Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/87286769-02a5-333f-aa46-9475bd035859.roa
File:                     87286769-02a5-333f-aa46-9475bd035859.roa (raw, json)
Hash identifier:          pM+4ELBj6L1uOxEo/4k89o2DZVOBRGoJQ9Ppwv6hLDw=
Subject key identifier:   B5:4F:72:F9:9C:58:8B:49:A8:71:C3:26:5C:6D:1B:84:5D:2B:C8:AC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D08513287E13521D1406A2E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/87286769-02a5-333f-aa46-9475bd035859.roa
Signing time:             Thu 24 Feb 2022 05:00:00 +0000
ROA not before:           Thu 24 Feb 2022 05:00:00 +0000
ROA not after:            Thu 31 Mar 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.116.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:08:51:32:87:e1:35:21:d1:40:6a:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 24 05:00:00 2022 GMT
            Not After : Mar 31 04:00:00 2022 GMT
        Subject: CN=839ccd23-ab05-4070-ba40-0361087f6cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a4:5e:58:6e:37:ce:8b:89:40:a2:f7:8e:32:
                    de:4a:ac:f0:79:ae:e7:c1:55:88:72:9e:a4:59:fb:
                    10:79:e1:9d:ba:bf:24:73:5d:3b:80:bf:1c:90:af:
                    a1:45:bd:13:03:c0:37:af:f7:35:25:8b:bd:b0:0c:
                    2e:25:ba:bd:8c:65:18:27:82:a5:91:be:82:7f:a1:
                    aa:dc:42:c2:35:65:48:f4:94:03:7b:16:a3:52:c2:
                    13:bf:40:fe:3f:62:1d:d9:7a:8f:f7:48:b1:c6:aa:
                    0e:a6:18:18:34:9d:64:8a:e6:42:91:3f:90:67:6a:
                    a0:e7:8b:d5:eb:d6:43:8f:a5:6b:87:d6:8c:12:da:
                    62:59:ac:c1:02:15:72:02:53:ff:58:05:a8:39:df:
                    9d:67:49:30:9e:92:17:ec:fd:de:51:7e:a8:d7:d7:
                    ad:ac:d0:e1:c5:7b:ae:e8:3e:48:d1:22:e9:a5:aa:
                    9c:ae:a5:26:3d:9e:37:89:5d:d6:fa:f9:13:16:ee:
                    44:61:1a:05:2b:80:77:25:f1:94:0f:d9:2a:8d:55:
                    9a:8f:e5:fe:b6:ea:bc:a5:b1:75:0b:fe:56:28:46:
                    ee:9e:38:c2:c4:1c:51:e3:b2:82:94:3f:98:70:0f:
                    b0:e5:f6:a1:f6:4e:99:25:76:b9:51:52:8f:11:33:
                    45:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4F:72:F9:9C:58:8B:49:A8:71:C3:26:5C:6D:1B:84:5D:2B:C8:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/87286769-02a5-333f-aa46-9475bd035859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.116.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:0c:59:2c:d8:62:f6:40:dc:f7:01:c4:34:86:af:09:e4:07:
         1e:a8:ee:db:f2:86:bf:ef:b5:45:49:4b:19:c7:8d:f9:a0:cb:
         c9:27:c5:31:5c:ba:c1:0f:da:50:73:f1:94:f2:c4:f2:c2:9d:
         91:eb:2b:02:c2:15:7e:4e:53:4d:d5:05:45:de:02:e2:58:e5:
         82:46:e8:74:a7:5e:dc:d3:ac:c8:31:64:90:d3:31:8a:fd:ab:
         06:a7:66:21:b5:d9:6b:82:80:6a:21:f5:2d:db:8a:e4:6d:ee:
         1c:53:62:ec:7f:69:39:23:dd:25:e6:e0:be:30:f0:90:13:17:
         92:f6:06:8f:ea:58:21:bd:25:42:0f:8d:64:35:d3:76:cd:da:
         51:33:6b:94:5c:14:b2:63:88:1a:cf:26:0b:ea:5a:8d:3a:4f:
         3a:13:4a:47:6e:fe:2b:d6:2b:14:e2:8f:ae:51:c6:1a:b5:d8:
         1d:e0:dc:d7:04:a2:ce:23:98:a0:5f:7a:9d:61:26:3c:69:45:
         e7:2a:c1:83:61:c4:79:2a:82:91:21:31:6c:71:f5:b9:37:2e:
         91:5e:d7:3a:ec:3c:6f:da:ff:bf:43:ab:92:03:ca:1c:22:30:
         c8:fa:1b:ef:56:a5:f7:f9:e6:59:e3:bb:41:33:cd:a5:bb:d9:
         c6:0d:d0:50
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0IUTKH4TUh0UBqLoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDIyNDA1MDAwMFoXDTIyMDMzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ODM5Y2NkMjMtYWIwNS00MDcwLWJhNDAtMDM2MTA4N2Y2Y2VlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaReWG43zouJQKL3jjLeSqzwea7nwVWIcp6k
WfsQeeGdur8kc107gL8ckK+hRb0TA8A3r/c1JYu9sAwuJbq9jGUYJ4Klkb6Cf6Gq
3ELCNWVI9JQDexajUsITv0D+P2Id2XqP90ixxqoOphgYNJ1kiuZCkT+QZ2qg54vV
69ZDj6Vrh9aMEtpiWazBAhVyAlP/WAWoOd+dZ0kwnpIX7P3eUX6o19etrNDhxXuu
6D5I0SLppaqcrqUmPZ43iV3W+vkTFu5EYRoFK4B3JfGUD9kqjVWaj+X+tuq8pbF1
C/5WKEbunjjCxBxR47KClD+YcA+w5fah9k6ZJXa5UVKPETNFdQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLVPcvmcWItJqHHDJlxtG4RdK8isMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvODcyODY3NjktMDJhNS0z
MzNmLWFhNDYtOTQ3NWJkMDM1ODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEHQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAcwxZLNhi9kDc9wHENIavCeQHHqju2/KGv++1RUlLGceN+aDLySfFMVy6
wQ/aUHPxlPLE8sKdkesrAsIVfk5TTdUFRd4C4ljlgkbodKde3NOsyDFkkNMxiv2r
BqdmIbXZa4KAaiH1LduK5G3uHFNi7H9pOSPdJebgvjDwkBMXkvYGj+pYIb0lQg+N
ZDXTds3aUTNrlFwUsmOIGs8mC+pajTpPOhNKR27+K9YrFOKPrlHGGrXYHeDc1wSi
ziOYoF96nWEmPGlF5yrBg2HEeSqCkSExbHH1uTcukV7XOuw8b9r/v0OrkgPKHCIw
yPob71al9/nmWeO7QTPNpbvZxg3QUA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:24 2025 by rpki-client