Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9e7fb5d2-b9d2-3090-ba48-bd8fe36734c9.roa
File:                     9e7fb5d2-b9d2-3090-ba48-bd8fe36734c9.roa (raw, json)
Hash identifier:          wWOPbE3cVQfx3x0f8bcB8dd/5yXtjL1RSMIN3YdPWHI=
Subject key identifier:   1E:13:E7:00:0E:D0:C4:29:FA:BC:9A:D8:6C:43:02:59:C4:87:80:C0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858401396AF747DDC020D69DD1A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9e7fb5d2-b9d2-3090-ba48-bd8fe36734c9.roa
Signing time:             Tue 29 Nov 2022 12:00:00 +0000
ROA not before:           Tue 29 Nov 2022 12:00:00 +0000
ROA not after:            Wed 04 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        146.130.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:13:96:af:74:7d:dc:02:0d:69:dd:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 29 12:00:00 2022 GMT
            Not After : Jan  4 05:00:00 2023 GMT
        Subject: CN=b44d6c2f-151c-4046-91ed-8cd2aaff0f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:20:5a:68:fa:ca:7c:11:58:f4:bc:05:bb:6c:
                    60:1e:a8:c4:9e:8e:7c:33:57:1a:b3:c8:5a:67:a9:
                    13:60:e7:bb:9e:a2:7d:8e:4d:01:56:67:68:e9:7e:
                    69:7d:22:77:eb:a1:d0:83:d7:59:db:16:74:3d:73:
                    2f:a5:75:33:63:6b:f4:bd:51:1a:6a:d3:54:92:0c:
                    01:f6:ab:b9:8e:7d:7c:c3:d8:76:aa:b9:24:a0:07:
                    f8:d3:2f:b0:8f:57:f8:00:cb:17:a0:ff:8e:6f:f9:
                    69:22:75:1f:b4:70:2e:96:8f:41:27:df:3d:29:4e:
                    07:d7:9d:22:ce:23:91:9d:0a:87:bf:eb:1f:0d:25:
                    66:cb:c0:d2:c5:4e:e4:b1:1b:d4:65:4d:fc:79:39:
                    dc:a2:fa:84:57:fd:6d:d6:14:b5:6a:2d:5c:a5:be:
                    a7:f5:56:63:2a:68:7d:88:92:7a:49:76:9d:f7:c0:
                    c1:3e:75:a9:22:34:79:23:dc:c5:e5:ff:db:d7:c3:
                    5f:e4:f2:2a:bf:e3:aa:69:a2:81:d3:15:f5:c9:72:
                    37:81:9b:e2:96:50:1a:32:e2:8c:f6:67:11:ea:27:
                    57:db:eb:e2:df:f3:c0:ab:fd:79:b5:65:db:1f:e6:
                    5a:b2:b3:15:1a:9a:bb:4e:b4:51:f4:64:00:e8:08:
                    fe:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:13:E7:00:0E:D0:C4:29:FA:BC:9A:D8:6C:43:02:59:C4:87:80:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9e7fb5d2-b9d2-3090-ba48-bd8fe36734c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.130.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:fe:e9:b9:4e:41:16:5b:8f:5b:54:8f:bd:54:04:86:05:54:
         28:8b:37:de:c9:58:49:52:11:4b:78:d7:f0:97:f6:db:87:cf:
         90:33:83:2a:f4:dd:53:dc:1f:26:1e:a4:33:08:ec:9f:05:96:
         92:b5:7e:3c:ef:fe:78:88:8e:bf:8d:9b:3b:31:d1:08:51:9f:
         30:a5:8f:d0:33:68:f0:f6:31:1c:82:8b:77:70:64:88:c7:48:
         e1:80:eb:95:18:8d:ee:c1:bc:45:0c:43:9a:41:f6:7d:89:39:
         71:7e:86:9e:f3:5a:9e:38:a7:b8:ce:e9:49:5c:d3:53:81:d0:
         32:e0:29:24:44:81:fd:01:d0:eb:cd:0a:4a:66:e7:57:f7:99:
         ae:59:c5:56:ab:b8:66:82:33:cb:73:83:ab:e3:c6:b5:55:7e:
         b7:d9:f4:06:81:ba:7e:7d:92:49:fa:cc:c6:08:12:66:7c:14:
         52:b6:4a:60:1d:f5:70:f3:ee:6f:7e:07:90:03:8c:d0:63:8c:
         e6:a4:7a:3d:2b:d4:0c:f8:4c:1a:d6:b8:2a:42:bb:eb:f0:79:
         d6:d1:45:b8:0f:33:f9:20:76:da:b6:33:be:60:06:24:ae:52:
         05:aa:a1:78:49:dd:a0:ea:5a:67:7e:f9:d1:c3:36:24:48:bc:
         2d:ae:67:88
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEATlq90fdwCDWndGoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEyOTEyMDAwMFoXDTIzMDEwNDA1MDAwMFowLzEtMCsGA1UEAxMk
YjQ0ZDZjMmYtMTUxYy00MDQ2LTkxZWQtOGNkMmFhZmYwZjkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SBaaPrKfBFY9LwFu2xgHqjEno58M1cas8ha
Z6kTYOe7nqJ9jk0BVmdo6X5pfSJ366HQg9dZ2xZ0PXMvpXUzY2v0vVEaatNUkgwB
9qu5jn18w9h2qrkkoAf40y+wj1f4AMsXoP+Ob/lpInUftHAulo9BJ989KU4H150i
ziORnQqHv+sfDSVmy8DSxU7ksRvUZU38eTncovqEV/1t1hS1ai1cpb6n9VZjKmh9
iJJ6SXad98DBPnWpIjR5I9zF5f/b18Nf5PIqv+OqaaKB0xX1yXI3gZvillAaMuKM
9mcR6idX2+vi3/PAq/15tWXbH+ZasrMVGpq7TrRR9GQA6Aj+lQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFB4T5wAO0MQp+rya2GxDAlnEh4DAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOWU3ZmI1ZDItYjlkMi0z
MDkwLWJhNDgtYmQ4ZmUzNjczNGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkoIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATv7puU5BFluPW1SPvVQEhgVUKIs33slYSVIRS3jX8Jf224fPkDODKvTd
U9wfJh6kMwjsnwWWkrV+PO/+eIiOv42bOzHRCFGfMKWP0DNo8PYxHIKLd3BkiMdI
4YDrlRiN7sG8RQxDmkH2fYk5cX6GnvNanjinuM7pSVzTU4HQMuApJESB/QHQ680K
SmbnV/eZrlnFVqu4ZoIzy3ODq+PGtVV+t9n0BoG6fn2SSfrMxggSZnwUUrZKYB31
cPPub34HkAOM0GOM5qR6PSvUDPhMGta4KkK76/B51tFFuA8z+SB22rYzvmAGJK5S
BaqheEndoOpaZ3750cM2JEi8La5niA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:48:06 2025 by rpki-client