Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ac093d33-eced-3af5-abd7-8a402aa501fc.roa
File:                     ac093d33-eced-3af5-abd7-8a402aa501fc.roa (raw, json)
Hash identifier:          N73YuPQ/DHkGA5sZFOXQDlrcxjiddm9iDuqD49CIW3o=
Subject key identifier:   1F:6D:F2:38:DA:67:F3:D2:F6:4D:EE:D2:0E:10:AE:7D:16:E4:5A:8E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D337168B624D12C8CACEFE4E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ac093d33-eced-3af5-abd7-8a402aa501fc.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        192.189.197.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:71:68:b6:24:d1:2c:8c:ac:ef:e4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=b2a470e4-9027-44a9-8159-52077b6dd3d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:72:1a:a1:7e:32:35:6e:c4:f1:0d:19:b3:69:
                    b6:71:3e:80:05:bf:8a:51:88:79:4b:80:7c:be:13:
                    40:b1:87:dd:63:1a:ad:5b:06:cb:fb:41:df:8c:4d:
                    b3:58:a8:1b:1c:23:f7:cb:11:ba:d3:17:1b:d6:3e:
                    f4:11:1c:11:9f:44:a9:83:75:b6:9d:f0:3c:0f:0b:
                    2a:56:2c:eb:e9:7b:29:0e:59:79:c8:2e:bd:c8:be:
                    1f:e9:76:0e:50:0e:cb:2c:f0:00:00:4f:1f:7e:6d:
                    0c:75:9c:ab:84:fb:1a:3d:99:71:06:fc:ce:d5:b4:
                    dd:8a:c1:46:d8:2f:a4:e5:87:6a:6c:66:25:45:1f:
                    67:86:99:70:d6:ee:4a:ca:56:8a:5b:35:53:23:9c:
                    8d:96:a6:f8:4d:44:ed:d5:69:d3:93:d7:da:14:a6:
                    f9:79:af:78:1c:fe:e3:d9:e3:29:b4:23:23:5f:d8:
                    91:10:f2:f7:7e:dd:13:13:f8:2b:02:ef:6b:a8:58:
                    ec:b5:5a:ce:4d:06:a7:5c:a0:90:ff:a9:b5:da:c0:
                    4e:cb:ce:02:2b:7a:56:e6:00:c0:f4:d8:8e:4f:5a:
                    3a:80:a6:a5:cc:e5:cc:7d:06:ad:a9:36:61:a5:44:
                    5f:3a:a6:ba:b4:ac:6b:ba:5a:de:7d:0f:ca:67:bb:
                    86:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6D:F2:38:DA:67:F3:D2:F6:4D:EE:D2:0E:10:AE:7D:16:E4:5A:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ac093d33-eced-3af5-abd7-8a402aa501fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:9c:b5:87:39:e2:af:b8:e8:d3:9b:ca:e0:ce:91:37:c0:96:
         dc:b5:e4:6c:72:6d:64:1b:40:40:03:fd:76:c4:5b:db:f7:6f:
         82:0b:38:77:46:8f:c9:60:47:68:2a:fe:fc:9f:fb:d8:a2:0e:
         4c:6b:dc:97:07:e9:b8:31:c8:a5:98:fc:b7:95:2c:0c:f3:64:
         35:60:e9:5d:a1:2b:e9:f6:bc:74:d1:fb:26:98:b0:5c:02:64:
         ac:e3:e7:7f:5f:03:70:16:29:05:6f:07:c6:e5:11:44:6f:fd:
         9e:5a:32:30:79:86:2e:0d:29:2a:bd:21:ef:77:e5:25:69:5d:
         c0:da:82:a2:1c:86:96:ab:41:0e:c2:fd:c8:dc:00:15:27:dd:
         d7:fb:b8:e0:81:5d:e5:9c:86:a2:a9:1c:71:8a:b7:db:d4:89:
         27:43:61:de:69:ee:18:3c:d6:48:40:88:17:f2:31:c8:d8:f6:
         00:21:a7:6d:fd:12:dc:6a:f2:1f:25:3d:5a:39:4a:da:6a:cb:
         cf:a8:4a:9f:91:a1:f7:8f:99:e8:6a:f5:c4:1b:2f:4b:64:83:
         e6:24:ea:88:36:a2:3c:6c:11:01:4e:48:3c:38:e4:74:8c:b2:
         9b:0a:28:19:d3:b7:05:06:48:8f:4d:c0:90:02:c3:f3:1f:c8:
         0a:c7:a0:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD0zcWi2JNEsjKzv5OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
YjJhNDcwZTQtOTAyNy00NGE5LTgxNTktNTIwNzdiNmRkM2Q1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23IaoX4yNW7E8Q0Zs2m2cT6ABb+KUYh5S4B8
vhNAsYfdYxqtWwbL+0HfjE2zWKgbHCP3yxG60xcb1j70ERwRn0Spg3W2nfA8Dwsq
Vizr6XspDll5yC69yL4f6XYOUA7LLPAAAE8ffm0MdZyrhPsaPZlxBvzO1bTdisFG
2C+k5YdqbGYlRR9nhplw1u5KylaKWzVTI5yNlqb4TUTt1WnTk9faFKb5ea94HP7j
2eMptCMjX9iREPL3ft0TE/grAu9rqFjstVrOTQanXKCQ/6m12sBOy84CK3pW5gDA
9NiOT1o6gKalzOXMfQatqTZhpURfOqa6tKxrulrefQ/KZ7uGFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB9t8jjaZ/PS9k3u0g4Qrn0W5FqOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYWMwOTNkMzMtZWNlZC0z
YWY1LWFiZDctOGE0MDJhYTUwMWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL3FMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFyctYc54q+46NObyuDOkTfAlty15GxybWQbQEAD/XbEW9v3b4ILOHdG
j8lgR2gq/vyf+9iiDkxr3JcH6bgxyKWY/LeVLAzzZDVg6V2hK+n2vHTR+yaYsFwC
ZKzj539fA3AWKQVvB8blEURv/Z5aMjB5hi4NKSq9Ie935SVpXcDagqIchparQQ7C
/cjcABUn3df7uOCBXeWchqKpHHGKt9vUiSdDYd5p7hg81khAiBfyMcjY9gAhp239
Etxq8h8lPVo5Stpqy8+oSp+RofePmehq9cQbL0tkg+Yk6og2ojxsEQFOSDw45HSM
spsKKBnTtwUGSI9NwJACw/MfyArHoNE=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:15:40 2025 by rpki-client