Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ad60de42-4d23-365a-92d1-d8b0635362ef.roa
File:                     ad60de42-4d23-365a-92d1-d8b0635362ef.roa (raw, json)
Hash identifier:          ZyAimKzHFUxe6UFtD/8Qv+60aI+VMPrMxXq/tgkhb1k=
Subject key identifier:   C5:08:16:44:1F:AF:88:BB:9C:50:2E:F1:9A:E4:10:5E:E0:2D:DA:E8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DA8DE7A51905DE8F322AB7A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ad60de42-4d23-365a-92d1-d8b0635362ef.roa
Signing time:             Thu 21 Apr 2022 12:00:00 +0000
ROA not before:           Thu 21 Apr 2022 12:00:00 +0000
ROA not after:            Fri 27 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        156.4.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a8:de:7a:51:90:5d:e8:f3:22:ab:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 21 12:00:00 2022 GMT
            Not After : May 27 04:00:00 2022 GMT
        Subject: CN=e2c391c8-e7d7-4ba9-a7f3-4fa4591bbd19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:42:0d:7b:ac:b1:7f:a4:4f:71:e6:66:11:b0:
                    48:ec:6b:36:da:03:b7:29:49:95:3d:19:ce:e7:8e:
                    be:58:cf:72:2d:f4:df:74:0f:86:63:54:f5:ce:33:
                    d2:68:db:f2:87:ed:8a:b8:a9:4f:cd:88:5f:0e:ef:
                    cc:c3:6c:1a:d3:a7:8a:c1:58:fe:3c:22:d2:de:e6:
                    52:38:12:da:49:b4:7c:ff:8f:5d:2f:d1:9f:07:c0:
                    5d:26:f8:64:7d:7d:94:dd:ae:14:6d:f7:0b:65:94:
                    9e:8a:61:6e:f6:81:40:f4:bf:f4:c8:aa:2b:c6:78:
                    60:04:c9:50:0f:d0:be:08:63:95:9c:dd:4b:e4:b4:
                    60:7f:a8:15:a7:2d:5f:4e:3b:a7:43:3d:fc:a7:e6:
                    81:47:37:8d:df:bc:0b:70:31:68:69:eb:dd:2f:5b:
                    20:99:8e:fd:0b:ee:8a:48:7f:c1:53:61:17:c0:d6:
                    8e:25:94:e5:0c:f5:6b:41:10:08:fc:3f:38:8f:6f:
                    44:9e:50:87:11:0d:ab:3d:85:c7:63:b5:67:a2:8a:
                    66:91:57:10:6d:8c:f7:69:bc:a0:2b:15:b7:d5:1c:
                    45:60:14:6e:1e:aa:18:7a:72:60:d3:d7:b8:d3:7e:
                    97:66:69:93:cc:b0:63:24:6e:67:a8:9f:3f:d2:79:
                    e4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:08:16:44:1F:AF:88:BB:9C:50:2E:F1:9A:E4:10:5E:E0:2D:DA:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ad60de42-4d23-365a-92d1-d8b0635362ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.4.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:32:a6:42:80:dc:b3:e9:ca:ac:1d:3b:53:c6:07:14:8a:5b:
         6e:ac:c5:d1:32:e5:0b:83:c3:04:5d:4b:a7:79:ee:09:2c:06:
         b3:a2:e0:b3:aa:0b:ad:00:28:c1:c0:23:68:25:d3:0d:7c:ba:
         dd:0f:0e:ea:b9:08:d8:7e:d5:50:a3:e2:a2:25:7c:ac:14:23:
         be:dd:d2:54:31:45:ba:ce:3b:3c:c1:96:f4:ce:cb:8d:5c:3d:
         b4:2f:22:4e:4b:60:97:2a:4c:cd:97:a3:e2:c0:f4:e0:ac:a3:
         63:84:29:86:58:01:70:7d:d1:5c:7a:88:47:75:cc:61:de:a2:
         b2:25:95:e4:0d:3c:4f:14:30:5b:76:6b:33:2f:2c:91:65:15:
         bc:19:74:42:ea:53:e0:a3:fc:ef:f2:cb:2b:e7:09:29:06:f4:
         83:f0:64:04:25:ff:67:0f:38:8f:0f:c8:71:f2:4c:44:09:7a:
         3a:4f:0d:dc:dd:93:6d:c4:4b:47:3c:89:b7:98:03:87:5e:bf:
         47:2b:c4:19:56:93:43:8f:60:4e:75:65:8a:1b:15:47:05:2a:
         c8:24:8a:73:bd:47:b9:25:3b:81:10:7a:8f:a2:a8:0b:28:3c:
         77:fa:72:4a:80:3c:6d:04:44:a0:a4:bc:ef:37:bb:ef:fd:cd:
         d5:97:ab:39
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2o3npRkF3o8yKreoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDQyMTEyMDAwMFoXDTIyMDUyNzA0MDAwMFowLzEtMCsGA1UEAxMk
ZTJjMzkxYzgtZTdkNy00YmE5LWE3ZjMtNGZhNDU5MWJiZDE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkINe6yxf6RPceZmEbBI7Gs22gO3KUmVPRnO
546+WM9yLfTfdA+GY1T1zjPSaNvyh+2KuKlPzYhfDu/Mw2wa06eKwVj+PCLS3uZS
OBLaSbR8/49dL9GfB8BdJvhkfX2U3a4UbfcLZZSeimFu9oFA9L/0yKorxnhgBMlQ
D9C+CGOVnN1L5LRgf6gVpy1fTjunQz38p+aBRzeN37wLcDFoaevdL1sgmY79C+6K
SH/BU2EXwNaOJZTlDPVrQRAI/D84j29EnlCHEQ2rPYXHY7VnoopmkVcQbYz3abyg
KxW31RxFYBRuHqoYenJg09e4036XZmmTzLBjJG5nqJ8/0nnk5wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMUIFkQfr4i7nFAu8ZrkEF7gLdroMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYWQ2MGRlNDItNGQyMy0z
NjVhLTkyZDEtZDhiMDYzNTM2MmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnAQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAKDKmQoDcs+nKrB07U8YHFIpbbqzF0TLlC4PDBF1Lp3nuCSwGs6Lgs6oL
rQAowcAjaCXTDXy63Q8O6rkI2H7VUKPioiV8rBQjvt3SVDFFus47PMGW9M7LjVw9
tC8iTktglypMzZej4sD04KyjY4QphlgBcH3RXHqIR3XMYd6isiWV5A08TxQwW3Zr
My8skWUVvBl0QupT4KP87/LLK+cJKQb0g/BkBCX/Zw84jw/IcfJMRAl6Ok8N3N2T
bcRLRzyJt5gDh16/RyvEGVaTQ49gTnVlihsVRwUqyCSKc71HuSU7gRB6j6KoCyg8
d/pySoA8bQREoKS87ze77/3N1ZerOQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:36 2025 by rpki-client