Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8bb08707-9c2d-39a4-8d62-570f621388fa.roa
File:                     8bb08707-9c2d-39a4-8d62-570f621388fa.roa (raw, json)
Hash identifier:          V8Q4r2jHkTzYU2H2Vnaegp2q6EQue2YFNwbGYYY3wW8=
Subject key identifier:   BE:C1:60:EF:72:19:D4:E4:3D:4E:CC:5B:4D:98:05:12:0A:D4:6F:95
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DAAF6BE729F4F5EC53DBD9D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8bb08707-9c2d-39a4-8d62-570f621388fa.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        75.2.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:aa:f6:be:72:9f:4f:5e:c5:3d:bd:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=c185a1f3-382e-45fa-b60d-d87eb90a5bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8a:d9:31:d7:be:8e:7c:10:a1:cc:c7:c7:0e:
                    6a:aa:43:92:9d:e1:81:44:a2:8b:3a:ba:d4:28:65:
                    65:44:f4:28:ce:e0:f0:26:ec:04:00:ea:46:4c:65:
                    31:a8:36:11:a0:47:3a:b4:1d:45:fa:85:0e:8f:1c:
                    17:47:92:6d:89:d5:70:ae:0a:96:8f:cd:af:74:58:
                    33:f7:7c:9b:88:c8:c7:d5:6b:ea:f2:80:64:b4:78:
                    64:6c:81:d9:e2:1e:06:15:93:df:7b:63:ae:02:39:
                    e6:e3:2a:b8:76:3c:d7:c1:6c:4e:77:d1:92:98:7a:
                    01:bc:1c:31:c9:30:ec:cc:c5:7f:97:cb:3e:19:b3:
                    b1:ca:cc:7a:6f:a1:b7:e0:0b:25:9d:df:ab:9b:43:
                    97:b7:58:ea:1e:cc:a8:81:57:0b:21:4e:22:c7:75:
                    6c:c4:51:5b:b4:ad:fd:37:6e:a2:2b:54:29:9f:d4:
                    c7:cd:7e:d7:78:dd:b7:6b:71:ca:d6:e3:3b:10:e7:
                    11:31:bf:3a:68:7a:5e:1b:8d:a4:b1:ee:50:b5:24:
                    90:c0:ce:da:ac:64:45:b2:48:6e:5a:27:b6:0c:59:
                    92:e2:80:00:57:12:d6:58:28:1c:ca:8d:6f:8d:52:
                    00:29:40:94:10:e1:75:36:f9:6c:45:61:cc:7b:b0:
                    6e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C1:60:EF:72:19:D4:E4:3D:4E:CC:5B:4D:98:05:12:0A:D4:6F:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8bb08707-9c2d-39a4-8d62-570f621388fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.2.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:0c:32:8e:5a:02:88:03:ae:53:5d:13:a7:0a:47:2f:7e:bf:
         c7:e2:61:92:41:78:fa:60:69:71:24:93:3f:b0:9f:c3:15:c8:
         bc:18:a1:02:b2:22:f2:e4:12:bb:62:ad:88:1e:9a:cc:0f:49:
         76:cc:dc:e7:28:32:a6:d4:6e:a8:e5:41:73:2c:86:e4:74:28:
         92:f6:0e:ed:90:a9:3f:59:40:d3:05:f6:ac:a1:5a:94:15:53:
         4a:7f:a2:58:8b:74:29:d5:41:5b:84:07:88:24:b7:bd:5f:40:
         38:8a:0a:6f:86:86:68:ae:53:82:21:dc:77:ea:c5:43:32:54:
         70:35:73:5e:45:c3:01:73:76:b4:7c:66:c3:21:43:b3:6b:75:
         3d:2b:d6:bb:a0:57:8a:e7:d6:33:ff:c3:77:52:49:62:2e:b0:
         7f:32:e4:9f:5f:f6:e8:62:3d:00:10:16:14:a5:17:24:ef:4f:
         98:b5:35:a8:a3:6a:da:16:f5:e2:29:02:52:e7:c3:c3:1f:a0:
         fe:da:0f:5a:f1:a1:b3:9c:ab:20:4e:b8:53:61:7c:89:7c:23:
         19:7e:ea:b9:76:3e:e4:13:23:ea:ce:d7:eb:0f:f6:4e:45:bb:
         74:c6:f7:71:a2:26:cd:2e:d0:fc:0b:ae:e6:6d:e9:16:02:0d:
         c0:3d:62:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD2q9r5yn09exT29nYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDQyMjEyMDAwMFoXDTIyMDUyODA0MDAwMFowLzEtMCsGA1UEAxMk
YzE4NWExZjMtMzgyZS00NWZhLWI2MGQtZDg3ZWI5MGE1YmRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIrZMde+jnwQoczHxw5qqkOSneGBRKKLOrrU
KGVlRPQozuDwJuwEAOpGTGUxqDYRoEc6tB1F+oUOjxwXR5JtidVwrgqWj82vdFgz
93ybiMjH1Wvq8oBktHhkbIHZ4h4GFZPfe2OuAjnm4yq4djzXwWxOd9GSmHoBvBwx
yTDszMV/l8s+GbOxysx6b6G34Aslnd+rm0OXt1jqHsyogVcLIU4ix3VsxFFbtK39
N26iK1Qpn9THzX7XeN23a3HK1uM7EOcRMb86aHpeG42kse5QtSSQwM7arGRFskhu
Wie2DFmS4oAAVxLWWCgcyo1vjVIAKUCUEOF1NvlsRWHMe7BuKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL7BYO9yGdTkPU7MW02YBRIK1G+VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOGJiMDg3MDctOWMyZC0z
OWE0LThkNjItNTcwZjYyMTM4OGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSwIAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJoMMo5aAogDrlNdE6cKRy9+v8fiYZJBePpgaXEkkz+wn8MVyLwYoQKy
IvLkErtirYgemswPSXbM3OcoMqbUbqjlQXMshuR0KJL2Du2QqT9ZQNMF9qyhWpQV
U0p/oliLdCnVQVuEB4gkt71fQDiKCm+GhmiuU4Ih3HfqxUMyVHA1c15FwwFzdrR8
ZsMhQ7NrdT0r1rugV4rn1jP/w3dSSWIusH8y5J9f9uhiPQAQFhSlFyTvT5i1Naij
atoW9eIpAlLnw8MfoP7aD1rxobOcqyBOuFNhfIl8Ixl+6rl2PuQTI+rO1+sP9k5F
u3TG93GiJs0u0PwLruZt6RYCDcA9Yrs=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:19 2025 by rpki-client