Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7e7f4158-0ecc-36bd-9462-4b6d931e3a03.roa
File:                     7e7f4158-0ecc-36bd-9462-4b6d931e3a03.roa (raw, json)
Hash identifier:          +Ll+OG+pnGxyb9ggKxncXz6UaJDvNXXTw7cBB3oAlU8=
Subject key identifier:   76:22:32:B3:23:97:EA:6B:F4:CC:5B:CD:20:A6:D8:D0:78:B2:3A:A9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D806B41867F3B6AF063624A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7e7f4158-0ecc-36bd-9462-4b6d931e3a03.roa
Signing time:             Fri 08 Apr 2022 04:00:00 +0000
ROA not before:           Fri 08 Apr 2022 04:00:00 +0000
ROA not after:            Fri 13 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.170.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:80:6b:41:86:7f:3b:6a:f0:63:62:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr  8 04:00:00 2022 GMT
            Not After : May 13 04:00:00 2022 GMT
        Subject: CN=bad62ac8-9ccb-4d52-a116-ade5d5a064b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:48:65:5b:77:5b:1e:44:33:56:ab:12:19:58:
                    b2:be:da:40:26:0a:43:33:5e:a4:e6:96:f5:7d:19:
                    91:8c:c1:d8:bf:09:93:79:51:48:09:a5:ef:1f:4a:
                    96:95:2f:46:26:89:0a:07:e9:75:d4:3f:ce:3c:91:
                    ff:d2:64:bc:7f:58:c3:fd:70:29:96:8d:bd:2f:3e:
                    03:56:de:4c:59:c8:58:2e:12:fd:c3:51:6d:cc:5d:
                    9e:c3:d9:cb:c0:2f:0c:5b:ae:6d:09:4a:17:7b:84:
                    b3:37:78:d4:47:7f:80:a8:ad:be:3a:04:eb:79:60:
                    1c:cb:96:90:76:e1:1c:d2:f7:cf:d1:52:32:0a:1a:
                    ea:0a:d3:7f:f8:b5:9d:64:c3:4a:65:d9:55:0f:94:
                    09:15:ec:a7:e7:da:94:47:64:b0:ed:f1:21:03:1b:
                    7b:86:e4:72:92:f3:69:98:78:fd:2e:a5:dd:24:a9:
                    be:73:20:2a:50:97:c3:7b:e4:30:d5:38:ad:89:cb:
                    bd:c7:f3:0a:64:9a:89:82:8d:59:98:01:2b:11:94:
                    52:74:8e:87:0b:bd:ef:4f:52:69:fd:54:b3:d1:1f:
                    d7:c4:60:68:4d:44:b9:ee:54:c8:3d:f4:b0:cd:df:
                    ac:e4:a7:b5:3e:77:12:5b:14:36:56:1d:b8:89:3c:
                    13:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:22:32:B3:23:97:EA:6B:F4:CC:5B:CD:20:A6:D8:D0:78:B2:3A:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7e7f4158-0ecc-36bd-9462-4b6d931e3a03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.170.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:19:94:b3:9c:cd:d2:c5:a0:0a:fb:e3:b9:16:26:d3:90:6f:
         ee:88:74:8c:01:84:fb:c6:67:89:f9:c5:50:8b:b4:c0:a4:e7:
         2d:c5:3e:31:b4:89:f5:4d:77:02:d4:36:79:ec:4f:ea:bc:cd:
         a5:be:58:d0:d8:a3:11:de:2d:f4:b9:a8:1e:29:82:a7:7b:d3:
         09:db:85:4b:97:e4:f3:29:f4:0a:a1:e3:06:c3:35:fa:0b:75:
         38:01:61:2a:32:c3:e9:33:9d:83:93:02:ac:75:07:10:e9:56:
         a9:68:3d:b5:54:d2:3f:04:23:26:5b:a1:64:c0:18:1b:ea:0f:
         12:c7:69:a6:4a:bc:e5:63:7a:0e:cc:1c:5a:6d:bb:35:92:06:
         9b:a8:3e:40:f7:9f:b1:54:7f:67:ae:9e:fa:19:35:e3:3e:45:
         47:91:29:ec:2f:3c:a2:e3:f7:14:db:1f:23:ae:ff:2d:01:91:
         f7:8e:cc:14:da:b4:9e:fd:0f:b1:bb:35:7b:94:70:bf:a9:a6:
         f9:c2:06:a8:69:71:34:e7:3a:34:8d:df:26:ab:d2:15:84:89:
         89:e4:9c:41:78:91:d2:33:bf:e7:56:32:4e:83:d6:fb:85:e4:
         21:a7:3a:e7:53:39:02:ef:b3:33:cf:85:2c:ac:e1:9a:20:0c:
         61:51:7c:4b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2Aa0GGfztq8GNiSoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDQwODA0MDAwMFoXDTIyMDUxMzA0MDAwMFowLzEtMCsGA1UEAxMk
YmFkNjJhYzgtOWNjYi00ZDUyLWExMTYtYWRlNWQ1YTA2NGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUhlW3dbHkQzVqsSGViyvtpAJgpDM16k5pb1
fRmRjMHYvwmTeVFICaXvH0qWlS9GJokKB+l11D/OPJH/0mS8f1jD/XAplo29Lz4D
Vt5MWchYLhL9w1FtzF2ew9nLwC8MW65tCUoXe4SzN3jUR3+AqK2+OgTreWAcy5aQ
duEc0vfP0VIyChrqCtN/+LWdZMNKZdlVD5QJFeyn59qUR2Sw7fEhAxt7huRykvNp
mHj9LqXdJKm+cyAqUJfDe+Qw1Titicu9x/MKZJqJgo1ZmAErEZRSdI6HC73vT1Jp
/VSz0R/XxGBoTUS57lTIPfSwzd+s5Ke1PncSWxQ2Vh24iTwT4wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHYiMrMjl+pr9MxbzSCm2NB4sjqpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvN2U3ZjQxNTgtMGVjYy0z
NmJkLTk0NjItNGI2ZDkzMWUzYTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEKowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPhmUs5zN0sWgCvvjuRYm05Bv7oh0jAGE+8ZnifnFUIu0wKTnLcU+MbSJ
9U13AtQ2eexP6rzNpb5Y0NijEd4t9LmoHimCp3vTCduFS5fk8yn0CqHjBsM1+gt1
OAFhKjLD6TOdg5MCrHUHEOlWqWg9tVTSPwQjJluhZMAYG+oPEsdppkq85WN6Dswc
Wm27NZIGm6g+QPefsVR/Z66e+hk14z5FR5Ep7C88ouP3FNsfI67/LQGR947MFNq0
nv0Psbs1e5Rwv6mm+cIGqGlxNOc6NI3fJqvSFYSJieScQXiR0jO/51YyToPW+4Xk
Iac651M5Au+zM8+FLKzhmiAMYVF8Sw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:39 2025 by rpki-client