Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f7ef11a-4dfd-3aef-b363-8d4238bdabcb.roa
File:                     8f7ef11a-4dfd-3aef-b363-8d4238bdabcb.roa (raw, json)
Hash identifier:          eS2e9c1kyGleSv5AO1YoYaKhXzscytWVRFbdgYQQN+8=
Subject key identifier:   2C:A5:B6:2A:50:99:60:7C:89:54:0A:C8:1A:CC:7A:3C:DC:60:4D:F9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858404759CD85F9A2F6EF6A784BB0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f7ef11a-4dfd-3aef-b363-8d4238bdabcb.roa
Signing time:             Sat 17 Dec 2022 12:00:00 +0000
ROA not before:           Sat 17 Dec 2022 12:00:00 +0000
ROA not after:            Sun 22 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        104.200.224.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:47:59:cd:85:f9:a2:f6:ef:6a:78:4b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 17 12:00:00 2022 GMT
            Not After : Jan 22 05:00:00 2023 GMT
        Subject: CN=96ff2265-6861-4b52-a7f9-9a5c276080b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:37:70:2e:11:b3:ee:1c:99:54:2a:67:ca:12:
                    3b:f3:bf:0d:dc:f8:6d:d4:99:bb:ea:14:1d:54:6f:
                    34:59:07:ec:88:81:7b:60:6c:75:e4:52:04:64:52:
                    bb:db:c0:13:44:9f:f0:8c:01:29:ef:54:23:2b:6b:
                    df:0d:31:d8:dc:07:d7:fb:32:b5:5c:47:34:5a:80:
                    18:4c:c2:74:d6:cf:6c:9a:1e:7c:9b:8b:0c:dd:f8:
                    66:b6:41:b4:7e:3f:af:c8:70:92:a8:7d:d7:61:61:
                    18:f0:e4:86:db:2d:6a:5b:c1:99:ae:f9:42:50:ec:
                    e5:f7:ce:b1:b1:23:fa:d8:d5:17:35:54:5c:81:64:
                    fe:cf:a5:99:75:86:4e:cb:f2:1b:8d:2f:a6:05:bf:
                    b1:f8:89:6c:0b:a4:3b:36:dd:29:39:4c:eb:8f:a5:
                    1d:0a:82:08:bf:98:fe:da:be:2a:3c:c5:00:89:ba:
                    4c:17:42:a3:e1:d5:d1:2b:0a:1f:e4:9b:d7:c1:01:
                    10:43:b0:e9:76:7b:92:12:70:1d:6e:b4:6b:28:17:
                    ed:ab:70:b2:ac:e3:04:28:05:46:89:3d:d6:a9:5d:
                    96:3c:ea:f2:8e:2c:3e:ff:c6:3c:25:8b:88:10:76:
                    8c:9d:e5:5c:c7:06:61:d9:7f:dd:f6:ac:01:0a:55:
                    6e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A5:B6:2A:50:99:60:7C:89:54:0A:C8:1A:CC:7A:3C:DC:60:4D:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f7ef11a-4dfd-3aef-b363-8d4238bdabcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.200.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:1e:19:93:bc:5c:40:f3:d7:58:ed:14:98:05:22:b0:6d:a2:
         a5:12:96:8a:33:ea:25:02:9f:e8:54:a5:35:a5:6e:20:bc:8c:
         11:e6:e3:7c:52:b3:f4:3a:f7:ec:de:7a:81:ec:b9:a2:b9:b1:
         e2:2b:12:fa:95:4e:db:89:2d:c3:ef:7c:1d:bb:6f:17:b5:dc:
         6b:0b:d7:e3:ee:d1:6e:d3:62:51:1b:cd:56:3a:74:9c:30:a2:
         c1:90:7b:ba:a9:91:68:91:6c:91:ab:ad:30:b6:a3:fb:47:83:
         47:f6:73:59:85:01:da:d5:49:39:b8:8b:b3:43:80:e7:77:04:
         d0:99:bb:17:3b:72:26:1c:98:08:25:f6:be:2f:9c:fa:c7:4c:
         eb:ec:c3:d3:d3:16:01:56:16:e2:66:43:c5:7d:1c:fd:cd:4e:
         97:fb:0d:b6:82:59:8b:6c:e5:39:14:29:85:f3:34:3b:cb:87:
         d2:bd:14:d5:e7:0f:4a:c2:d2:70:35:bc:47:33:74:ca:0d:e6:
         ac:16:6d:37:3a:b3:5c:e0:f6:5b:20:27:39:1b:bb:df:20:78:
         a1:0a:bd:a8:93:f5:af:2c:fa:d6:0f:16:de:4e:ff:a3:4e:f1:
         72:f6:22:ca:07:0c:7a:80:4a:6d:fc:b2:8d:25:e2:39:8a:ca:
         10:ba:38:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBHWc2F+aL272p4S7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxNzEyMDAwMFoXDTIzMDEyMjA1MDAwMFowLzEtMCsGA1UEAxMk
OTZmZjIyNjUtNjg2MS00YjUyLWE3ZjktOWE1YzI3NjA4MGI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDdwLhGz7hyZVCpnyhI7878N3Pht1Jm76hQd
VG80WQfsiIF7YGx15FIEZFK728ATRJ/wjAEp71QjK2vfDTHY3AfX+zK1XEc0WoAY
TMJ01s9smh58m4sM3fhmtkG0fj+vyHCSqH3XYWEY8OSG2y1qW8GZrvlCUOzl986x
sSP62NUXNVRcgWT+z6WZdYZOy/IbjS+mBb+x+IlsC6Q7Nt0pOUzrj6UdCoIIv5j+
2r4qPMUAibpMF0Kj4dXRKwof5JvXwQEQQ7DpdnuSEnAdbrRrKBftq3CyrOMEKAVG
iT3WqV2WPOryjiw+/8Y8JYuIEHaMneVcxwZh2X/d9qwBClVu8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCyltipQmWB8iVQKyBrMejzcYE35MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOGY3ZWYxMWEtNGRmZC0z
YWVmLWIzNjMtOGQ0MjM4YmRhYmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMjgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJEeGZO8XEDz11jtFJgFIrBtoqUSlooz6iUCn+hUpTWlbiC8jBHm43xS
s/Q69+zeeoHsuaK5seIrEvqVTtuJLcPvfB27bxe13GsL1+Pu0W7TYlEbzVY6dJww
osGQe7qpkWiRbJGrrTC2o/tHg0f2c1mFAdrVSTm4i7NDgOd3BNCZuxc7ciYcmAgl
9r4vnPrHTOvsw9PTFgFWFuJmQ8V9HP3NTpf7DbaCWYts5TkUKYXzNDvLh9K9FNXn
D0rC0nA1vEczdMoN5qwWbTc6s1zg9lsgJzkbu98geKEKvaiT9a8s+tYPFt5O/6NO
8XL2IsoHDHqASm38so0l4jmKyhC6OFU=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:06 2025 by rpki-client