Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9a9eefb2-d765-3fcc-bc94-5683d5a965f9.roa
File:                     9a9eefb2-d765-3fcc-bc94-5683d5a965f9.roa (raw, json)
Hash identifier:          pDjJHHBeC+S/Wox77UamJYtyFPevtMYnTHD4TuPcUWs=
Subject key identifier:   26:06:12:41:69:64:EF:DA:81:5C:62:F3:C7:58:C1:51:1E:F2:CD:79
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EEBDDEC288F1BBEACBFF08200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9a9eefb2-d765-3fcc-bc94-5683d5a965f9.roa
Signing time:             Mon 15 Aug 2022 12:00:00 +0000
ROA not before:           Mon 15 Aug 2022 12:00:00 +0000
ROA not after:            Tue 20 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.188.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:eb:dd:ec:28:8f:1b:be:ac:bf:f0:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 15 12:00:00 2022 GMT
            Not After : Sep 20 04:00:00 2022 GMT
        Subject: CN=29180983-019f-4916-9ec0-eaee1c5e77ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a8:4d:67:33:60:53:ba:e1:af:bb:20:c5:b9:
                    67:76:ef:83:cf:60:4a:1d:d4:92:32:f3:45:e8:33:
                    fd:88:ba:22:a9:ad:ea:54:c6:58:3f:e1:a8:db:a9:
                    67:9c:02:a5:f0:f0:28:fe:a7:e8:a4:ae:3f:86:c9:
                    85:04:f6:04:d1:22:84:a0:5f:34:4f:f2:07:c5:12:
                    33:74:99:e4:d8:cc:90:6e:64:52:8b:fe:dc:cb:4f:
                    62:eb:3e:e6:a9:52:3a:ba:41:73:cc:61:52:bd:29:
                    0c:16:a5:b5:ec:0d:73:df:dd:ec:73:2a:62:42:1b:
                    7b:09:a2:b1:3f:93:69:f0:44:1b:9f:a2:d2:12:f8:
                    30:13:41:a9:f6:87:ee:26:99:92:07:e5:cd:21:cf:
                    d9:04:d4:76:db:33:c8:35:fe:59:80:6f:fe:f4:3b:
                    66:32:91:6b:11:94:05:df:75:b0:f6:88:2b:38:1a:
                    79:b5:3a:98:00:8b:c2:53:1b:27:b3:39:27:9b:77:
                    b9:9e:70:9c:65:9a:17:64:24:0d:0b:93:df:2a:06:
                    b3:59:41:43:cf:5e:e1:ec:c6:ce:0d:8a:08:c5:e9:
                    bf:25:bf:59:a8:53:93:f8:0f:d8:5d:20:65:f4:9e:
                    38:bf:c0:6b:f5:ca:88:7c:1b:85:66:69:81:c1:f1:
                    d4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:06:12:41:69:64:EF:DA:81:5C:62:F3:C7:58:C1:51:1E:F2:CD:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9a9eefb2-d765-3fcc-bc94-5683d5a965f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.188.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:a9:c1:97:9b:7c:ef:80:1f:80:70:3d:6e:b1:c8:04:bf:02:
         a6:a1:1c:e5:f1:23:a2:f8:9c:9e:1a:d8:54:4c:18:09:74:b5:
         62:05:51:36:05:c5:bf:d1:fa:24:f4:fb:25:0f:2a:05:85:85:
         86:8b:9f:d8:7d:3c:8c:00:64:30:93:fb:86:27:eb:3d:a3:bb:
         04:12:03:2e:86:d7:1b:50:4a:3c:af:7e:30:d3:0b:df:05:4e:
         14:f6:6a:c5:ce:da:a7:ed:fb:02:80:51:63:f9:44:9f:f6:9f:
         e0:dd:46:9d:c1:96:e9:2b:50:f8:5c:48:a2:41:77:7f:fb:0c:
         78:0b:a0:75:b4:a0:8b:48:68:20:c6:60:e9:07:14:84:d2:2e:
         25:e3:99:9b:3b:ec:00:5c:c6:07:b7:cb:bc:5c:17:8e:eb:1e:
         50:c8:d0:10:01:9e:a1:b9:a5:73:7e:bf:35:c2:0b:01:c5:98:
         9a:31:70:75:ae:e2:0b:09:ec:71:54:ce:49:4d:cb:74:08:fb:
         38:48:b0:ce:59:61:9f:34:e7:45:7b:3f:27:bb:fc:f5:82:f8:
         10:de:af:20:05:d9:83:96:43:7b:d9:75:fc:5e:0a:d8:2a:ee:
         75:95:84:8b:ec:ea:57:34:6a:d1:1d:ab:f8:fa:5d:45:36:3a:
         55:a5:b4:db
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD7r3ewojxu+rL/wggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDgxNTEyMDAwMFoXDTIyMDkyMDA0MDAwMFowLzEtMCsGA1UEAxMk
MjkxODA5ODMtMDE5Zi00OTE2LTllYzAtZWFlZTFjNWU3N2ZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKhNZzNgU7rhr7sgxblndu+Dz2BKHdSSMvNF
6DP9iLoiqa3qVMZYP+Go26lnnAKl8PAo/qfopK4/hsmFBPYE0SKEoF80T/IHxRIz
dJnk2MyQbmRSi/7cy09i6z7mqVI6ukFzzGFSvSkMFqW17A1z393scypiQht7CaKx
P5Np8EQbn6LSEvgwE0Gp9ofuJpmSB+XNIc/ZBNR22zPINf5ZgG/+9DtmMpFrEZQF
33Ww9ogrOBp5tTqYAIvCUxsnszknm3e5nnCcZZoXZCQNC5PfKgazWUFDz17h7MbO
DYoIxem/Jb9ZqFOT+A/YXSBl9J44v8Br9cqIfBuFZmmBwfHUXQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCYGEkFpZO/agVxi88dYwVEe8s15MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOWE5ZWVmYjItZDc2NS0z
ZmNjLWJjOTQtNTY4M2Q1YTk2NWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAELwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAV6nBl5t874AfgHA9brHIBL8CpqEc5fEjovicnhrYVEwYCXS1YgVRNgXF
v9H6JPT7JQ8qBYWFhouf2H08jABkMJP7hifrPaO7BBIDLobXG1BKPK9+MNML3wVO
FPZqxc7ap+37AoBRY/lEn/af4N1GncGW6StQ+FxIokF3f/sMeAugdbSgi0hoIMZg
6QcUhNIuJeOZmzvsAFzGB7fLvFwXjuseUMjQEAGeobmlc36/NcILAcWYmjFwda7i
CwnscVTOSU3LdAj7OEiwzllhnzTnRXs/J7v89YL4EN6vIAXZg5ZDe9l1/F4K2Cru
dZWEi+zqVzRq0R2r+PpdRTY6VaW02w==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:18:32 2025 by rpki-client