Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9cc4e8a3-57d1-3343-ae7d-5b6ecffc14eb.roa
File:                     9cc4e8a3-57d1-3343-ae7d-5b6ecffc14eb.roa (raw, json)
Hash identifier:          /XldX59M6yeSVjrVB/jfw8Ay+vzFun7qgtnKsCi8PEI=
Subject key identifier:   15:9A:66:8E:DA:02:AB:BD:88:40:1F:D2:03:4F:6A:85:C9:F7:96:C9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E70E2CDF36CB87E9A78737CC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9cc4e8a3-57d1-3343-ae7d-5b6ecffc14eb.roa
Signing time:             Sat 02 Jul 2022 12:00:00 +0000
ROA not before:           Sat 02 Jul 2022 12:00:00 +0000
ROA not after:            Sun 07 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.130.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:70:e2:cd:f3:6c:b8:7e:9a:78:73:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul  2 12:00:00 2022 GMT
            Not After : Aug  7 04:00:00 2022 GMT
        Subject: CN=6bda238e-4032-4adc-bcad-37e5cbef8333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7f:2e:c0:28:7c:67:06:ad:28:6e:a9:35:07:
                    87:22:62:8b:28:ef:aa:42:0c:11:f6:d6:f1:a2:6c:
                    6d:21:38:4c:6e:6a:21:4f:80:51:bc:39:bb:17:5d:
                    36:ac:de:cf:de:58:c7:89:0d:05:10:5d:a6:c3:30:
                    6d:f3:83:50:ae:b2:44:f5:37:36:44:2a:70:9a:2a:
                    20:6e:40:19:60:49:ef:b5:d7:26:1d:53:71:02:bf:
                    32:4d:8f:25:92:f9:21:0b:6b:c9:e5:d8:f1:03:44:
                    78:b2:41:43:e1:7a:ef:f6:79:1c:59:64:b5:c7:90:
                    ad:69:78:a8:80:ac:d2:d1:9e:ff:b1:f7:58:4a:d9:
                    c6:7a:31:b9:fd:51:b2:4e:68:6d:9e:ce:36:87:01:
                    b8:3a:f0:be:fb:7c:a0:a3:f2:f6:7b:fc:8c:e5:5e:
                    82:55:a9:84:e5:be:53:ce:88:12:4d:ed:92:5f:38:
                    71:d5:99:e6:5e:c3:86:2b:d3:78:c5:41:a9:6f:a2:
                    81:70:e9:3c:92:d9:0b:ba:60:48:18:f7:9f:83:27:
                    1f:e1:94:09:29:23:5a:7a:be:9a:7c:47:af:88:0c:
                    df:71:19:b9:ef:ec:82:27:5d:a1:88:56:83:75:4f:
                    6a:bd:7a:87:d5:4f:66:72:36:21:6e:99:86:f6:2d:
                    39:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9A:66:8E:DA:02:AB:BD:88:40:1F:D2:03:4F:6A:85:C9:F7:96:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9cc4e8a3-57d1-3343-ae7d-5b6ecffc14eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.130.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:8b:bc:ef:06:4e:c8:57:88:e1:f9:46:64:4d:e8:a0:77:5c:
         39:bd:aa:f4:0b:05:19:fb:a7:c1:81:dc:40:c0:ec:81:e8:a6:
         57:6d:43:be:09:0d:13:10:eb:f0:dc:f4:00:d5:c7:c3:27:fc:
         c2:fd:ac:de:67:cb:89:f4:81:9f:83:b5:d4:08:92:8c:a7:1f:
         78:b1:ad:68:44:45:7b:bf:25:d0:45:86:9b:46:75:59:13:a6:
         d5:05:76:40:5f:17:4b:b6:03:d1:a9:b1:64:37:37:01:35:dd:
         ac:69:68:1b:06:4f:cf:e4:90:82:70:9f:22:3f:e5:77:fc:b5:
         71:07:e9:f4:8d:a2:aa:bc:cf:ad:d3:6b:a2:3e:8d:63:70:fe:
         5c:9b:67:da:ee:57:be:a1:ce:f5:a9:14:13:c2:8d:3d:b2:94:
         bb:3e:8d:ef:0b:27:a9:5e:71:4c:0d:99:ef:05:9b:9a:71:36:
         54:00:de:97:8f:99:d1:60:9e:fb:bd:59:39:18:0d:c1:92:c2:
         47:7d:fa:b4:7e:14:34:2e:a3:34:d3:b1:d0:a9:2c:cd:54:e8:
         d1:05:3c:ab:dc:9e:0c:7d:43:b0:8f:55:f6:14:2a:2d:3d:d0:
         ad:58:c9:07:e6:0f:de:13:19:2f:33:e8:1b:c7:e5:a3:cb:c4:
         82:5f:2d:7f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5w4s3zbLh+mnhzfMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcwMjEyMDAwMFoXDTIyMDgwNzA0MDAwMFowLzEtMCsGA1UEAxMk
NmJkYTIzOGUtNDAzMi00YWRjLWJjYWQtMzdlNWNiZWY4MzMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo38uwCh8ZwatKG6pNQeHImKLKO+qQgwR9tbx
omxtIThMbmohT4BRvDm7F102rN7P3ljHiQ0FEF2mwzBt84NQrrJE9Tc2RCpwmiog
bkAZYEnvtdcmHVNxAr8yTY8lkvkhC2vJ5djxA0R4skFD4Xrv9nkcWWS1x5CtaXio
gKzS0Z7/sfdYStnGejG5/VGyTmhtns42hwG4OvC++3ygo/L2e/yM5V6CVamE5b5T
zogSTe2SXzhx1ZnmXsOGK9N4xUGpb6KBcOk8ktkLumBIGPefgycf4ZQJKSNaer6a
fEeviAzfcRm57+yCJ12hiFaDdU9qvXqH1U9mcjYhbpmG9i05SQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBWaZo7aAqu9iEAf0gNPaoXJ95bJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOWNjNGU4YTMtNTdkMS0z
MzQzLWFlN2QtNWI2ZWNmZmMxNGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEIIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAsou87wZOyFeI4flGZE3ooHdcOb2q9AsFGfunwYHcQMDsgeimV21DvgkN
ExDr8Nz0ANXHwyf8wv2s3mfLifSBn4O11AiSjKcfeLGtaERFe78l0EWGm0Z1WROm
1QV2QF8XS7YD0amxZDc3ATXdrGloGwZPz+SQgnCfIj/ld/y1cQfp9I2iqrzPrdNr
oj6NY3D+XJtn2u5XvqHO9akUE8KNPbKUuz6N7wsnqV5xTA2Z7wWbmnE2VADel4+Z
0WCe+71ZORgNwZLCR336tH4UNC6jNNOx0KkszVTo0QU8q9yeDH1DsI9V9hQqLT3Q
rVjJB+YP3hMZLzPoG8flo8vEgl8tfw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 16:05:57 2025 by rpki-client