Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9cf80db6-ef17-3540-acb6-3626bc04fc0b.roa
File:                     9cf80db6-ef17-3540-acb6-3626bc04fc0b.roa (raw, json)
Hash identifier:          MBFrU9JGCM8IuNcuwczOq8iJW1Rxwy70gSVhFFRJb7E=
Subject key identifier:   DE:DF:FC:3E:32:23:7D:C3:E1:9D:8B:DC:C2:07:5C:9D:53:9F:AF:EA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FA76865D86892BD37D82E3240
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9cf80db6-ef17-3540-acb6-3626bc04fc0b.roa
Signing time:             Fri 21 Oct 2022 16:30:08 +0000
ROA not before:           Fri 21 Oct 2022 16:30:08 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        165.129.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a7:68:65:d8:68:92:bd:37:d8:2e:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 21 16:30:08 2022 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=0498e47b-2415-41b7-9861-9ad4a87c00b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dc:9d:8b:09:a5:41:1b:5d:ed:bf:35:48:d1:
                    9c:b9:1f:61:a5:49:21:c1:2f:5c:f2:08:ec:d9:29:
                    0d:50:48:a6:aa:75:6f:2b:b1:18:06:9a:97:1b:1d:
                    eb:5c:09:75:f4:be:b1:b0:b4:13:8b:49:45:ab:10:
                    c7:54:44:42:40:ed:65:bc:5a:3e:d4:d4:f3:c5:94:
                    42:51:40:e1:a8:ed:52:bf:c8:4c:c6:36:89:f6:84:
                    ba:9d:b9:3c:cc:59:ee:4b:61:f0:cb:4c:89:4e:14:
                    0f:da:9a:ba:d9:22:c8:6e:18:a1:6e:4a:18:14:af:
                    77:6b:ca:55:f5:41:c1:88:17:5d:9d:2a:6b:18:82:
                    69:61:99:8b:95:2c:5c:63:cb:f6:41:b5:71:ee:93:
                    14:ce:ee:44:ed:d7:2e:27:9c:7a:25:16:0a:68:95:
                    27:05:78:cc:bc:b6:29:9b:6b:8a:67:2a:47:f7:ad:
                    81:de:da:a5:94:d1:19:ce:8c:a6:64:2f:69:ae:d9:
                    7d:84:e3:1d:68:b3:62:68:ef:28:46:a5:0f:5f:a2:
                    67:99:99:5e:85:a9:e0:78:47:a6:4e:e3:a7:7b:b5:
                    47:ad:8f:ec:dd:55:0b:57:5e:00:5d:d7:82:a7:9b:
                    ac:27:88:c3:d8:ce:3f:41:61:80:36:4e:95:88:fc:
                    58:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:DF:FC:3E:32:23:7D:C3:E1:9D:8B:DC:C2:07:5C:9D:53:9F:AF:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9cf80db6-ef17-3540-acb6-3626bc04fc0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.129.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:bb:d0:ef:32:42:f0:14:0e:5d:02:17:c7:8c:d7:05:ba:7f:
         bc:a7:e9:99:c2:12:5d:ec:ed:44:9a:1f:c8:f9:6b:ca:3b:5b:
         27:ee:c7:fc:3e:aa:c0:d9:d0:a8:cf:26:2a:e4:0c:ca:90:58:
         9e:d2:fb:41:cd:eb:e6:d7:12:fb:10:a1:db:36:97:3a:5e:41:
         1b:4e:b6:39:78:0f:9e:90:95:69:b8:83:8a:06:45:5a:91:6c:
         05:9c:24:b3:98:fc:d5:78:2f:97:87:71:44:07:c9:ee:66:f2:
         56:ac:fa:29:43:b6:d0:58:ce:1f:24:0f:e9:4c:c9:9d:83:0c:
         dd:8f:4f:fc:02:6e:9b:80:c3:79:08:4e:b4:35:b6:1d:a0:bc:
         65:9e:ed:cd:14:1b:6f:93:fa:e6:e0:f8:8f:d5:12:d9:61:b2:
         52:d2:55:75:80:ae:39:c1:c2:5b:99:c3:33:d7:72:32:3d:4d:
         1c:e5:35:ca:e1:b7:5c:dd:f7:a9:0e:25:da:fe:ea:8b:01:87:
         c7:fb:11:a9:a9:aa:38:29:db:1b:00:3b:5c:02:1c:30:3e:00:
         af:d5:ba:f6:89:ed:c9:3a:f7:fc:82:24:fb:ad:f2:41:4f:8a:
         e3:4b:18:88:74:9c:5d:03:6a:47:89:96:65:23:97:3b:7f:a4:
         07:af:84:27
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+naGXYaJK9N9guMkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAyMTE2MzAwOFoXDTIyMTEyNjA1MDAwMFowLzEtMCsGA1UEAxMk
MDQ5OGU0N2ItMjQxNS00MWI3LTk4NjEtOWFkNGE4N2MwMGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9ydiwmlQRtd7b81SNGcuR9hpUkhwS9c8gjs
2SkNUEimqnVvK7EYBpqXGx3rXAl19L6xsLQTi0lFqxDHVERCQO1lvFo+1NTzxZRC
UUDhqO1Sv8hMxjaJ9oS6nbk8zFnuS2Hwy0yJThQP2pq62SLIbhihbkoYFK93a8pV
9UHBiBddnSprGIJpYZmLlSxcY8v2QbVx7pMUzu5E7dcuJ5x6JRYKaJUnBXjMvLYp
m2uKZypH962B3tqllNEZzoymZC9prtl9hOMdaLNiaO8oRqUPX6JnmZlehangeEem
TuOne7VHrY/s3VULV14AXdeCp5usJ4jD2M4/QWGANk6ViPxYnwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFN7f/D4yI33D4Z2L3MIHXJ1Tn6/qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOWNmODBkYjYtZWYxNy0z
NTQwLWFjYjYtMzYyNmJjMDRmYzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApYEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAkbvQ7zJC8BQOXQIXx4zXBbp/vKfpmcISXeztRJofyPlryjtbJ+7H/D6q
wNnQqM8mKuQMypBYntL7Qc3r5tcS+xCh2zaXOl5BG062OXgPnpCVabiDigZFWpFs
BZwks5j81Xgvl4dxRAfJ7mbyVqz6KUO20FjOHyQP6UzJnYMM3Y9P/AJum4DDeQhO
tDW2HaC8ZZ7tzRQbb5P65uD4j9US2WGyUtJVdYCuOcHCW5nDM9dyMj1NHOU1yuG3
XN33qQ4l2v7qiwGHx/sRqamqOCnbGwA7XAIcMD4Ar9W69ontyTr3/IIk+63yQU+K
40sYiHScXQNqR4mWZSOXO3+kB6+EJw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:32 2025 by rpki-client