Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ffcd947-ed46-35ba-9656-b40a29525739.roa
File:                     8ffcd947-ed46-35ba-9656-b40a29525739.roa (raw, json)
Hash identifier:          MmdkqL5hTZ2dg4uTM5fGzrFEX/vYc4pu/7H+A3Q3u5M=
Subject key identifier:   C6:01:8A:88:4D:CA:E6:92:3A:A9:1C:8E:09:4D:5C:44:50:B7:E1:71
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D3379634753330A1D8230E300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ffcd947-ed46-35ba-9656-b40a29525739.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        209.54.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:79:63:47:53:33:0a:1d:82:30:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=f699bf12-0327-4f29-9899-5775fef66913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:96:f1:a8:74:46:93:08:81:33:98:0d:05:8f:
                    f4:a5:6a:82:df:81:b1:1b:72:31:be:12:d0:00:d2:
                    d0:64:f5:6c:27:fb:3c:41:37:e1:a0:40:3e:cf:ad:
                    1f:f3:fb:b8:2b:05:b8:47:b3:0b:7c:e8:56:2a:99:
                    dd:06:be:19:5e:af:62:f5:0b:ac:31:ed:2f:ac:72:
                    f2:1d:04:af:3f:3d:f3:6f:d4:76:a6:79:d6:74:49:
                    c4:1d:f4:ba:26:48:60:15:46:cb:e0:00:f4:02:e8:
                    ec:3e:3a:72:8b:d5:79:f5:10:19:5a:96:e5:47:df:
                    d4:c7:85:44:f0:f5:f8:a3:bf:bd:0b:17:4a:03:6f:
                    9b:b3:7d:91:2d:a1:40:2c:cb:20:a5:68:64:e2:1e:
                    80:d3:e2:c3:10:32:ae:1b:2d:a2:83:37:97:4e:a0:
                    8d:0f:be:87:5b:d5:1d:1a:52:4a:06:42:1d:5c:32:
                    8e:18:1d:70:59:8e:8d:ee:97:81:2d:86:67:5a:c7:
                    7d:da:69:3f:ef:31:55:81:c4:5d:2e:68:15:3a:e5:
                    44:dc:b8:ee:18:af:94:a2:22:c1:fb:d5:1f:ed:2a:
                    ac:3d:42:d7:da:7d:f6:b7:a6:16:95:5a:93:db:20:
                    b0:21:5a:80:13:46:a1:0c:42:6f:50:d2:ac:6e:a8:
                    55:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:01:8A:88:4D:CA:E6:92:3A:A9:1C:8E:09:4D:5C:44:50:B7:E1:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ffcd947-ed46-35ba-9656-b40a29525739.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.54.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:0c:61:e7:41:c4:16:7b:90:7f:08:c9:dd:36:2b:14:3c:06:
         6d:b7:ed:9e:9b:e4:07:94:e6:0a:1a:a7:b2:78:6f:df:6d:b4:
         03:fd:11:09:38:94:22:df:01:c9:2d:5b:51:37:cc:60:6d:30:
         c8:94:ea:24:fa:c1:56:a3:ff:f4:96:e5:70:cb:e1:91:5a:f9:
         e2:8e:9d:46:30:85:af:67:e9:9e:b8:e2:8c:b2:60:65:02:27:
         ab:49:f7:2a:e3:d3:fb:22:1e:6c:62:13:da:93:7d:f4:91:0e:
         e7:e7:01:cc:47:67:5c:40:65:e2:b0:32:54:41:d9:b4:ef:b6:
         95:6c:e2:50:25:d5:e3:f3:2f:3e:2c:75:df:92:e4:0b:a8:9d:
         d1:b2:d0:c5:52:28:05:49:ad:fd:0d:70:08:84:22:e2:db:2e:
         0d:e0:03:c8:5e:0c:8f:98:ec:a2:39:6e:d3:27:dd:90:16:bc:
         be:9f:f4:cb:35:26:7e:21:c8:e1:c4:3a:3a:ab:92:fe:85:11:
         10:99:f5:08:46:f3:66:f7:28:cf:cc:45:7d:b8:22:ad:d3:3d:
         08:4f:30:81:03:85:7a:64:6f:a4:2e:75:28:6e:47:e8:c9:cf:
         b4:e3:b4:17:b1:c5:16:fc:ac:a8:ca:1d:56:3d:97:dc:51:fc:
         4f:02:3b:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD0zeWNHUzMKHYIw4wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
ZjY5OWJmMTItMDMyNy00ZjI5LTk4OTktNTc3NWZlZjY2OTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypbxqHRGkwiBM5gNBY/0pWqC34GxG3IxvhLQ
ANLQZPVsJ/s8QTfhoEA+z60f8/u4KwW4R7MLfOhWKpndBr4ZXq9i9QusMe0vrHLy
HQSvPz3zb9R2pnnWdEnEHfS6JkhgFUbL4AD0AujsPjpyi9V59RAZWpblR9/Ux4VE
8PX4o7+9CxdKA2+bs32RLaFALMsgpWhk4h6A0+LDEDKuGy2igzeXTqCND76HW9Ud
GlJKBkIdXDKOGB1wWY6N7peBLYZnWsd92mk/7zFVgcRdLmgVOuVE3LjuGK+UoiLB
+9Uf7SqsPULX2n32t6YWlVqT2yCwIVqAE0ahDEJvUNKsbqhVSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMYBiohNyuaSOqkcjglNXERQt+FxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOGZmY2Q5NDctZWQ0Ni0z
NWJhLTk2NTYtYjQwYTI5NTI1NzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0TagMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAAMYedBxBZ7kH8Iyd02KxQ8Bm237Z6b5AeU5goap7J4b99ttAP9EQk4
lCLfAcktW1E3zGBtMMiU6iT6wVaj//SW5XDL4ZFa+eKOnUYwha9n6Z644oyyYGUC
J6tJ9yrj0/siHmxiE9qTffSRDufnAcxHZ1xAZeKwMlRB2bTvtpVs4lAl1ePzLz4s
dd+S5AuondGy0MVSKAVJrf0NcAiEIuLbLg3gA8heDI+Y7KI5btMn3ZAWvL6f9Ms1
Jn4hyOHEOjqrkv6FERCZ9QhG82b3KM/MRX24Iq3TPQhPMIEDhXpkb6QudShuR+jJ
z7TjtBexxRb8rKjKHVY9l9xR/E8COzs=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:12:59 2025 by rpki-client