Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f96650b-2c2d-36b0-95ea-28e9d06afecc.roa
File:                     8f96650b-2c2d-36b0-95ea-28e9d06afecc.roa (raw, json)
Hash identifier:          fq7yQB+fjvlcO6h4hFC9OP2Fu71d/wg/nRSnj3rnZG4=
Subject key identifier:   7E:A1:91:CD:49:8F:DD:88:63:2A:E2:80:50:62:EC:B4:5B:9F:1B:37
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E3B34045855A1C43E91B10780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f96650b-2c2d-36b0-95ea-28e9d06afecc.roa
Signing time:             Mon 13 Jun 2022 12:00:00 +0000
ROA not before:           Mon 13 Jun 2022 12:00:00 +0000
ROA not after:            Tue 19 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        143.227.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:3b:34:04:58:55:a1:c4:3e:91:b1:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 13 12:00:00 2022 GMT
            Not After : Jul 19 04:00:00 2022 GMT
        Subject: CN=da6daf17-bbf4-4822-bb8b-2281780479ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e6:4d:25:d4:52:97:ea:21:f9:f7:cc:45:7a:
                    0a:05:d1:11:6b:de:62:f7:58:65:8f:d0:4d:8c:37:
                    4e:ca:8d:24:86:d3:26:13:bc:d8:a6:20:26:63:8a:
                    7d:c2:18:e5:ca:df:63:5a:77:f9:e7:a1:15:52:1a:
                    d3:23:4d:7c:7f:42:68:11:5e:d6:0a:cf:65:7d:d9:
                    c8:b5:31:46:94:01:bf:32:0e:fd:14:13:94:53:cc:
                    9a:ad:88:0a:86:63:fe:3c:94:16:9e:b5:4d:5f:24:
                    16:35:2e:78:4d:9d:d6:53:72:80:31:3d:66:95:8a:
                    2e:88:af:83:82:73:d1:8f:db:39:b2:cd:cc:e3:4f:
                    8b:4f:af:ab:b7:c6:ce:62:16:52:7e:88:e6:96:ad:
                    3c:ab:ef:16:5f:5f:95:af:2a:07:28:e4:88:61:fb:
                    2c:61:91:49:7d:42:0b:cc:f1:be:4a:55:ac:e9:88:
                    9d:f9:67:b1:4f:ae:b5:b5:70:54:35:69:9d:f3:25:
                    98:b2:5b:a8:34:73:f6:b8:5f:68:6d:f4:1a:df:67:
                    c0:d2:e2:60:ec:4d:72:01:91:e3:df:90:ed:a0:f5:
                    64:6b:0d:be:48:5c:d1:9f:95:7a:c4:94:c2:75:ee:
                    49:0c:7c:bd:89:2c:27:78:7b:a5:e6:5b:1f:f8:e2:
                    e7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A1:91:CD:49:8F:DD:88:63:2A:E2:80:50:62:EC:B4:5B:9F:1B:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f96650b-2c2d-36b0-95ea-28e9d06afecc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.227.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:38:45:a7:90:ea:8f:d8:37:e0:61:8f:17:a3:59:97:ae:e4:
         04:69:9d:87:e4:19:eb:b4:7e:55:0a:fd:45:8c:8c:92:a5:e0:
         6e:06:a0:ab:fe:06:1e:55:e3:a0:28:48:82:bf:55:37:09:84:
         3c:dc:52:5b:1e:56:47:da:55:14:7c:49:5d:a0:38:41:c3:b8:
         44:b1:22:89:60:2d:d2:5b:78:6a:16:21:93:f4:e9:0d:ab:e9:
         b6:27:42:be:ed:38:af:ea:5e:48:4f:53:97:ff:cb:b3:af:55:
         70:91:38:36:98:56:71:41:d1:a1:48:8b:7a:fa:07:d4:58:7d:
         3c:92:08:b4:27:da:c0:ba:52:e2:ca:88:94:a5:49:89:3e:68:
         60:e1:4f:b5:8d:c3:6a:c2:ce:91:1a:46:a7:b5:cb:88:46:10:
         8b:a7:75:e5:88:a6:13:e5:13:a9:b4:a6:61:71:da:10:07:67:
         54:0a:7b:11:49:a7:ba:de:e8:21:33:73:6c:c4:f2:4d:10:03:
         f0:d8:6a:f5:a0:de:f7:4a:de:ac:6f:47:65:7a:a2:65:f2:26:
         d8:b8:6c:77:24:95:37:2f:50:e5:16:04:40:bc:41:c5:b6:6b:
         66:5d:a0:7a:29:b0:79:74:00:87:b5:0b:46:b9:3c:7d:29:44:
         c2:be:04:47
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD47NARYVaHEPpGxB4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYxMzEyMDAwMFoXDTIyMDcxOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZGE2ZGFmMTctYmJmNC00ODIyLWJiOGItMjI4MTc4MDQ3OWJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheZNJdRSl+oh+ffMRXoKBdERa95i91hlj9BN
jDdOyo0khtMmE7zYpiAmY4p9whjlyt9jWnf556EVUhrTI018f0JoEV7WCs9lfdnI
tTFGlAG/Mg79FBOUU8yarYgKhmP+PJQWnrVNXyQWNS54TZ3WU3KAMT1mlYouiK+D
gnPRj9s5ss3M40+LT6+rt8bOYhZSfojmlq08q+8WX1+VryoHKOSIYfssYZFJfUIL
zPG+SlWs6Yid+WexT661tXBUNWmd8yWYsluoNHP2uF9obfQa32fA0uJg7E1yAZHj
35DtoPVkaw2+SFzRn5V6xJTCde5JDHy9iSwneHul5lsf+OLnTQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFH6hkc1Jj92IYyrigFBi7LRbnxs3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOGY5NjY1MGItMmMyZC0z
NmIwLTk1ZWEtMjhlOWQwNmFmZWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj+MwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEASThFp5Dqj9g34GGPF6NZl67kBGmdh+QZ67R+VQr9RYyMkqXgbgagq/4G
HlXjoChIgr9VNwmEPNxSWx5WR9pVFHxJXaA4QcO4RLEiiWAt0lt4ahYhk/TpDavp
tidCvu04r+peSE9Tl//Ls69VcJE4NphWcUHRoUiLevoH1Fh9PJIItCfawLpS4sqI
lKVJiT5oYOFPtY3DasLOkRpGp7XLiEYQi6d15YimE+UTqbSmYXHaEAdnVAp7EUmn
ut7oITNzbMTyTRAD8Nhq9aDe90rerG9HZXqiZfIm2LhsdySVNy9Q5RYEQLxBxbZr
Zl2geimweXQAh7ULRrk8fSlEwr4ERw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:15 2025 by rpki-client