Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/788a5b00-3343-390f-a0ea-4458ff7e4787.roa
File:                     788a5b00-3343-390f-a0ea-4458ff7e4787.roa (raw, json)
Hash identifier:          5c3w9/hghklVI2P9xFp8prq+kGbLi0g1AAn29Hr/9hs=
Subject key identifier:   0C:FD:55:15:A2:BC:61:77:18:10:82:06:6D:82:6B:26:DE:14:36:D9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858402F724D9809827FCFF0E3DB60
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/788a5b00-3343-390f-a0ea-4458ff7e4787.roa
Signing time:             Fri 09 Dec 2022 18:45:08 +0000
ROA not before:           Fri 09 Dec 2022 18:45:08 +0000
ROA not after:            Sat 14 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        16.54.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:2f:72:4d:98:09:82:7f:cf:f0:e3:db:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  9 18:45:08 2022 GMT
            Not After : Jan 14 05:00:00 2023 GMT
        Subject: CN=2a12719c-dffb-41c7-9dd6-0d3cbf4a84a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:82:22:41:7a:43:70:69:ce:d4:f0:79:12:38:
                    38:77:7c:0c:8f:c2:e8:7b:5d:9a:6f:b3:f6:25:fd:
                    65:42:c9:0a:08:71:90:88:63:54:48:04:83:26:58:
                    f9:5e:99:96:30:e1:21:2e:6f:d9:94:87:d4:90:fa:
                    82:81:e1:ce:12:bd:09:71:22:df:5f:32:49:3e:c2:
                    1d:a5:14:89:14:5e:1c:bc:d8:28:9f:fd:f5:a6:6e:
                    84:51:6f:2f:74:e5:f5:3f:25:46:b7:62:32:5c:a4:
                    e5:e6:95:10:6b:33:dd:9e:8f:ae:62:e8:40:6b:21:
                    5f:3f:cd:37:da:c1:06:b8:00:6c:b4:59:7a:d9:68:
                    09:93:ee:93:85:28:5a:49:28:f0:e1:54:60:f2:2c:
                    65:28:f2:73:9f:ed:cd:96:f9:92:f8:0d:81:98:88:
                    6b:77:5e:50:c1:21:31:6d:69:08:8b:2e:27:8c:38:
                    c5:c8:cc:f3:8a:f7:01:5d:43:cd:0f:2e:1e:4b:bd:
                    3c:d6:78:ae:0c:3d:9a:e7:b9:a0:e8:1f:9f:b5:bb:
                    fd:e7:c9:19:96:8a:9f:31:2d:a7:2e:2f:35:75:f2:
                    04:d1:74:11:ed:33:78:44:3a:d3:69:c1:5f:52:d5:
                    b7:3d:d8:b2:f5:34:21:d3:15:7c:55:70:e3:de:93:
                    48:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FD:55:15:A2:BC:61:77:18:10:82:06:6D:82:6B:26:DE:14:36:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/788a5b00-3343-390f-a0ea-4458ff7e4787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.54.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ae:b1:2f:7f:f2:48:ea:f7:e5:ad:95:f4:40:ef:61:c6:ed:
         c4:12:c0:7c:ce:cb:6f:9d:61:fc:cd:5f:b3:94:20:8b:19:60:
         4f:21:5d:99:9f:cf:e0:60:04:77:e4:de:26:d0:1e:12:bc:49:
         aa:d5:f4:19:55:8c:dd:de:95:dc:a6:86:b5:e7:c0:4a:93:be:
         f2:cb:d2:72:5b:dc:52:b7:cc:52:ec:da:0b:48:f6:db:76:3b:
         69:a3:16:28:71:b1:21:4e:db:ee:c8:06:79:a2:d6:0d:75:19:
         c0:ae:48:c9:58:34:81:30:c3:60:d0:67:7e:02:e9:b0:2d:a4:
         c9:23:8d:3b:5f:d6:23:aa:9a:9e:87:df:5e:78:86:bd:2d:9e:
         83:8a:e5:51:00:a1:a8:ad:86:0e:f9:e6:cb:c7:b4:4a:69:56:
         80:36:b4:7b:ce:9a:9c:c7:51:96:ad:44:c0:a5:89:61:f0:9c:
         1d:0f:bc:e2:88:c9:01:35:32:22:28:3e:67:ea:42:43:b4:09:
         3e:1d:e8:26:d3:97:3f:55:46:1f:f3:55:23:a0:38:e8:85:88:
         a1:5f:b6:15:36:27:9f:bd:c8:83:62:66:b2:df:cd:b8:78:bc:
         37:78:16:f1:63:e4:da:27:15:81:92:b5:9f:73:02:7f:8e:c0:
         06:2e:c0:a1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAvck2YCYJ/z/Dj22AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwOTE4NDUwOFoXDTIzMDExNDA1MDAwMFowLzEtMCsGA1UEAxMk
MmExMjcxOWMtZGZmYi00MWM3LTlkZDYtMGQzY2JmNGE4NGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoIiQXpDcGnO1PB5Ejg4d3wMj8Loe12ab7P2
Jf1lQskKCHGQiGNUSASDJlj5XpmWMOEhLm/ZlIfUkPqCgeHOEr0JcSLfXzJJPsId
pRSJFF4cvNgon/31pm6EUW8vdOX1PyVGt2IyXKTl5pUQazPdno+uYuhAayFfP803
2sEGuABstFl62WgJk+6ThShaSSjw4VRg8ixlKPJzn+3NlvmS+A2BmIhrd15QwSEx
bWkIiy4njDjFyMzzivcBXUPNDy4eS7081niuDD2a57mg6B+ftbv958kZloqfMS2n
Li81dfIE0XQR7TN4RDrTacFfUtW3Pdiy9TQh0xV8VXDj3pNIjQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAz9VRWivGF3GBCCBm2CaybeFDbZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNzg4YTViMDAtMzM0My0z
OTBmLWEwZWEtNDQ1OGZmN2U0Nzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEDYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAD66xL3/ySOr35a2V9EDvYcbtxBLAfM7Lb51h/M1fs5QgixlgTyFdmZ/P
4GAEd+TeJtAeErxJqtX0GVWM3d6V3KaGtefASpO+8svSclvcUrfMUuzaC0j223Y7
aaMWKHGxIU7b7sgGeaLWDXUZwK5IyVg0gTDDYNBnfgLpsC2kySONO1/WI6qanoff
XniGvS2eg4rlUQChqK2GDvnmy8e0SmlWgDa0e86anMdRlq1EwKWJYfCcHQ+84ojJ
ATUyIig+Z+pCQ7QJPh3oJtOXP1VGH/NVI6A46IWIoV+2FTYnn73Ig2Jmst/NuHi8
N3gW8WPk2icVgZK1n3MCf47ABi7AoQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:54 2025 by rpki-client