Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8695690c-a215-316a-bfba-d60c7a2953b9.roa
File:                     8695690c-a215-316a-bfba-d60c7a2953b9.roa (raw, json)
Hash identifier:          4g859mZ2ko37CS9RVcHPZ87vzU67/rKJjU781T0zo80=
Subject key identifier:   CC:BE:2B:09:CB:6F:C1:C0:2E:44:C9:E6:93:C5:BB:8D:68:AB:29:72
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E6D995B30773C1853D9FA5D10
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8695690c-a215-316a-bfba-d60c7a2953b9.roa
Signing time:             Fri 01 Jul 2022 12:00:00 +0000
ROA not before:           Fri 01 Jul 2022 12:00:00 +0000
ROA not after:            Sat 06 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        204.130.202.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6d:99:5b:30:77:3c:18:53:d9:fa:5d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul  1 12:00:00 2022 GMT
            Not After : Aug  6 04:00:00 2022 GMT
        Subject: CN=bf81afbc-8b54-4e4d-bcba-97cf87b511ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:39:b5:7d:06:87:0b:2d:7b:73:06:ea:94:19:
                    f3:d2:fb:c2:74:62:de:9a:fe:b7:17:58:b9:4a:2b:
                    58:ef:4b:c8:b1:77:fd:b5:d3:27:91:8d:3a:93:77:
                    c1:ec:3f:9e:ba:7e:5a:f2:e5:94:58:41:0e:c0:dd:
                    01:ee:b8:0e:a2:b9:e6:93:3b:9e:bc:44:f8:77:55:
                    ef:44:66:f1:a1:60:5b:39:c5:d2:22:c9:20:c9:da:
                    aa:3c:bf:91:33:c8:92:cb:6f:c8:dd:19:37:75:fc:
                    28:49:67:d9:7c:39:90:71:49:19:a0:15:b2:09:b2:
                    22:cd:26:96:d1:13:59:14:ad:df:34:14:a6:6e:e2:
                    6a:53:fb:43:04:25:87:79:a7:9f:1f:e2:0f:4d:6b:
                    1a:47:81:2b:e8:ee:2c:e2:b3:b0:a0:2f:6b:29:71:
                    4c:4c:85:d4:6d:46:87:53:f3:d4:6e:8c:c6:78:ad:
                    22:91:92:20:2c:de:9c:8c:59:8c:9c:5e:47:ef:2b:
                    90:1e:60:80:0a:84:45:e7:ad:5d:f2:1f:49:1a:aa:
                    0d:ac:dc:cd:28:88:3e:cc:4e:5b:c6:89:67:48:38:
                    95:db:a1:31:d1:97:74:e2:8f:33:71:4d:46:c7:82:
                    a7:21:90:50:f0:ec:c6:41:a6:a1:bf:62:fd:0a:43:
                    32:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BE:2B:09:CB:6F:C1:C0:2E:44:C9:E6:93:C5:BB:8D:68:AB:29:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8695690c-a215-316a-bfba-d60c7a2953b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.130.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:43:bd:05:1a:77:65:ea:d7:01:d1:3b:50:b3:ac:41:8d:08:
         65:45:47:aa:46:7a:fb:a1:59:14:13:bf:67:76:ae:4d:46:f0:
         06:5f:c0:46:f9:5a:b2:5b:8a:1c:ba:dd:b2:63:02:96:8b:fe:
         69:5a:df:87:5f:1c:8e:84:72:20:ee:7c:39:c4:3f:e6:a9:2e:
         7a:03:d9:56:1a:93:5f:b9:6b:df:d4:12:60:13:14:25:36:64:
         94:77:34:89:b5:30:09:9e:dd:3f:f3:4f:21:38:c0:a9:8b:1b:
         f2:49:94:e1:79:7c:5a:24:5c:ff:bc:d2:66:45:ec:cc:86:3f:
         ca:2e:df:15:12:0d:b2:81:b7:b6:3f:53:21:72:51:7e:95:42:
         9b:ea:ca:d1:2d:57:27:e9:66:d4:f7:66:dc:76:cc:85:6f:b7:
         9e:98:ed:79:2d:4f:3e:cd:5a:1b:06:51:8a:80:55:8f:fb:d1:
         69:76:19:9d:ec:ed:36:69:0c:95:11:d9:64:4a:19:ea:9c:54:
         96:24:42:d6:de:41:e3:c4:7c:b3:22:06:2e:d9:46:b9:82:7e:
         dd:c5:c1:9f:13:12:26:74:2f:46:b3:da:9a:f0:75:44:e7:00:
         32:f4:49:f8:79:45:c6:f4:be:88:0f:70:c7:a2:12:fb:31:3f:
         4f:07:99:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD5tmVswdzwYU9n6XRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcwMTEyMDAwMFoXDTIyMDgwNjA0MDAwMFowLzEtMCsGA1UEAxMk
YmY4MWFmYmMtOGI1NC00ZTRkLWJjYmEtOTdjZjg3YjUxMWVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzm1fQaHCy17cwbqlBnz0vvCdGLemv63F1i5
SitY70vIsXf9tdMnkY06k3fB7D+eun5a8uWUWEEOwN0B7rgOornmkzuevET4d1Xv
RGbxoWBbOcXSIskgydqqPL+RM8iSy2/I3Rk3dfwoSWfZfDmQcUkZoBWyCbIizSaW
0RNZFK3fNBSmbuJqU/tDBCWHeaefH+IPTWsaR4Er6O4s4rOwoC9rKXFMTIXUbUaH
U/PUbozGeK0ikZIgLN6cjFmMnF5H7yuQHmCACoRF561d8h9JGqoNrNzNKIg+zE5b
xolnSDiV26Ex0Zd04o8zcU1Gx4KnIZBQ8OzGQaahv2L9CkMy2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMy+KwnLb8HALkTJ5pPFu41oqylyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvODY5NTY5MGMtYTIxNS0z
MTZhLWJmYmEtZDYwYzdhMjk1M2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzILKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADtDvQUad2Xq1wHRO1CzrEGNCGVFR6pGevuhWRQTv2d2rk1G8AZfwEb5
WrJbihy63bJjApaL/mla34dfHI6EciDufDnEP+apLnoD2VYak1+5a9/UEmATFCU2
ZJR3NIm1MAme3T/zTyE4wKmLG/JJlOF5fFokXP+80mZF7MyGP8ou3xUSDbKBt7Y/
UyFyUX6VQpvqytEtVyfpZtT3Ztx2zIVvt56Y7XktTz7NWhsGUYqAVY/70Wl2GZ3s
7TZpDJUR2WRKGeqcVJYkQtbeQePEfLMiBi7ZRrmCft3FwZ8TEiZ0L0az2prwdUTn
ADL0Sfh5Rcb0vogPcMeiEvsxP08HmUw=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:22 2025 by rpki-client