Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8153598c-6b75-3442-9730-f23c13f8ab94.roa
File:                     8153598c-6b75-3442-9730-f23c13f8ab94.roa (raw, json)
Hash identifier:          waGvdjtZVQkvNNwJ2BmYwxfxLYK06wu3O6vJbwe/eck=
Subject key identifier:   FF:7A:C3:1B:4B:9F:B5:EC:9B:76:92:17:96:BC:BA:CD:1D:06:84:A1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FEC632D3C7F6BFAA81AC28180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8153598c-6b75-3442-9730-f23c13f8ab94.roa
Signing time:             Tue 15 Nov 2022 15:06:07 +0000
ROA not before:           Tue 15 Nov 2022 15:06:07 +0000
ROA not after:            Wed 21 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        151.150.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ec:63:2d:3c:7f:6b:fa:a8:1a:c2:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 15 15:06:07 2022 GMT
            Not After : Dec 21 05:00:00 2022 GMT
        Subject: CN=8353f7b2-53eb-45db-964f-b6e792332962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:11:4e:86:88:6f:f5:5f:95:a6:4c:af:e3:88:
                    e3:31:b9:ee:3b:9f:19:a0:c3:a1:c0:95:5b:dd:4b:
                    97:99:c0:b0:67:bc:5f:ef:c5:db:d2:cd:4d:c1:8a:
                    31:12:41:59:22:02:04:2b:48:02:46:16:16:b4:da:
                    3d:41:1f:ca:2b:04:af:1a:60:96:f5:f1:15:e0:a4:
                    f1:15:41:f7:74:1a:04:ac:a2:3a:9b:0b:de:9b:b1:
                    e5:75:02:26:79:59:6c:07:02:59:0e:0e:7e:03:ec:
                    db:47:1b:98:86:a3:88:82:39:3f:72:f1:d7:a4:1b:
                    29:59:ca:b5:54:a4:99:05:ad:3d:d7:da:d3:b5:9b:
                    b0:36:c7:ad:91:20:cb:e1:f8:99:a3:0a:df:4f:8a:
                    3b:73:b0:63:67:4c:15:af:b1:35:89:e9:ef:0f:dd:
                    19:66:13:79:09:4d:64:72:a7:14:b5:8f:b4:a6:a2:
                    f5:0c:a8:ab:5e:3e:03:65:7a:a5:19:65:eb:4b:0c:
                    73:18:43:1e:33:d7:f4:32:72:dd:97:7d:d5:cd:6f:
                    33:ee:2d:c3:c4:48:2f:e5:84:cc:ab:ac:93:a2:fa:
                    dc:6a:46:b8:a0:97:e0:ed:ab:49:b6:91:cc:40:d9:
                    3b:b2:9f:c0:b0:78:8c:aa:a3:e7:58:01:3d:85:ab:
                    ae:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7A:C3:1B:4B:9F:B5:EC:9B:76:92:17:96:BC:BA:CD:1D:06:84:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8153598c-6b75-3442-9730-f23c13f8ab94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.150.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:3a:fe:ad:2b:c0:53:e6:7b:b4:74:15:ec:58:ef:38:c8:aa:
         39:c4:d4:cd:a0:e1:9f:94:92:86:ba:10:93:8d:03:0b:3e:d6:
         59:b8:d4:0d:7e:d9:4d:eb:76:c4:55:81:d8:da:cf:d9:90:26:
         3e:88:86:10:a5:2a:35:87:2d:cc:ab:f8:e9:41:c3:be:f9:8f:
         ed:3c:65:f4:78:12:56:39:8b:a4:da:06:0f:dc:14:cd:fd:51:
         7b:7c:a9:90:c3:fa:99:61:9f:5c:8a:38:ee:91:c7:4f:27:a7:
         60:d4:13:73:ce:9a:2c:20:74:32:71:48:b0:ce:b8:75:70:11:
         af:6a:8b:66:4f:4b:11:19:c7:fd:52:e6:ab:f4:6e:fb:58:39:
         66:e3:94:8d:25:e7:aa:b1:e2:b2:eb:b2:2f:73:f7:e0:55:e4:
         3c:06:99:db:df:69:6a:cc:8e:b5:fd:25:a1:34:2d:cc:20:95:
         fb:5b:b5:33:63:a4:d1:37:d7:1a:7f:e9:9e:72:24:ff:a5:cc:
         dd:c7:24:fa:62:e5:bc:9f:d6:05:14:f4:50:7e:cf:e4:db:ee:
         39:2e:2f:f9:11:5c:50:f8:22:c2:d2:d0:3b:b7:f8:1c:b9:85:
         41:99:c2:cb:06:ac:93:5d:d6:74:ca:74:8e:4a:dc:9b:0b:2c:
         74:49:09:19
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/sYy08f2v6qBrCgYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTExNTE1MDYwN1oXDTIyMTIyMTA1MDAwMFowLzEtMCsGA1UEAxMk
ODM1M2Y3YjItNTNlYi00NWRiLTk2NGYtYjZlNzkyMzMyOTYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxFOhohv9V+Vpkyv44jjMbnuO58ZoMOhwJVb
3UuXmcCwZ7xf78Xb0s1NwYoxEkFZIgIEK0gCRhYWtNo9QR/KKwSvGmCW9fEV4KTx
FUH3dBoErKI6mwvem7HldQImeVlsBwJZDg5+A+zbRxuYhqOIgjk/cvHXpBspWcq1
VKSZBa0919rTtZuwNsetkSDL4fiZowrfT4o7c7BjZ0wVr7E1ienvD90ZZhN5CU1k
cqcUtY+0pqL1DKirXj4DZXqlGWXrSwxzGEMeM9f0MnLdl33VzW8z7i3DxEgv5YTM
q6yTovrcaka4oJfg7atJtpHMQNk7sp/AsHiMqqPnWAE9hauuKQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFP96wxtLn7Xsm3aSF5a8us0dBoShMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvODE1MzU5OGMtNmI3NS0z
NDQyLTk3MzAtZjIzYzEzZjhhYjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAl5YwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAIjr+rSvAU+Z7tHQV7FjvOMiqOcTUzaDhn5SShroQk40DCz7WWbjUDX7Z
Tet2xFWB2NrP2ZAmPoiGEKUqNYctzKv46UHDvvmP7Txl9HgSVjmLpNoGD9wUzf1R
e3ypkMP6mWGfXIo47pHHTyenYNQTc86aLCB0MnFIsM64dXARr2qLZk9LERnH/VLm
q/Ru+1g5ZuOUjSXnqrHisuuyL3P34FXkPAaZ299pasyOtf0loTQtzCCV+1u1M2Ok
0TfXGn/pnnIk/6XM3cck+mLlvJ/WBRT0UH7P5NvuOS4v+RFcUPgiwtLQO7f4HLmF
QZnCywask13WdMp0jkrcmwssdEkJGQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:28 2025 by rpki-client