Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa2c3a8b-c2ff-3c24-b00a-9b3ee9affa1f.roa
File:                     aa2c3a8b-c2ff-3c24-b00a-9b3ee9affa1f.roa (raw, json)
Hash identifier:          32Ms+jJWX4BE0CSkCL6AtHQSPw6JFKXItEYq/pICxRo=
Subject key identifier:   D1:5D:A2:BB:27:7A:0C:9D:0E:E8:EB:77:40:5F:E4:8B:73:D7:4C:4F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D33806B2D4C6B6B1C49DAC950
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa2c3a8b-c2ff-3c24-b00a-9b3ee9affa1f.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        164.195.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:80:6b:2d:4c:6b:6b:1c:49:da:c9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=d428a75e-d99d-442d-81b0-366079eb7417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ac:c2:f9:f7:59:8c:64:c1:4d:10:58:05:2b:
                    47:97:12:68:bd:f9:d3:f2:ca:50:34:02:7d:6d:2b:
                    51:d4:c5:24:0a:c1:9b:11:ea:86:a8:e3:97:44:d3:
                    e7:b9:fa:eb:47:6d:64:11:4c:50:0e:ff:f4:b2:b1:
                    da:e8:ea:9f:48:d1:c7:ad:e5:5c:d8:69:7c:25:7d:
                    03:eb:48:2f:65:8a:9e:a5:13:60:8a:7f:5f:2c:20:
                    c9:57:39:0f:70:01:5d:5b:f9:b2:98:56:f4:63:b0:
                    c3:e4:80:29:60:0f:41:88:a0:c2:81:45:4d:7b:a2:
                    9b:b6:ca:b8:55:08:ae:d7:71:e4:71:cd:3e:57:2b:
                    8e:f4:58:26:0e:7a:c9:6e:ad:dc:08:d8:37:1a:01:
                    40:e5:f4:da:65:f4:c6:2a:77:a9:4e:ab:f2:df:14:
                    51:d5:a4:0c:03:49:ec:07:40:b7:82:35:77:2e:1d:
                    6e:d2:01:aa:88:00:a7:23:c3:d2:98:f1:19:d5:50:
                    f5:5c:09:69:19:e2:7b:1d:ef:0f:af:f4:7f:3e:24:
                    8d:78:3d:54:1f:97:50:24:80:df:40:e7:90:56:89:
                    53:cd:06:16:dc:29:dd:0a:3a:34:7f:8e:b9:0e:34:
                    af:eb:79:b6:95:fa:d2:dd:63:9f:6d:75:5d:39:e9:
                    a3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5D:A2:BB:27:7A:0C:9D:0E:E8:EB:77:40:5F:E4:8B:73:D7:4C:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa2c3a8b-c2ff-3c24-b00a-9b3ee9affa1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.195.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:57:47:71:30:fd:20:f5:61:db:1a:93:8a:fc:01:d7:92:68:
         a1:ab:85:5d:97:94:59:ce:42:d5:13:d4:5d:f4:ca:8c:20:f0:
         dc:f2:9f:ba:7c:65:c3:c7:a9:b2:c0:a2:20:4a:95:36:d9:59:
         56:d2:5f:cc:1f:f6:cf:d1:94:5a:2f:cd:6a:a0:38:c3:0e:02:
         f3:a9:46:12:82:a5:5f:28:aa:fd:54:13:f0:63:07:54:e6:3c:
         88:80:7f:64:54:e2:0d:c1:4d:95:02:2f:64:b8:e9:02:a9:93:
         aa:47:b7:8b:b0:4e:6b:3a:3d:39:c7:ba:3d:21:ec:2f:6f:a2:
         e8:5c:2a:69:c8:e0:be:53:ce:d8:0d:ba:1e:92:2b:95:99:20:
         4d:70:76:e9:70:bd:89:0b:bf:7e:35:9a:24:9e:e4:5e:e4:00:
         95:44:29:4f:05:bc:8c:ba:67:65:69:22:5c:75:35:19:b4:0a:
         8f:6a:75:3c:58:f8:2c:c9:85:99:fe:04:d5:42:71:4c:5a:a7:
         e4:08:9f:04:d9:e0:b0:5a:dd:37:41:0b:fc:3a:fa:9d:69:18:
         f2:e9:a9:3c:23:d7:52:fa:2a:55:11:37:62:c9:77:1d:7b:82:
         76:04:00:38:7a:72:52:ee:c5:98:e3:13:da:8b:f1:e1:94:94:
         e1:fa:7c:6e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0zgGstTGtrHEnayVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
ZDQyOGE3NWUtZDk5ZC00NDJkLTgxYjAtMzY2MDc5ZWI3NDE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKzC+fdZjGTBTRBYBStHlxJovfnT8spQNAJ9
bStR1MUkCsGbEeqGqOOXRNPnufrrR21kEUxQDv/0srHa6OqfSNHHreVc2Gl8JX0D
60gvZYqepRNgin9fLCDJVzkPcAFdW/mymFb0Y7DD5IApYA9BiKDCgUVNe6Kbtsq4
VQiu13Hkcc0+VyuO9FgmDnrJbq3cCNg3GgFA5fTaZfTGKnepTqvy3xRR1aQMA0ns
B0C3gjV3Lh1u0gGqiACnI8PSmPEZ1VD1XAlpGeJ7He8Pr/R/PiSNeD1UH5dQJIDf
QOeQVolTzQYW3CndCjo0f465DjSv63m2lfrS3WOfbXVdOemj8QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNFdorsnegydDujrd0Bf5Itz10xPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYWEyYzNhOGItYzJmZi0z
YzI0LWIwMGEtOWIzZWU5YWZmYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApMMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYFdHcTD9IPVh2xqTivwB15JooauFXZeUWc5C1RPUXfTKjCDw3PKfunxl
w8epssCiIEqVNtlZVtJfzB/2z9GUWi/NaqA4ww4C86lGEoKlXyiq/VQT8GMHVOY8
iIB/ZFTiDcFNlQIvZLjpAqmTqke3i7BOazo9Oce6PSHsL2+i6FwqacjgvlPO2A26
HpIrlZkgTXB26XC9iQu/fjWaJJ7kXuQAlUQpTwW8jLpnZWkiXHU1GbQKj2p1PFj4
LMmFmf4E1UJxTFqn5AifBNngsFrdN0EL/Dr6nWkY8umpPCPXUvoqVRE3Ysl3HXuC
dgQAOHpyUu7FmOMT2ovx4ZSU4fp8bg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:33 2025 by rpki-client