Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8c558fdd-e1ac-3ed6-9fdf-e12195e7774d.roa
File:                     8c558fdd-e1ac-3ed6-9fdf-e12195e7774d.roa (raw, json)
Hash identifier:          gzP8OcOSdRz3+gDCGMX5fzy+0Dzy4vjVe9AFNmsqlKo=
Subject key identifier:   C1:A9:18:DC:23:A9:2D:93:C3:61:B2:F7:46:3D:44:D5:77:55:4D:E0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583ECDF8E52AF36369F1B3F51380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8c558fdd-e1ac-3ed6-9fdf-e12195e7774d.roa
Signing time:             Thu 04 Aug 2022 12:00:00 +0000
ROA not before:           Thu 04 Aug 2022 12:00:00 +0000
ROA not after:            Fri 09 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        160.223.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:cd:f8:e5:2a:f3:63:69:f1:b3:f5:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug  4 12:00:00 2022 GMT
            Not After : Sep  9 04:00:00 2022 GMT
        Subject: CN=eaca11b4-144e-4e99-b569-91fe84b8eef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2f:bc:7b:ff:c4:f2:ce:c1:da:fc:b0:8e:31:
                    ae:1f:6f:f3:da:c4:25:5c:ce:2a:dc:e7:7c:84:46:
                    69:b6:56:50:50:a3:fa:49:1d:aa:87:d7:24:12:38:
                    53:fe:71:4d:65:be:78:e5:3d:66:d2:3f:c1:51:8c:
                    a6:87:ea:8b:fc:4a:d2:e0:60:c3:c1:af:61:f3:a7:
                    23:23:6e:b7:e0:70:a2:61:2e:d4:82:9b:8e:a3:ec:
                    63:da:03:84:a8:8d:e0:ae:57:cb:c2:71:41:d9:b6:
                    ce:18:14:32:82:da:83:bc:49:ec:74:f9:9b:e2:16:
                    57:56:f9:a4:bf:c6:40:e5:75:b9:f5:d0:c4:01:d2:
                    4a:77:93:ac:ab:30:4b:50:e1:c1:f7:87:d9:2c:4e:
                    6c:31:42:3c:7c:1a:d0:50:5f:60:0e:b8:fa:0e:76:
                    68:64:1f:01:55:44:8f:24:5d:c0:59:8d:d6:34:ef:
                    c2:66:1e:6c:57:a1:56:f8:ed:94:de:8b:3e:11:19:
                    b3:bc:63:e7:f1:66:8f:74:59:3b:5b:51:34:38:8c:
                    58:b9:07:80:52:a0:cd:43:41:9f:dd:30:d5:58:50:
                    b1:eb:2e:1a:e8:d4:0b:34:93:65:56:8e:e7:44:6d:
                    71:10:8c:10:3c:91:87:da:7b:4b:d5:51:bf:9f:10:
                    1a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A9:18:DC:23:A9:2D:93:C3:61:B2:F7:46:3D:44:D5:77:55:4D:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8c558fdd-e1ac-3ed6-9fdf-e12195e7774d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.223.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:7f:d0:3c:bc:fe:ae:a4:b9:2e:aa:79:5e:9a:f9:10:35:3d:
         45:64:11:7c:e6:09:4f:9a:44:a9:33:07:b9:d7:b4:26:cf:94:
         7f:96:57:93:dd:78:04:d8:b8:d2:66:e4:e4:c0:46:0f:df:d4:
         9c:61:22:be:20:de:58:44:d7:7f:ab:50:68:1a:fa:28:9f:7d:
         ba:0e:46:68:42:81:57:0d:26:65:35:43:a9:68:d8:4f:5f:54:
         d8:d5:1b:e5:a6:0e:d1:31:6d:13:00:6f:33:49:51:cd:cf:08:
         d6:23:de:13:0f:91:30:30:39:2e:86:f4:31:cb:eb:c3:26:35:
         a8:91:71:d1:74:ac:28:5b:e7:5b:c4:9b:11:30:15:6e:44:39:
         ed:69:35:08:e5:0f:0b:55:fe:c5:62:56:14:69:37:24:f1:40:
         5c:df:a9:f5:a6:52:ef:18:5d:2d:ce:4f:0e:b8:cd:44:f1:fd:
         52:88:e0:e0:a3:0d:2e:ee:ca:67:8c:f6:23:f5:67:66:5a:3d:
         25:d2:7c:b9:9e:77:c9:88:db:e9:26:ca:e1:2b:34:03:5a:55:
         c6:11:a8:c5:32:36:33:b4:c9:c5:8f:d7:f7:92:49:c5:c7:ae:
         9e:a0:25:80:8d:fb:06:eb:14:06:a1:ef:15:f4:1a:fb:b3:68:
         77:75:79:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD7N+OUq82Np8bP1E4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDgwNDEyMDAwMFoXDTIyMDkwOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZWFjYTExYjQtMTQ0ZS00ZTk5LWI1NjktOTFmZTg0YjhlZWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji+8e//E8s7B2vywjjGuH2/z2sQlXM4q3Od8
hEZptlZQUKP6SR2qh9ckEjhT/nFNZb545T1m0j/BUYymh+qL/ErS4GDDwa9h86cj
I2634HCiYS7UgpuOo+xj2gOEqI3grlfLwnFB2bbOGBQygtqDvEnsdPmb4hZXVvmk
v8ZA5XW59dDEAdJKd5OsqzBLUOHB94fZLE5sMUI8fBrQUF9gDrj6DnZoZB8BVUSP
JF3AWY3WNO/CZh5sV6FW+O2U3os+ERmzvGPn8WaPdFk7W1E0OIxYuQeAUqDNQ0Gf
3TDVWFCx6y4a6NQLNJNlVo7nRG1xEIwQPJGH2ntL1VG/nxAaeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMGpGNwjqS2Tw2Gy90Y9RNV3VU3gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOGM1NThmZGQtZTFhYy0z
ZWQ2LTlmZGYtZTEyMTk1ZTc3NzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHoN8AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFt/0Dy8/q6kuS6qeV6a+RA1PUVkEXzmCU+aRKkzB7nXtCbPlH+WV5Pd
eATYuNJm5OTARg/f1JxhIr4g3lhE13+rUGga+iiffboORmhCgVcNJmU1Q6lo2E9f
VNjVG+WmDtExbRMAbzNJUc3PCNYj3hMPkTAwOS6G9DHL68MmNaiRcdF0rChb51vE
mxEwFW5EOe1pNQjlDwtV/sViVhRpNyTxQFzfqfWmUu8YXS3OTw64zUTx/VKI4OCj
DS7uymeM9iP1Z2ZaPSXSfLmed8mI2+kmyuErNANaVcYRqMUyNjO0ycWP1/eSScXH
rp6gJYCN+wbrFAah7xX0GvuzaHd1eT4=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:31 2025 by rpki-client