Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ace1a58-2d68-3955-bd6b-f44a88b75dde.roa
File:                     8ace1a58-2d68-3955-bd6b-f44a88b75dde.roa (raw, json)
Hash identifier:          DJGMuyRCo5UIH3QGPSmpga4W8wqwkeGC1DP37TdissQ=
Subject key identifier:   27:FB:80:0F:BA:BD:A4:F0:BF:CE:58:CA:F0:1B:78:07:96:C3:F7:A4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E456196FF863576521BE05C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ace1a58-2d68-3955-bd6b-f44a88b75dde.roa
Signing time:             Thu 16 Jun 2022 12:00:00 +0000
ROA not before:           Thu 16 Jun 2022 12:00:00 +0000
ROA not after:            Fri 22 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        142.54.128.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:45:61:96:ff:86:35:76:52:1b:e0:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 16 12:00:00 2022 GMT
            Not After : Jul 22 04:00:00 2022 GMT
        Subject: CN=cdc52814-92d4-40bd-a1b9-f1d45ef007ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ea:9c:9d:90:5c:03:2b:70:40:3b:35:7e:c0:
                    5b:74:53:0b:56:3a:96:dc:89:47:2c:fa:48:97:7d:
                    25:54:10:6e:57:11:b5:c9:b8:da:ef:58:05:f4:11:
                    a5:7f:f1:fb:a8:00:7b:d9:8f:72:ed:af:ef:e5:47:
                    cb:4a:d1:6a:71:1f:22:24:0c:0e:4e:35:3d:36:13:
                    47:ac:16:25:f3:00:ff:22:04:84:18:d8:15:c6:e7:
                    13:e1:7b:b6:d8:8c:ee:27:21:9a:5e:9d:d3:db:a0:
                    36:2f:47:1d:2f:68:a8:29:d2:8e:03:f5:59:6a:e9:
                    df:09:ef:49:b9:14:bd:65:a3:46:4f:d4:e6:fe:9e:
                    57:7f:76:b4:a6:d8:8e:a0:8e:ee:71:bb:7e:88:39:
                    5d:c6:ae:b8:dd:03:c8:62:26:c2:fd:9c:4c:84:af:
                    98:9e:b7:a1:f4:cf:ae:e7:f4:03:21:c1:80:94:68:
                    9c:a8:31:2d:63:f1:74:88:38:7f:fa:16:11:3c:ef:
                    f5:6c:cc:97:77:35:1e:c8:fe:d9:d1:6b:87:31:38:
                    66:99:23:4f:a6:97:46:dd:f9:6f:20:65:6c:51:ba:
                    90:85:3d:aa:c1:d2:65:87:23:f6:d4:1b:93:3f:bc:
                    36:54:3c:58:04:22:df:03:35:c3:b5:83:ba:18:3f:
                    cd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FB:80:0F:BA:BD:A4:F0:BF:CE:58:CA:F0:1B:78:07:96:C3:F7:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ace1a58-2d68-3955-bd6b-f44a88b75dde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:2b:16:56:0b:eb:a1:ee:22:68:8b:95:72:eb:7e:1b:d4:bc:
         ce:0a:58:61:b3:d7:ab:f8:90:68:41:47:3f:d9:9b:ee:5d:ab:
         a1:26:9a:3e:d6:22:1a:1e:53:a9:a5:89:b8:91:83:ff:0e:99:
         2b:4a:90:f5:6c:9d:66:b9:28:f3:d9:41:50:ec:10:19:61:5b:
         56:40:55:86:65:86:fd:a0:38:77:52:0c:f8:c8:95:a9:da:04:
         6d:cb:03:3d:e6:da:b9:03:10:49:ef:06:30:eb:63:88:8d:a8:
         99:f0:36:17:a7:07:fc:2e:83:2d:c4:15:78:01:53:f7:11:3a:
         8b:47:fa:b2:db:2e:0f:3c:5e:dc:a7:42:42:8e:33:83:26:d0:
         3b:95:d7:10:25:b9:89:be:44:b7:bc:ea:2f:69:1e:05:a7:1f:
         c8:f1:01:98:bb:c5:68:1d:dd:e1:1c:07:3d:ff:60:a4:e1:b9:
         b9:3e:68:e5:20:0a:db:ab:4b:32:46:56:98:e4:d7:dc:ab:67:
         b3:72:e0:1e:ee:7e:94:42:68:5d:61:8f:4d:a0:ac:0d:2b:1b:
         fb:d4:3c:3d:ca:a2:25:6b:c6:d4:c9:df:95:88:aa:86:01:25:
         39:f5:02:f8:d6:a2:28:c0:8c:b1:c2:72:9d:65:3a:54:fc:2c:
         a2:83:ad:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD5FYZb/hjV2UhvgXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYxNjEyMDAwMFoXDTIyMDcyMjA0MDAwMFowLzEtMCsGA1UEAxMk
Y2RjNTI4MTQtOTJkNC00MGJkLWExYjktZjFkNDVlZjAwN2FlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuqcnZBcAytwQDs1fsBbdFMLVjqW3IlHLPpI
l30lVBBuVxG1ybja71gF9BGlf/H7qAB72Y9y7a/v5UfLStFqcR8iJAwOTjU9NhNH
rBYl8wD/IgSEGNgVxucT4Xu22IzuJyGaXp3T26A2L0cdL2ioKdKOA/VZaunfCe9J
uRS9ZaNGT9Tm/p5Xf3a0ptiOoI7ucbt+iDldxq643QPIYibC/ZxMhK+Ynreh9M+u
5/QDIcGAlGicqDEtY/F0iDh/+hYRPO/1bMyXdzUeyP7Z0WuHMThmmSNPppdG3flv
IGVsUbqQhT2qwdJlhyP21BuTP7w2VDxYBCLfAzXDtYO6GD/NZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCf7gA+6vaTwv85YyvAbeAeWw/ekMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOGFjZTFhNTgtMmQ2OC0z
OTU1LWJkNmItZjQ0YTg4Yjc1ZGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjjaAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAIrFlYL66HuImiLlXLrfhvUvM4KWGGz16v4kGhBRz/Zm+5dq6Emmj7W
IhoeU6mlibiRg/8OmStKkPVsnWa5KPPZQVDsEBlhW1ZAVYZlhv2gOHdSDPjIlana
BG3LAz3m2rkDEEnvBjDrY4iNqJnwNhenB/wugy3EFXgBU/cROotH+rLbLg88Xtyn
QkKOM4Mm0DuV1xAluYm+RLe86i9pHgWnH8jxAZi7xWgd3eEcBz3/YKThubk+aOUg
CturSzJGVpjk19yrZ7Ny4B7ufpRCaF1hj02grA0rG/vUPD3KoiVrxtTJ35WIqoYB
JTn1AvjWoijAjLHCcp1lOlT8LKKDrQM=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:01 2025 by rpki-client