468BDADF600349BD1D540
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7558f4f1-d11a-3794-90cd-41e44ae3aa50.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        16.204.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:95:c4:68:bd:ad:f6:00:34:9b:d1:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=bc77484f-3ca5-4f48-8489-c505eb801ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8b:4f:73:74:8b:aa:40:b3:e5:19:1f:3c:96:
                    1c:ec:81:2c:0f:fd:9b:fb:d2:5c:32:b6:6c:a2:8e:
                    ed:a9:da:07:9c:8c:fe:17:41:de:27:b7:ef:22:f8:
                    ac:51:f1:9c:27:b4:db:72:3a:83:2b:7b:47:71:05:
                    1e:a1:49:cb:1c:80:58:af:3c:97:e9:a6:3c:af:f5:
                    94:18:f9:a4:aa:a7:64:56:f1:19:2f:3c:5a:cb:cc:
                    54:ba:3d:c5:39:56:c3:13:5b:4d:41:79:14:14:47:
                    74:24:e7:e9:09:15:6c:1a:bc:de:ad:d0:57:75:0c:
                    54:15:32:b6:f5:c8:94:59:66:f3:03:de:23:76:66:
                    ca:bd:cf:37:8f:52:a0:9a:b4:04:67:ea:96:84:60:
                    6d:a5:c0:57:ef:3b:3b:81:bf:3b:64:6f:92:93:93:
                    53:19:f2:bd:39:73:56:86:f1:14:63:6d:4e:a1:d7:
                    93:77:a9:06:22:ff:9f:1d:ac:11:13:89:69:e9:d1:
                    33:fd:a3:85:1e:bc:eb:82:b6:d2:dd:b4:20:d6:a3:
                    b2:0e:be:8a:d4:24:ff:29:db:1c:1f:42:8d:0b:76:
                    98:51:44:aa:94:a7:a4:8a:c5:7d:54:7f:82:1f:19:
                    b0:f3:72:33:9a:07:69:a3:da:2b:71:a9:ab:17:cf:
                    e9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2B:AD:29:78:C7:CD:E2:C1:4A:F1:79:0F:7C:75:03:0D:3E:92:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7558f4f1-d11a-3794-90cd-41e44ae3aa50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.204.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:b3:bf:a5:88:73:23:3b:b7:6e:fb:3f:fc:49:e4:b4:7f:b9:
         50:db:54:18:3c:f2:59:40:2f:75:ca:30:61:cd:fb:a7:5c:e4:
         aa:72:36:18:46:cb:cc:55:d7:f6:04:9f:c6:93:6a:df:bc:e8:
         cd:df:25:20:62:22:33:9c:63:8b:94:14:fc:1a:2d:02:bf:19:
         cc:96:a8:a7:aa:31:ae:78:e7:c4:b5:82:28:de:35:7b:c4:4b:
         ef:5b:99:8a:a7:fa:25:42:50:cf:4a:4a:e0:de:b7:2c:ad:5e:
         f1:0f:55:01:ed:f7:55:8b:19:65:2e:a9:19:c5:7e:ab:b0:e7:
         4b:90:fd:38:50:ea:8b:81:a4:12:5e:a0:c6:81:5d:fb:85:62:
         52:0c:7e:d6:5e:49:46:15:2f:76:1d:9a:de:e9:21:b4:0c:b2:
         73:41:96:58:3f:84:45:5e:3e:70:4d:d4:cd:98:79:97:f4:da:
         ce:a0:ed:43:a3:d6:5d:7d:32:34:95:88:48:ed:f1:e7:1b:85:
         f6:53:22:1b:14:da:73:5d:eb:ba:94:2e:80:cc:33:3b:74:c8:
         c3:6a:2c:50:53:f2:2f:d6:44:d9:24:99:b3:32:c8:f3:ec:cc:
         94:71:bc:5a:90:b9:81:cf:88:c8:63:1b:c4:7d:42:6a:9c:13:
         5d:33:35:f3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDyVxGi9rfYANJvR1UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDExNDA1MDAwMFoXDTIyMDIxODA1MDAwMFowLzEtMCsGA1UEAxMk
YmM3NzQ4NGYtM2NhNS00ZjQ4LTg0ODktYzUwNWViODAxYWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ItPc3SLqkCz5RkfPJYc7IEsD/2b+9JcMrZs
oo7tqdoHnIz+F0HeJ7fvIvisUfGcJ7TbcjqDK3tHcQUeoUnLHIBYrzyX6aY8r/WU
GPmkqqdkVvEZLzxay8xUuj3FOVbDE1tNQXkUFEd0JOfpCRVsGrzerdBXdQxUFTK2
9ciUWWbzA94jdmbKvc83j1KgmrQEZ+qWhGBtpcBX7zs7gb87ZG+Sk5NTGfK9OXNW
hvEUY21OodeTd6kGIv+fHawRE4lp6dEz/aOFHrzrgrbS3bQg1qOyDr6K1CT/Kdsc
H0KNC3aYUUSqlKekisV9VH+CHxmw83Izmgdpo9orcamrF8/puwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHArrSl4x83iwUrxeQ98dQMNPpJfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNzU1OGY0ZjEtZDExYS0z
Nzk0LTkwY2QtNDFlNDRhZTNhYTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEMwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAnbO/pYhzIzu3bvs//EnktH+5UNtUGDzyWUAvdcowYc37p1zkqnI2GEbL
zFXX9gSfxpNq37zozd8lIGIiM5xji5QU/BotAr8ZzJaop6oxrnjnxLWCKN41e8RL
71uZiqf6JUJQz0pK4N63LK1e8Q9VAe33VYsZZS6pGcV+q7DnS5D9OFDqi4GkEl6g
xoFd+4ViUgx+1l5JRhUvdh2a3ukhtAyyc0GWWD+ERV4+cE3UzZh5l/TazqDtQ6PW
XX0yNJWISO3x5xuF9lMiGxTac13rupQugMwzO3TIw2osUFPyL9ZE2SSZszLI8+zM
lHG8WpC5gc+IyGMbxH1CapwTXTM18w==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:03 2025 by rpki-client