Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a1d1ccb4-9589-3def-bf91-96f9747fbb52.roa
File:                     a1d1ccb4-9589-3def-bf91-96f9747fbb52.roa (raw, json)
Hash identifier:          Cxrvc/sGcLQEQiAB5AywarOEShNaW2sUauj50AeHS2w=
Subject key identifier:   F7:AC:9F:B9:06:90:F4:EB:9A:24:6D:0A:D4:4C:36:4A:67:4E:FD:A8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF8B0106067120BAAAE4BF300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a1d1ccb4-9589-3def-bf91-96f9747fbb52.roa
Signing time:             Sat 19 Nov 2022 12:00:00 +0000
ROA not before:           Sat 19 Nov 2022 12:00:00 +0000
ROA not after:            Sun 25 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        70.251.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f8:b0:10:60:67:12:0b:aa:ae:4b:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 19 12:00:00 2022 GMT
            Not After : Dec 25 05:00:00 2022 GMT
        Subject: CN=aa19150a-a7ea-4b54-a94b-88f6e9da0456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:76:68:b9:22:4e:a2:e4:24:ab:41:18:cf:69:
                    86:00:bc:9e:34:f5:58:16:fe:fd:0d:89:a2:9e:1a:
                    c2:84:7a:b3:0e:45:df:8b:ef:ca:7b:40:c5:20:51:
                    20:18:ca:c7:7e:cb:ab:98:1a:46:28:07:95:14:1e:
                    e0:93:46:33:19:16:62:d5:05:f1:fb:a3:9a:33:be:
                    d3:29:e9:cb:b0:66:33:3f:d6:0a:e7:a2:2e:1b:a3:
                    1f:3c:bc:d7:a6:ca:74:1e:cf:89:f0:61:57:cb:3f:
                    5e:7a:1d:ea:54:06:4b:00:98:fe:64:e3:3f:d7:74:
                    37:30:40:91:db:8a:6a:b1:81:fe:74:01:2c:f6:dd:
                    96:27:c2:76:1d:df:a3:f3:18:2c:bd:c3:6e:05:a8:
                    c3:67:a3:75:f6:aa:52:d8:9e:e9:f3:a6:29:6b:f1:
                    0f:45:4d:40:bf:80:f0:d4:4b:66:b1:50:ae:28:6e:
                    54:38:3d:c1:7c:db:f7:df:ec:31:74:b5:4f:1f:2f:
                    33:6c:f3:49:0e:8d:7c:22:8f:86:5f:81:d2:38:95:
                    14:2f:b3:f0:2f:d4:25:1c:b5:5e:9d:5d:d6:ef:04:
                    81:69:5b:a5:e4:b7:b4:03:e8:c0:a5:a0:4c:e1:d1:
                    fb:73:cf:5f:c3:21:2b:39:77:b1:3c:c4:d8:89:6d:
                    2b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AC:9F:B9:06:90:F4:EB:9A:24:6D:0A:D4:4C:36:4A:67:4E:FD:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a1d1ccb4-9589-3def-bf91-96f9747fbb52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.251.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:d1:a8:1e:29:24:f1:b1:5d:3c:7e:b0:fd:ee:25:a8:00:62:
         de:d4:92:04:a7:07:aa:8f:7d:ca:fb:70:63:64:2f:11:c4:55:
         e6:fd:62:a6:d4:8b:4e:96:4e:ef:78:b5:69:08:6c:bf:bd:11:
         f3:8f:9c:68:ed:ca:15:d5:d2:7b:6c:cf:bb:4a:63:0a:c4:97:
         0f:79:bd:06:bd:95:b7:9e:e3:b5:46:06:28:2f:72:64:21:5b:
         4f:7f:34:31:39:b0:c5:a4:94:c0:31:03:be:19:af:b3:85:66:
         67:72:de:35:c0:31:9a:4b:9b:a6:d5:cc:e1:8b:1b:a7:ae:57:
         a9:ad:f0:51:37:a7:38:ab:a8:3d:7e:2c:bc:a0:dc:db:a7:53:
         3e:42:af:37:02:9f:72:cd:24:14:9b:1c:58:03:39:5f:7d:a2:
         b0:ee:1b:54:a3:79:c2:81:8c:05:c7:3a:9c:b8:e9:20:52:f2:
         fb:71:16:35:45:0e:a5:93:eb:7d:22:55:ec:63:80:68:d7:49:
         cc:16:b9:55:9c:49:95:d7:d4:71:0b:ec:62:1a:8c:5c:e2:da:
         fe:5f:83:49:67:4a:7e:5a:71:4b:f9:c8:99:47:b1:25:d2:d9:
         0b:fa:78:0a:c5:34:d6:8c:c0:65:59:52:b9:66:74:a7:12:ee:
         24:26:7b:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD/4sBBgZxILqq5L8wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTExOTEyMDAwMFoXDTIyMTIyNTA1MDAwMFowLzEtMCsGA1UEAxMk
YWExOTE1MGEtYTdlYS00YjU0LWE5NGItODhmNmU5ZGEwNDU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHZouSJOouQkq0EYz2mGALyeNPVYFv79DYmi
nhrChHqzDkXfi+/Ke0DFIFEgGMrHfsurmBpGKAeVFB7gk0YzGRZi1QXx+6OaM77T
KenLsGYzP9YK56IuG6MfPLzXpsp0Hs+J8GFXyz9eeh3qVAZLAJj+ZOM/13Q3MECR
24pqsYH+dAEs9t2WJ8J2Hd+j8xgsvcNuBajDZ6N19qpS2J7p86Ypa/EPRU1Av4Dw
1EtmsVCuKG5UOD3BfNv33+wxdLVPHy8zbPNJDo18Io+GX4HSOJUUL7PwL9QlHLVe
nV3W7wSBaVul5Le0A+jApaBM4dH7c89fwyErOXexPMTYiW0rTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPesn7kGkPTrmiRtCtRMNkpnTv2oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYTFkMWNjYjQtOTU4OS0z
ZGVmLWJmOTEtOTZmOTc0N2ZiYjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRvtAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAPRqB4pJPGxXTx+sP3uJagAYt7UkgSnB6qPfcr7cGNkLxHEVeb9YqbU
i06WTu94tWkIbL+9EfOPnGjtyhXV0ntsz7tKYwrElw95vQa9lbee47VGBigvcmQh
W09/NDE5sMWklMAxA74Zr7OFZmdy3jXAMZpLm6bVzOGLG6euV6mt8FE3pzirqD1+
LLyg3NunUz5CrzcCn3LNJBSbHFgDOV99orDuG1SjecKBjAXHOpy46SBS8vtxFjVF
DqWT630iVexjgGjXScwWuVWcSZXX1HEL7GIajFzi2v5fg0lnSn5acUv5yJlHsSXS
2Qv6eArFNNaMwGVZUrlmdKcS7iQme7g=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:53:17 2025 by rpki-client