Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/91b3fb7a-12fc-3558-8274-76dccbbad455.roa
File:                     91b3fb7a-12fc-3558-8274-76dccbbad455.roa (raw, json)
Hash identifier:          av0ijA3+llO240WWjmrwTTsOKpk9eWO3ZkaoweDOZz8=
Subject key identifier:   80:AD:38:54:39:E1:EA:BF:E5:16:24:A0:C9:D7:5E:97:B3:15:00:88
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858404CE43CFA47039BA3C8425500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/91b3fb7a-12fc-3558-8274-76dccbbad455.roa
Signing time:             Tue 20 Dec 2022 18:48:09 +0000
ROA not before:           Tue 20 Dec 2022 18:48:09 +0000
ROA not after:            Tue 24 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        13.166.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:4c:e4:3c:fa:47:03:9b:a3:c8:42:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 20 18:48:09 2022 GMT
            Not After : Jan 24 05:00:00 2023 GMT
        Subject: CN=6293736a-e9d1-4b7c-a8d1-eeb5934db599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7a:5c:13:68:d1:1e:cd:e2:ad:a3:af:79:c8:
                    e4:b5:8a:5c:24:54:47:ce:97:3a:b4:b9:ff:82:30:
                    c5:e5:ce:e4:25:81:32:08:1a:7d:e0:ac:78:ab:d3:
                    1c:41:e4:af:53:bc:35:3a:e9:d7:af:94:55:49:f4:
                    5b:11:64:db:89:bd:28:ec:95:34:76:db:f0:37:22:
                    32:c6:df:1c:d0:0f:d7:da:49:18:08:24:5a:03:eb:
                    f4:5a:42:25:97:67:64:dd:25:a8:d6:06:a5:89:bd:
                    98:36:2e:f6:f7:56:5c:2e:42:eb:6e:16:e5:e6:aa:
                    de:83:c7:0d:60:28:67:bd:d6:77:ee:46:a3:49:42:
                    1e:8a:84:20:10:d9:03:24:43:59:da:4c:aa:5b:70:
                    9a:e3:d0:19:c4:d2:16:78:c5:a3:d6:f7:40:50:d6:
                    be:a0:cd:cc:d8:50:84:91:0d:4a:68:ff:0f:94:25:
                    56:33:ff:cd:32:dc:0d:ce:fe:a1:c0:2d:e2:ef:05:
                    9d:c7:a3:6d:ed:97:19:84:5c:7f:79:2a:1e:b6:ed:
                    48:d2:7e:9f:90:e8:22:6c:74:85:eb:44:5c:f9:25:
                    85:a3:6a:15:d2:5a:0f:2b:23:2c:5a:41:c1:85:20:
                    e2:a9:c8:6a:73:71:48:93:eb:9c:96:b0:69:42:61:
                    45:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AD:38:54:39:E1:EA:BF:E5:16:24:A0:C9:D7:5E:97:B3:15:00:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/91b3fb7a-12fc-3558-8274-76dccbbad455.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.166.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:8c:9b:04:76:e7:9e:c8:37:29:f0:76:79:49:83:95:be:bb:
         6b:a7:09:fc:36:ea:d8:94:92:2d:e3:f4:1b:64:32:d3:c8:56:
         07:1a:f9:b6:3c:23:5b:46:bc:46:74:82:54:95:22:83:7c:e2:
         04:4f:06:e7:b6:bd:26:76:09:e7:2b:0f:e2:57:bf:1b:56:89:
         b7:af:3c:31:87:17:c8:55:85:ad:a0:87:52:49:ab:2b:ec:a6:
         fa:43:e0:a6:1d:60:de:24:56:2d:8a:89:3a:c6:42:5f:0f:36:
         cd:a3:eb:77:7d:87:a5:6b:ba:13:ef:8b:be:1a:d3:60:b2:fb:
         ba:6e:4f:f4:e7:4b:3b:3c:00:bc:f9:a1:f0:ed:85:fd:7f:63:
         1f:8d:2d:e2:8c:2c:13:dc:02:2f:ab:e1:9f:73:57:1e:92:18:
         03:29:01:88:ef:61:d4:cb:f6:a1:dc:19:c8:fe:ba:ed:7f:63:
         fb:d0:5a:24:0e:8f:c8:fa:2b:ba:7b:de:ea:a3:2d:38:8b:c3:
         5a:30:6c:2f:fb:19:92:70:13:76:08:14:b2:29:92:9c:b5:5d:
         75:f6:53:8f:c8:ae:6d:5b:3f:44:4e:5c:74:ab:42:78:19:c9:
         3b:c7:9e:82:47:c7:11:ae:9b:70:73:05:90:d5:f0:d7:3a:0f:
         9e:2c:cf:5a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBM5Dz6RwObo8hCVQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIyMDE4NDgwOVoXDTIzMDEyNDA1MDAwMFowLzEtMCsGA1UEAxMk
NjI5MzczNmEtZTlkMS00YjdjLWE4ZDEtZWViNTkzNGRiNTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnpcE2jRHs3iraOvecjktYpcJFRHzpc6tLn/
gjDF5c7kJYEyCBp94Kx4q9McQeSvU7w1OunXr5RVSfRbEWTbib0o7JU0dtvwNyIy
xt8c0A/X2kkYCCRaA+v0WkIll2dk3SWo1galib2YNi7291ZcLkLrbhbl5qreg8cN
YChnvdZ37kajSUIeioQgENkDJENZ2kyqW3Ca49AZxNIWeMWj1vdAUNa+oM3M2FCE
kQ1KaP8PlCVWM//NMtwNzv6hwC3i7wWdx6Nt7ZcZhFx/eSoetu1I0n6fkOgibHSF
60Rc+SWFo2oV0loPKyMsWkHBhSDiqchqc3FIk+uclrBpQmFFowIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFICtOFQ54eq/5RYkoMnXXpezFQCIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOTFiM2ZiN2EtMTJmYy0z
NTU4LTgyNzQtNzZkY2NiYmFkNDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBDaYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAG4ybBHbnnsg3KfB2eUmDlb67a6cJ/Dbq2JSSLeP0G2Qy08hWBxr5tjwj
W0a8RnSCVJUig3ziBE8G57a9JnYJ5ysP4le/G1aJt688MYcXyFWFraCHUkmrK+ym
+kPgph1g3iRWLYqJOsZCXw82zaPrd32HpWu6E++LvhrTYLL7um5P9OdLOzwAvPmh
8O2F/X9jH40t4owsE9wCL6vhn3NXHpIYAykBiO9h1Mv2odwZyP667X9j+9BaJA6P
yPorunve6qMtOIvDWjBsL/sZknATdggUsimSnLVddfZTj8iubVs/RE5cdKtCeBnJ
O8eegkfHEa6bcHMFkNXw1zoPnizPWg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:36 2025 by rpki-client