Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8babe291-4a0b-32f8-827e-f230896613f6.roa
File:                     8babe291-4a0b-32f8-827e-f230896613f6.roa (raw, json)
Hash identifier:          v4zNIkKkDiIa+JH9vxZo7srz85PzwiekzvjKh+IV7Nc=
Subject key identifier:   37:68:C1:8A:A8:8A:47:63:E5:C7:E4:26:11:F7:3A:DC:31:C0:15:AF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E19BB49B1793E1F26F7312400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8babe291-4a0b-32f8-827e-f230896613f6.roa
Signing time:             Wed 01 Jun 2022 12:00:00 +0000
ROA not before:           Wed 01 Jun 2022 12:00:00 +0000
ROA not after:            Thu 07 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.129.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:19:bb:49:b1:79:3e:1f:26:f7:31:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun  1 12:00:00 2022 GMT
            Not After : Jul  7 04:00:00 2022 GMT
        Subject: CN=8b8a7768-e5ce-471f-a796-d2cf1b2ef700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:02:db:58:6f:68:be:d6:9b:e2:34:b9:29:ed:
                    06:55:2a:c1:55:cd:20:c7:29:cb:0b:9e:b9:07:27:
                    08:06:d1:cb:3f:9e:1f:d1:f8:0f:99:f2:e2:d0:40:
                    39:62:55:fa:31:be:e6:94:47:d6:da:f3:98:f3:a9:
                    9f:93:06:4f:fd:7c:73:a3:a0:b5:9d:8e:d8:2d:a0:
                    c0:7e:26:43:36:89:78:aa:2c:99:85:c5:c3:5d:a9:
                    27:18:ea:38:2e:78:25:83:21:28:79:62:7e:db:62:
                    01:10:0e:8d:b0:d6:da:f2:e9:41:55:5b:8d:3b:7e:
                    bf:e7:8c:86:c9:e5:48:28:c7:d6:80:9a:3e:90:fd:
                    3c:a5:c8:89:ba:8e:f1:3b:e9:40:67:b7:8a:b0:3f:
                    f5:52:f4:e8:7a:98:c1:0f:96:8e:66:56:1d:ca:b8:
                    de:26:3e:c2:08:60:cf:5b:00:00:ae:ce:be:37:fc:
                    ca:73:fc:da:98:3d:6b:59:c5:24:75:2f:c5:71:06:
                    50:d8:00:fc:53:3e:29:d8:f2:0e:b6:7f:f5:1b:6f:
                    18:51:e8:04:5c:5a:ff:00:50:6d:64:df:c7:76:2b:
                    e5:0c:ca:15:ee:4c:ac:d7:d7:fd:91:37:5b:33:13:
                    06:f8:bf:f2:08:e5:42:74:73:b9:25:d8:98:f3:4c:
                    37:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:68:C1:8A:A8:8A:47:63:E5:C7:E4:26:11:F7:3A:DC:31:C0:15:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8babe291-4a0b-32f8-827e-f230896613f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.129.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:15:e3:82:23:74:94:66:8c:a6:c0:02:da:14:4a:5b:ea:f5:
         8e:cd:48:e8:1f:32:3e:aa:86:dd:f7:a7:0b:4b:62:5a:85:f0:
         c3:69:61:03:91:b7:e8:be:cb:65:7a:ec:20:52:5a:6e:ed:59:
         60:e2:f7:83:a7:94:4f:1e:c5:21:ba:3f:a7:b1:91:53:be:5b:
         26:69:84:62:35:72:f1:50:8f:98:27:43:65:ca:8f:dd:03:ef:
         05:70:81:40:6a:73:f0:16:78:af:44:f1:16:52:66:17:47:b6:
         ee:5b:ce:fd:bc:ea:58:7c:3c:4a:8d:d3:9c:40:ef:0d:53:3f:
         ea:7f:55:f4:d2:a3:de:f9:84:1c:dc:ee:d4:0d:41:ba:79:1c:
         ac:2f:12:84:92:9f:a9:4b:85:84:63:0f:d1:9a:49:86:5a:c6:
         cb:6a:20:a8:6f:d3:89:69:5b:5b:fd:68:63:14:ee:65:5b:41:
         c6:2d:b8:ac:d4:ed:45:64:cb:8b:36:2d:8f:50:c8:31:dd:59:
         1a:44:d4:34:49:a1:58:f1:b8:fc:b2:74:d5:16:7a:4b:56:f5:
         aa:05:e4:f9:5e:39:63:3c:08:39:eb:4c:e8:3b:55:fd:d0:af:
         82:48:53:14:1d:81:e0:b9:8d:0f:1c:6c:5a:ad:ab:8b:b2:6b:
         e6:d8:db:a8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4Zu0mxeT4fJvcxJAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYwMTEyMDAwMFoXDTIyMDcwNzA0MDAwMFowLzEtMCsGA1UEAxMk
OGI4YTc3NjgtZTVjZS00NzFmLWE3OTYtZDJjZjFiMmVmNzAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQLbWG9ovtab4jS5Ke0GVSrBVc0gxynLC565
BycIBtHLP54f0fgPmfLi0EA5YlX6Mb7mlEfW2vOY86mfkwZP/Xxzo6C1nY7YLaDA
fiZDNol4qiyZhcXDXaknGOo4LnglgyEoeWJ+22IBEA6NsNba8ulBVVuNO36/54yG
yeVIKMfWgJo+kP08pciJuo7xO+lAZ7eKsD/1UvToepjBD5aOZlYdyrjeJj7CCGDP
WwAArs6+N/zKc/zamD1rWcUkdS/FcQZQ2AD8Uz4p2PIOtn/1G28YUegEXFr/AFBt
ZN/HdivlDMoV7kys19f9kTdbMxMG+L/yCOVCdHO5JdiY80w30QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDdowYqoikdj5cfkJhH3OtwxwBWvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOGJhYmUyOTEtNGEwYi0z
MmY4LTgyN2UtZjIzMDg5NjYxM2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEIEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAThXjgiN0lGaMpsAC2hRKW+r1js1I6B8yPqqG3fenC0tiWoXww2lhA5G3
6L7LZXrsIFJabu1ZYOL3g6eUTx7FIbo/p7GRU75bJmmEYjVy8VCPmCdDZcqP3QPv
BXCBQGpz8BZ4r0TxFlJmF0e27lvO/bzqWHw8So3TnEDvDVM/6n9V9NKj3vmEHNzu
1A1BunkcrC8ShJKfqUuFhGMP0ZpJhlrGy2ogqG/TiWlbW/1oYxTuZVtBxi24rNTt
RWTLizYtj1DIMd1ZGkTUNEmhWPG4/LJ01RZ6S1b1qgXk+V45YzwIOetM6DtV/dCv
gkhTFB2B4LmNDxxsWq2ri7Jr5tjbqA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:34 2025 by rpki-client