Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9c84ff6d-9266-3a0c-856b-5fa249748ebc.roa
File:                     9c84ff6d-9266-3a0c-856b-5fa249748ebc.roa (raw, json)
Hash identifier:          QS63UvoFFdItBYWkADs67Y8nQKkLwUUME8tQ537FYK8=
Subject key identifier:   68:61:ED:B7:D8:42:0D:64:FA:AE:E4:BB:7A:F5:AD:EC:7C:C0:DF:B1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840059221D77B0A086B44290810
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9c84ff6d-9266-3a0c-856b-5fa249748ebc.roa
Signing time:             Thu 24 Nov 2022 12:00:00 +0000
ROA not before:           Thu 24 Nov 2022 12:00:00 +0000
ROA not after:            Fri 30 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        182.24.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:05:92:21:d7:7b:0a:08:6b:44:29:08:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 24 12:00:00 2022 GMT
            Not After : Dec 30 05:00:00 2022 GMT
        Subject: CN=f58173b1-8c36-464e-8081-033883066309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bd:06:ea:3b:f2:7f:c1:dc:09:07:cc:21:72:
                    a0:8d:06:90:e2:2c:14:62:3e:05:9f:07:1c:de:f8:
                    d7:b1:2f:f3:d8:71:ec:e4:9c:d0:a4:97:ee:79:2e:
                    f3:e7:fb:92:19:d3:44:d8:50:ad:56:be:92:ce:8e:
                    ab:0b:93:c5:df:87:50:d8:b7:3a:ee:c1:24:8f:53:
                    d8:f9:63:fc:f4:a6:4a:26:bc:71:fe:14:28:7b:23:
                    9e:3a:28:85:bc:1d:53:89:13:48:80:e6:91:29:32:
                    ad:51:e9:f9:01:b7:24:ea:63:c9:55:49:79:64:1d:
                    de:9d:04:09:c9:4a:74:6b:3f:de:29:63:f9:72:cf:
                    d3:57:f6:2e:d3:c9:35:70:d9:bf:5d:d6:8d:49:64:
                    e6:17:5c:74:91:c8:02:1b:fd:e1:5b:40:30:b6:06:
                    44:91:f0:1a:c2:46:87:2a:e3:98:45:eb:fe:0a:5c:
                    01:bb:05:7d:3e:a5:1a:bc:77:27:14:cd:09:27:74:
                    7f:1b:2d:29:4d:fb:19:6f:32:f3:61:7c:f2:5a:45:
                    2d:d7:46:0b:5a:d2:1e:20:42:2b:ec:e9:8f:5d:54:
                    55:49:00:8f:0b:85:01:22:49:35:c8:97:4a:a1:1c:
                    44:f0:4b:94:8e:8c:84:03:59:1b:d8:34:c7:6b:16:
                    ce:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:61:ED:B7:D8:42:0D:64:FA:AE:E4:BB:7A:F5:AD:EC:7C:C0:DF:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9c84ff6d-9266-3a0c-856b-5fa249748ebc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.24.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:65:b7:ed:03:11:8d:0f:a4:85:31:55:de:7d:b9:15:46:22:
         36:9b:0b:ff:47:f2:a9:87:de:6a:ed:1d:ad:c3:23:ff:37:16:
         55:e3:11:95:b0:b3:01:8e:bf:12:13:98:18:3f:ea:c6:31:5f:
         88:2c:39:d4:11:ca:62:67:1b:8e:f0:ee:8f:4d:44:9c:04:1c:
         af:eb:b6:0b:6e:29:58:5b:c4:e2:a3:06:67:93:3a:9f:57:d6:
         23:92:58:1a:46:38:07:6e:87:18:6c:13:f2:98:11:5d:0a:7a:
         11:03:48:78:fe:62:c3:7d:2f:70:19:a9:5c:93:e5:18:aa:c1:
         f7:e8:b4:77:b9:c3:7e:48:58:77:0c:f9:e7:ac:0f:c4:2a:1e:
         ac:83:54:b9:8d:5e:99:35:26:e5:7c:a7:ad:04:29:b5:29:00:
         3b:41:0c:4b:22:f3:4d:24:dc:5c:91:b0:00:36:67:b9:f0:64:
         48:4f:c6:5e:93:b5:d4:ce:a6:5d:cf:ee:11:1f:6f:fa:1f:e7:
         86:68:25:df:31:00:da:04:30:03:df:d8:fb:8a:46:a3:e2:6e:
         5e:7f:36:6d:5c:60:08:a9:11:5f:4e:10:86:3f:90:7e:07:07:
         69:95:3f:8e:39:d5:d7:c1:c6:14:71:0e:43:c5:fb:14:fb:93:
         d4:b0:76:0b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAFkiHXewoIa0QpCBAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEyNDEyMDAwMFoXDTIyMTIzMDA1MDAwMFowLzEtMCsGA1UEAxMk
ZjU4MTczYjEtOGMzNi00NjRlLTgwODEtMDMzODgzMDY2MzA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL0G6jvyf8HcCQfMIXKgjQaQ4iwUYj4Fnwcc
3vjXsS/z2HHs5JzQpJfueS7z5/uSGdNE2FCtVr6Szo6rC5PF34dQ2Lc67sEkj1PY
+WP89KZKJrxx/hQoeyOeOiiFvB1TiRNIgOaRKTKtUen5Abck6mPJVUl5ZB3enQQJ
yUp0az/eKWP5cs/TV/Yu08k1cNm/XdaNSWTmF1x0kcgCG/3hW0AwtgZEkfAawkaH
KuOYRev+ClwBuwV9PqUavHcnFM0JJ3R/Gy0pTfsZbzLzYXzyWkUt10YLWtIeIEIr
7OmPXVRVSQCPC4UBIkk1yJdKoRxE8EuUjoyEA1kb2DTHaxbO5wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGhh7bfYQg1k+q7ku3r1rex8wN+xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOWM4NGZmNmQtOTI2Ni0z
YTBjLTg1NmItNWZhMjQ5NzQ4ZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCthgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAi2W37QMRjQ+khTFV3n25FUYiNpsL/0fyqYfeau0drcMj/zcWVeMRlbCz
AY6/EhOYGD/qxjFfiCw51BHKYmcbjvDuj01EnAQcr+u2C24pWFvE4qMGZ5M6n1fW
I5JYGkY4B26HGGwT8pgRXQp6EQNIeP5iw30vcBmpXJPlGKrB9+i0d7nDfkhYdwz5
56wPxCoerINUuY1emTUm5XynrQQptSkAO0EMSyLzTSTcXJGwADZnufBkSE/GXpO1
1M6mXc/uER9v+h/nhmgl3zEA2gQwA9/Y+4pGo+JuXn82bVxgCKkRX04Qhj+QfgcH
aZU/jjnV18HGFHEOQ8X7FPuT1LB2Cw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:41:34 2025 by rpki-client