Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a1ec41f4-0527-3501-9ad8-094c7a9f5ca5.roa
File:                     a1ec41f4-0527-3501-9ad8-094c7a9f5ca5.roa (raw, json)
Hash identifier:          xESN3PoYp68s5eEicg+1lPSo40pGwKJYIomW94rm99g=
Subject key identifier:   28:54:8E:F0:6D:AD:A4:B7:FC:A9:14:A6:FE:50:18:2A:1D:63:FE:6A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C6F43D6BB32C3E1BBED3C9700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a1ec41f4-0527-3501-9ad8-094c7a9f5ca5.roa
Signing time:             Fri 31 Dec 2021 05:00:00 +0000
ROA not before:           Fri 31 Dec 2021 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        63.246.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6f:43:d6:bb:32:c3:e1:bb:ed:3c:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 31 05:00:00 2021 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=e1c5459a-24b2-485d-9221-59e8f15a1bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:65:fd:16:14:a7:35:99:eb:99:81:95:ce:f9:
                    c5:e4:39:f8:e5:ec:03:b3:d8:58:1b:b1:de:04:08:
                    72:1f:31:0c:1c:e2:1b:e4:cd:0f:59:e8:b9:c2:90:
                    01:84:a7:39:27:d0:55:4d:2e:b8:0a:c9:c2:36:4b:
                    b3:33:e3:c6:c7:f7:32:88:16:4d:ac:36:6e:2d:de:
                    b3:f2:3c:0a:0b:4c:ee:60:f3:c0:29:9a:37:02:f4:
                    3e:96:16:f7:9b:05:ea:22:79:f8:87:e0:1a:06:a9:
                    3a:2d:6c:b2:8a:89:bb:ae:a2:92:c1:ed:6a:e0:dc:
                    7a:b0:e7:5c:17:ae:28:01:dc:b8:b8:8c:85:dd:ab:
                    9c:db:29:7a:26:ee:de:c7:48:e2:27:01:a4:ee:66:
                    de:ee:a4:de:dd:8b:90:45:a5:79:60:50:bd:d9:a7:
                    5a:d3:0c:83:c2:eb:46:5f:08:db:6d:3b:13:bb:50:
                    db:c3:bb:7e:38:e7:69:0f:3a:77:ed:1f:68:38:a6:
                    7e:2e:51:23:c5:af:f3:ce:7d:1a:1f:95:64:6a:e4:
                    10:2e:6d:c5:27:bf:9f:65:95:7d:c1:04:76:12:53:
                    5d:be:4f:cf:33:0f:47:33:16:31:a2:d9:76:a8:3b:
                    e6:f8:e8:1d:c0:5c:e6:49:ce:a4:84:d0:b9:6b:0f:
                    7a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:54:8E:F0:6D:AD:A4:B7:FC:A9:14:A6:FE:50:18:2A:1D:63:FE:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a1ec41f4-0527-3501-9ad8-094c7a9f5ca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:5e:36:72:e8:96:23:d6:d5:78:fe:5c:6d:ec:70:9a:33:7a:
         b4:db:f1:7e:f7:71:14:65:01:12:8c:df:be:9a:c9:1f:ed:c2:
         06:79:41:d1:77:a5:5e:29:99:eb:1d:26:d0:39:d5:d9:27:b9:
         d8:c6:f5:1a:5b:df:c7:67:a2:f5:c2:00:e1:b9:45:97:64:40:
         95:a1:a2:50:95:19:e3:73:d7:7c:6f:ba:8c:2e:3c:7c:cc:eb:
         ae:bf:bd:8d:82:23:2a:9c:72:d3:9c:5a:ff:14:40:f9:84:24:
         1f:8f:bd:ee:73:2c:5b:c3:51:8f:41:36:00:bd:99:04:97:09:
         ef:6e:9a:07:a6:f3:22:b7:02:30:90:94:a9:5a:49:7f:03:7f:
         a0:37:88:53:27:92:61:c9:74:3c:93:ab:c1:59:23:c7:0b:f5:
         e8:de:a8:37:b9:65:b8:af:6d:6f:11:9a:c2:ec:90:2d:e8:92:
         c6:ec:da:eb:e7:09:46:3e:2f:00:70:31:43:af:3c:11:fa:72:
         aa:65:dd:bf:95:fd:54:9c:a0:6a:3f:11:13:e2:4c:ff:9d:ba:
         ca:ee:c6:b3:2d:6a:8b:8e:85:02:c8:d9:00:29:f2:bf:13:52:
         5f:7d:05:fa:b2:eb:36:19:23:f7:eb:65:bb:86:d6:15:8f:b3:
         4e:5e:6a:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDxvQ9a7MsPhu+08lwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIxMTIzMTA1MDAwMFoXDTIyMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
ZTFjNTQ1OWEtMjRiMi00ODVkLTkyMjEtNTllOGYxNWExYmM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGX9FhSnNZnrmYGVzvnF5Dn45ewDs9hYG7He
BAhyHzEMHOIb5M0PWei5wpABhKc5J9BVTS64CsnCNkuzM+PGx/cyiBZNrDZuLd6z
8jwKC0zuYPPAKZo3AvQ+lhb3mwXqInn4h+AaBqk6LWyyiom7rqKSwe1q4Nx6sOdc
F64oAdy4uIyF3auc2yl6Ju7ex0jiJwGk7mbe7qTe3YuQRaV5YFC92ada0wyDwutG
XwjbbTsTu1Dbw7t+OOdpDzp37R9oOKZ+LlEjxa/zzn0aH5VkauQQLm3FJ7+fZZV9
wQR2ElNdvk/PMw9HMxYxotl2qDvm+OgdwFzmSc6khNC5aw96HwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFChUjvBtraS3/KkUpv5QGCodY/5qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYTFlYzQxZjQtMDUyNy0z
NTAxLTlhZDgtMDk0YzdhOWY1Y2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEP/ZwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK1eNnLoliPW1Xj+XG3scJozerTb8X73cRRlARKM376ayR/twgZ5QdF3
pV4pmesdJtA51dknudjG9Rpb38dnovXCAOG5RZdkQJWholCVGeNz13xvuowuPHzM
666/vY2CIyqcctOcWv8UQPmEJB+Pve5zLFvDUY9BNgC9mQSXCe9umgem8yK3AjCQ
lKlaSX8Df6A3iFMnkmHJdDyTq8FZI8cL9ejeqDe5ZbivbW8RmsLskC3oksbs2uvn
CUY+LwBwMUOvPBH6cqpl3b+V/VScoGo/ERPiTP+dusruxrMtaouOhQLI2QAp8r8T
Ul99Bfqy6zYZI/frZbuG1hWPs05eanE=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:54 2025 by rpki-client