Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99ebf3f4-f9a2-3b85-8e29-c1b6efd33abe.roa
File:                     99ebf3f4-f9a2-3b85-8e29-c1b6efd33abe.roa (raw, json)
Hash identifier:          nEPzzLwNRppOf559BSK1qvfwbfOFAD03cBExWU/0u7w=
Subject key identifier:   74:AB:5A:90:E7:76:D8:5E:DA:7D:89:EF:CC:45:B0:D5:4C:1D:71:5C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858408F9DE8134553380D2342B180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99ebf3f4-f9a2-3b85-8e29-c1b6efd33abe.roa
Signing time:             Thu 12 Jan 2023 12:00:00 +0000
ROA not before:           Thu 12 Jan 2023 12:00:00 +0000
ROA not after:            Fri 17 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        16.55.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:8f:9d:e8:13:45:53:38:0d:23:42:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 12 12:00:00 2023 GMT
            Not After : Feb 17 05:00:00 2023 GMT
        Subject: CN=adac52fa-56cd-4775-8cf1-04c2e8155cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:03:30:6c:c6:d0:7b:21:ea:a6:7e:64:83:0f:
                    0e:b6:9f:f8:06:db:0a:58:45:81:e8:38:a4:b0:85:
                    50:70:5a:2f:3f:a8:3f:d6:16:50:b6:8e:c9:bb:40:
                    5e:ca:d5:3e:b5:52:90:e9:eb:d6:a6:0a:82:41:16:
                    00:ea:4b:1d:28:42:85:f0:38:71:98:3d:7e:7e:f7:
                    17:44:02:47:b7:52:35:c8:59:e1:f3:3a:6b:6c:f2:
                    73:cc:bd:5f:c3:18:51:3d:57:77:e3:67:42:73:96:
                    38:36:5b:2d:69:19:45:b0:2d:27:09:54:19:c5:a1:
                    70:f3:e5:1b:44:65:62:bf:39:4b:07:ba:d2:81:d9:
                    0d:58:28:d0:6f:2e:72:41:96:ea:d0:91:be:48:b3:
                    65:4c:48:10:24:8d:0b:e2:13:80:60:df:35:be:fe:
                    97:c8:d9:d8:8b:74:16:be:4c:ec:2d:34:22:c4:36:
                    17:d9:e7:c5:6c:fc:1e:db:4f:e6:07:45:45:54:42:
                    81:3b:e7:00:5e:3c:55:de:b7:7a:6d:ff:73:ae:34:
                    96:47:1e:95:14:3f:be:7c:76:9b:74:32:3f:8d:1f:
                    bf:68:c8:00:6c:d8:82:df:eb:e7:f5:e5:23:a9:b6:
                    eb:66:7f:4f:50:2e:93:14:41:54:e7:ca:39:0a:36:
                    d5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AB:5A:90:E7:76:D8:5E:DA:7D:89:EF:CC:45:B0:D5:4C:1D:71:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99ebf3f4-f9a2-3b85-8e29-c1b6efd33abe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:b6:f0:e9:b4:2c:c9:36:39:a8:3b:c5:e2:d6:30:ce:9c:87:
         b1:5b:13:02:11:65:4d:8c:3f:64:8f:e5:9e:70:a0:a2:91:ae:
         8f:fb:05:40:1b:d9:35:bf:d3:89:61:8b:de:97:63:78:eb:1c:
         37:68:bb:32:c4:fc:9a:93:38:bc:71:ee:ab:77:f0:19:ac:01:
         fb:db:7c:be:1b:ed:b3:cb:b2:64:da:c5:ff:c8:99:8d:4f:53:
         dc:e2:37:73:12:a8:c0:14:ef:1a:57:5b:90:89:52:83:3c:de:
         b4:c4:82:43:0d:dc:7e:5c:c4:96:b4:31:51:85:24:79:91:1d:
         1e:16:35:91:2c:e3:6f:bb:69:b4:27:27:86:b8:95:e4:63:32:
         59:60:1d:15:d7:a3:3d:d2:50:ae:d7:63:2a:f3:d3:84:f3:66:
         f5:c7:b3:9d:bb:fb:82:4a:20:2c:8e:c3:30:59:2f:ab:5c:5d:
         dc:49:95:9b:67:cd:f4:b0:8f:4e:7f:33:f2:10:65:d4:1b:dc:
         28:1f:ee:58:4e:cb:67:a5:3b:12:29:48:02:fe:9b:06:b6:5a:
         9e:23:dd:67:b4:94:7c:09:90:1b:18:84:c7:34:be:6e:7e:3b:
         9d:61:31:d7:b4:26:d7:ed:38:a6:46:ee:eb:72:d2:4e:47:02:
         97:f9:11:b8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECPnegTRVM4DSNCsYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDExMjEyMDAwMFoXDTIzMDIxNzA1MDAwMFowLzEtMCsGA1UEAxMk
YWRhYzUyZmEtNTZjZC00Nzc1LThjZjEtMDRjMmU4MTU1Y2YwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQMwbMbQeyHqpn5kgw8Otp/4BtsKWEWB6Dik
sIVQcFovP6g/1hZQto7Ju0BeytU+tVKQ6evWpgqCQRYA6ksdKEKF8DhxmD1+fvcX
RAJHt1I1yFnh8zprbPJzzL1fwxhRPVd342dCc5Y4NlstaRlFsC0nCVQZxaFw8+Ub
RGVivzlLB7rSgdkNWCjQby5yQZbq0JG+SLNlTEgQJI0L4hOAYN81vv6XyNnYi3QW
vkzsLTQixDYX2efFbPwe20/mB0VFVEKBO+cAXjxV3rd6bf9zrjSWRx6VFD++fHab
dDI/jR+/aMgAbNiC3+vn9eUjqbbrZn9PUC6TFEFU58o5CjbVzwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHSrWpDndthe2n2J78xFsNVMHXFcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOTllYmYzZjQtZjlhMi0z
Yjg1LThlMjktYzFiNmVmZDMzYWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEDcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEArLbw6bQsyTY5qDvF4tYwzpyHsVsTAhFlTYw/ZI/lnnCgopGuj/sFQBvZ
Nb/TiWGL3pdjeOscN2i7MsT8mpM4vHHuq3fwGawB+9t8vhvts8uyZNrF/8iZjU9T
3OI3cxKowBTvGldbkIlSgzzetMSCQw3cflzElrQxUYUkeZEdHhY1kSzjb7tptCcn
hriV5GMyWWAdFdejPdJQrtdjKvPThPNm9ceznbv7gkogLI7DMFkvq1xd3EmVm2fN
9LCPTn8z8hBl1BvcKB/uWE7LZ6U7EilIAv6bBrZaniPdZ7SUfAmQGxiExzS+bn47
nWEx17Qm1+04pkbu63LSTkcCl/kRuA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:53 2025 by rpki-client