Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/977213c1-a1f6-3bae-83e7-d1a19ac5b4ba.roa
File:                     977213c1-a1f6-3bae-83e7-d1a19ac5b4ba.roa (raw, json)
Hash identifier:          UTcGEc1S0LCjI4qzVv3p09fQethHtaC3D7+u/R8Qq0Q=
Subject key identifier:   C3:1F:8F:2C:AF:20:D8:15:46:E1:92:20:18:6C:E1:13:91:98:5E:98
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E02FD95393FFA2E67D2501800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/977213c1-a1f6-3bae-83e7-d1a19ac5b4ba.roa
Signing time:             Tue 24 May 2022 15:27:07 +0000
ROA not before:           Tue 24 May 2022 15:27:07 +0000
ROA not after:            Tue 28 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        166.117.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:02:fd:95:39:3f:fa:2e:67:d2:50:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 24 15:27:07 2022 GMT
            Not After : Jun 28 04:00:00 2022 GMT
        Subject: CN=408b039a-29e4-4bda-918a-2917641747bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:65:c2:88:d7:2b:df:71:ae:99:9f:fc:59:4b:
                    5d:dd:7e:52:79:ed:35:14:d5:10:40:2d:ee:aa:dd:
                    8e:03:55:6b:f3:4f:50:3e:1e:b7:56:f7:a1:59:1e:
                    a4:d7:a9:f9:8d:ca:c0:16:94:89:9b:7e:38:2b:74:
                    72:9f:d9:13:c4:0d:b2:61:d7:e9:4b:fb:a0:04:9f:
                    6c:b6:ce:f3:a9:50:47:bc:af:9e:3f:3c:5c:e9:77:
                    4d:74:c7:dd:b0:a6:1a:5c:4b:87:d6:34:64:ca:fa:
                    f8:17:b0:1c:3a:5d:10:fa:a1:03:be:e6:e3:2d:54:
                    5f:fc:e9:06:2d:4f:dd:48:d1:47:09:b2:f1:69:a4:
                    65:59:28:97:57:07:f6:b6:66:1a:42:d9:61:20:d9:
                    2c:42:b8:37:4b:1e:1e:cc:70:a6:02:4f:c6:b2:95:
                    7d:ae:9a:95:6d:3d:9b:ed:de:60:94:ce:20:8a:39:
                    20:a8:2b:8b:5d:8a:60:cc:90:56:d1:04:f6:e8:dd:
                    aa:69:4d:07:4b:ae:48:b9:cf:b9:b5:a3:36:4c:53:
                    f9:5e:e3:5b:10:95:af:5c:60:7b:3e:e4:f4:50:e2:
                    9b:91:7a:48:ac:36:dd:2e:25:80:98:8c:d7:a4:c2:
                    5a:88:5f:4c:15:dc:3e:4e:57:64:40:ff:01:20:d2:
                    00:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1F:8F:2C:AF:20:D8:15:46:E1:92:20:18:6C:E1:13:91:98:5E:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/977213c1-a1f6-3bae-83e7-d1a19ac5b4ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.117.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:87:21:f0:c5:34:ec:a6:41:0b:09:7c:77:38:c0:7f:59:ba:
         f3:f6:54:98:c4:a8:5e:3d:f1:41:40:bf:e5:d5:f3:5a:5d:15:
         07:d9:30:6d:f9:c0:9c:d9:ba:ec:77:51:40:9f:20:36:4b:85:
         a4:79:c7:0a:44:6d:91:2a:e4:21:6a:4c:d6:1e:ff:c4:53:71:
         a0:74:ae:ff:20:39:3b:e0:69:73:72:3d:81:54:65:c4:2d:99:
         2a:51:18:35:eb:ea:3c:28:af:13:0b:ad:1b:94:61:8c:dd:8e:
         98:d8:b8:04:b1:6b:78:3a:06:08:10:66:36:09:2d:84:04:8c:
         82:4b:19:7d:ae:80:68:41:b3:98:26:54:a9:89:40:24:b9:b5:
         0b:36:38:b7:66:02:8a:ab:58:78:af:2c:31:f8:aa:34:10:b7:
         1d:81:32:84:a0:a6:c3:13:fb:d7:c2:b5:57:4a:7d:57:1a:a5:
         05:8e:fa:d1:dd:30:41:73:5e:ca:fa:81:b3:8b:fd:cc:21:d1:
         04:4f:70:35:fb:f3:6c:28:0b:95:4f:a3:39:0a:59:09:d1:e6:
         a3:de:ed:84:15:c2:49:a6:56:e2:b7:4b:b8:0f:6d:fb:d9:e0:
         fb:61:7b:de:ff:84:c1:0f:b5:4b:77:bf:c4:a7:aa:d6:35:55:
         dc:db:5e:42
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4C/ZU5P/ouZ9JQGAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDUyNDE1MjcwN1oXDTIyMDYyODA0MDAwMFowLzEtMCsGA1UEAxMk
NDA4YjAzOWEtMjllNC00YmRhLTkxOGEtMjkxNzY0MTc0N2JmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2XCiNcr33GumZ/8WUtd3X5See01FNUQQC3u
qt2OA1Vr809QPh63VvehWR6k16n5jcrAFpSJm344K3Ryn9kTxA2yYdfpS/ugBJ9s
ts7zqVBHvK+ePzxc6XdNdMfdsKYaXEuH1jRkyvr4F7AcOl0Q+qEDvubjLVRf/OkG
LU/dSNFHCbLxaaRlWSiXVwf2tmYaQtlhINksQrg3Sx4ezHCmAk/GspV9rpqVbT2b
7d5glM4gijkgqCuLXYpgzJBW0QT26N2qaU0HS65Iuc+5taM2TFP5XuNbEJWvXGB7
PuT0UOKbkXpIrDbdLiWAmIzXpMJaiF9MFdw+TldkQP8BINIACwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMMfjyyvINgVRuGSIBhs4RORmF6YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOTc3MjEzYzEtYTFmNi0z
YmFlLTgzZTctZDFhMTlhYzViNGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApnUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAAIch8MU07KZBCwl8dzjAf1m68/ZUmMSoXj3xQUC/5dXzWl0VB9kwbfnA
nNm67HdRQJ8gNkuFpHnHCkRtkSrkIWpM1h7/xFNxoHSu/yA5O+Bpc3I9gVRlxC2Z
KlEYNevqPCivEwutG5RhjN2OmNi4BLFreDoGCBBmNgkthASMgksZfa6AaEGzmCZU
qYlAJLm1CzY4t2YCiqtYeK8sMfiqNBC3HYEyhKCmwxP718K1V0p9VxqlBY760d0w
QXNeyvqBs4v9zCHRBE9wNfvzbCgLlU+jOQpZCdHmo97thBXCSaZW4rdLuA9t+9ng
+2F73v+EwQ+1S3e/xKeq1jVV3NteQg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:28 2025 by rpki-client