Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8c92ce25-8b12-3152-adc1-9068f110a713.roa
File:                     8c92ce25-8b12-3152-adc1-9068f110a713.roa (raw, json)
Hash identifier:          bZmPp0iD+Kk9PsnpzhmEAk1tTSVf+YwqmgvlLUkD5Fk=
Subject key identifier:   AD:5F:6F:F7:7F:27:A4:86:63:4B:3C:A8:DF:F2:EE:0B:7B:4A:5E:F7
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858408C4D11148646645C869DB5C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8c92ce25-8b12-3152-adc1-9068f110a713.roa
Signing time:             Wed 11 Jan 2023 12:00:00 +0000
ROA not before:           Wed 11 Jan 2023 12:00:00 +0000
ROA not after:            Thu 16 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        16.151.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:8c:4d:11:14:86:46:64:5c:86:9d:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 11 12:00:00 2023 GMT
            Not After : Feb 16 05:00:00 2023 GMT
        Subject: CN=350d81e8-9a64-48ca-923c-13935946fcdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1c:b9:df:bf:87:fc:70:3f:88:9b:cf:72:66:
                    09:9f:56:cb:d1:45:89:ee:35:18:f3:53:43:03:06:
                    ef:f4:01:ea:16:34:d9:40:7c:71:32:a1:d8:73:13:
                    64:35:35:69:09:e0:3c:77:22:8c:bd:02:d9:d0:70:
                    c9:e6:2e:fc:86:e8:ab:5c:03:97:d2:c2:90:4a:07:
                    fd:5e:e4:5e:e2:04:c0:16:15:d1:ac:c7:ae:a4:0a:
                    46:2d:50:51:fc:fc:94:9f:70:7a:b6:02:7d:9c:db:
                    43:ac:e8:fb:9b:b0:7d:d5:f3:81:ab:b2:00:c4:30:
                    cb:55:ca:83:3d:1a:5a:1e:c9:7d:af:dc:57:63:6f:
                    67:0d:dc:33:fc:c3:fb:44:f4:a6:26:f1:6f:a2:38:
                    f9:13:12:10:12:95:5a:84:46:0c:b7:af:6c:17:ad:
                    73:b9:4b:bb:34:22:8d:09:43:7a:3e:c6:c3:f2:b0:
                    ba:41:80:c2:8b:4b:46:e4:2b:1c:00:4a:5d:dc:3c:
                    ae:13:4b:63:19:28:61:13:9e:1f:66:62:ad:4a:3a:
                    f8:4a:38:d9:77:e4:d5:f4:0f:60:f0:05:8f:98:f5:
                    4f:47:f7:a8:a3:cf:8d:d0:2f:d4:e1:39:e1:81:65:
                    36:2d:b1:70:6a:1b:5e:5d:16:5c:22:2a:61:d7:32:
                    66:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5F:6F:F7:7F:27:A4:86:63:4B:3C:A8:DF:F2:EE:0B:7B:4A:5E:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8c92ce25-8b12-3152-adc1-9068f110a713.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.151.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:ab:cd:63:36:6c:8b:fc:63:6a:f4:ce:02:a3:eb:08:4d:2e:
         b0:6e:06:56:11:2a:2a:5e:5c:5c:2e:62:78:24:cd:87:60:39:
         49:99:4a:54:29:56:39:62:09:84:68:2b:51:f4:40:fb:49:30:
         20:d5:85:5c:03:b6:82:c4:5c:d6:3e:89:a6:fd:9c:3e:df:76:
         fd:95:1a:6c:1c:03:dd:10:3b:56:1e:bd:ba:75:9d:85:33:e8:
         b1:11:c5:82:e6:ab:7d:41:0a:cb:8d:a4:02:bd:36:4e:99:db:
         83:3c:15:da:a9:c8:42:37:9a:8a:e1:af:94:2a:b9:ba:96:3f:
         43:fd:fd:a9:8d:3e:ec:30:62:97:c6:9d:6e:56:b8:a4:b3:99:
         f2:fb:42:e0:32:80:09:58:e9:10:bf:d2:c3:e5:1a:80:b6:76:
         80:56:a9:8b:da:99:3d:4c:f1:f1:3c:9c:7e:43:24:cf:33:7c:
         61:ac:a8:ec:a2:e3:5d:93:3e:62:b3:ca:f8:7d:86:c9:cb:24:
         e0:d9:94:57:66:b1:d6:61:c7:91:96:f9:d4:5a:a6:70:03:9d:
         ba:58:9d:a2:16:4b:1b:81:50:0d:9b:52:0e:76:b8:8a:85:6f:
         a0:9b:35:a4:2e:76:55:a8:3b:ec:8a:7b:45:74:34:dc:b1:b2:
         c8:ce:1a:77
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECMTREUhkZkXIadtcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDExMTEyMDAwMFoXDTIzMDIxNjA1MDAwMFowLzEtMCsGA1UEAxMk
MzUwZDgxZTgtOWE2NC00OGNhLTkyM2MtMTM5MzU5NDZmY2RmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxy537+H/HA/iJvPcmYJn1bL0UWJ7jUY81ND
Awbv9AHqFjTZQHxxMqHYcxNkNTVpCeA8dyKMvQLZ0HDJ5i78huirXAOX0sKQSgf9
XuRe4gTAFhXRrMeupApGLVBR/PyUn3B6tgJ9nNtDrOj7m7B91fOBq7IAxDDLVcqD
PRpaHsl9r9xXY29nDdwz/MP7RPSmJvFvojj5ExIQEpVahEYMt69sF61zuUu7NCKN
CUN6PsbD8rC6QYDCi0tG5CscAEpd3DyuE0tjGShhE54fZmKtSjr4SjjZd+TV9A9g
8AWPmPVPR/eoo8+N0C/U4TnhgWU2LbFwahteXRZcIiph1zJm4wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFK1fb/d/J6SGY0s8qN/y7gt7Sl73MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOGM5MmNlMjUtOGIxMi0z
MTUyLWFkYzEtOTA2OGYxMTBhNzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEJcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACavNYzZsi/xjavTOAqPrCE0usG4GVhEqKl5cXC5ieCTNh2A5SZlKVClW
OWIJhGgrUfRA+0kwINWFXAO2gsRc1j6Jpv2cPt92/ZUabBwD3RA7Vh69unWdhTPo
sRHFguarfUEKy42kAr02TpnbgzwV2qnIQjeaiuGvlCq5upY/Q/39qY0+7DBil8ad
bla4pLOZ8vtC4DKACVjpEL/Sw+UagLZ2gFapi9qZPUzx8TycfkMkzzN8Yayo7KLj
XZM+YrPK+H2Gycsk4NmUV2ax1mHHkZb51FqmcAOdulidohZLG4FQDZtSDna4ioVv
oJs1pC52Vag77Ip7RXQ03LGyyM4adw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:17:44 2025 by rpki-client