Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b3154c84-195c-3bf1-b62a-31ce12807bce.roa
File:                     b3154c84-195c-3bf1-b62a-31ce12807bce.roa (raw, json)
Hash identifier:          +kA1soj15/63HcIomwe7tbfTom/ChQqFZV8aoZ51RQ0=
Subject key identifier:   C7:1B:96:56:FA:9B:54:16:5F:74:ED:FF:80:CD:59:E9:DE:AB:DE:19
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E93ED68F5A9D023B184B364C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b3154c84-195c-3bf1-b62a-31ce12807bce.roa
Signing time:             Thu 14 Jul 2022 21:12:08 +0000
ROA not before:           Thu 14 Jul 2022 21:12:08 +0000
ROA not after:            Fri 19 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        216.182.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:93:ed:68:f5:a9:d0:23:b1:84:b3:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 14 21:12:08 2022 GMT
            Not After : Aug 19 04:00:00 2022 GMT
        Subject: CN=8336aea9-beba-43d2-8aae-dc644e5907d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c1:cb:6f:76:b6:12:80:75:81:12:1b:af:4d:
                    a2:56:ce:eb:44:e9:5a:f6:10:26:05:8f:22:fb:8a:
                    eb:f4:55:9e:60:5a:3d:db:93:22:63:ec:6d:fd:99:
                    a6:da:76:de:ab:68:70:69:a5:e6:93:82:28:1c:f5:
                    39:c8:12:52:2f:b3:80:6b:9d:5d:28:86:2e:b9:3f:
                    8b:91:2d:01:6a:43:12:db:62:1a:6a:32:90:bd:17:
                    67:f1:c2:79:8d:be:8b:8b:61:69:04:25:09:9f:3e:
                    95:21:88:90:41:e2:48:72:c9:16:0b:d7:1e:15:49:
                    18:fb:67:89:cb:28:6f:96:5a:8b:02:21:3f:74:30:
                    a3:88:3e:a2:78:c8:21:18:6c:81:f3:9e:7f:49:57:
                    d2:b1:fe:53:71:a7:a4:65:6a:10:e7:4a:df:75:85:
                    5a:77:89:3a:d0:87:7a:82:79:b1:91:80:e7:ec:57:
                    cb:5b:ea:ea:d7:38:cf:93:cc:dd:c1:c9:33:fb:93:
                    8e:46:c2:be:81:54:fa:c4:6a:01:48:0d:bd:12:f4:
                    7f:50:f4:07:46:84:bc:e7:6e:c7:46:f4:90:93:7a:
                    48:ca:36:d7:d3:2c:29:c3:1b:87:fe:87:05:4f:4b:
                    ae:77:d3:a1:a9:59:9a:6a:d7:e0:aa:4d:a3:ad:d5:
                    19:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:1B:96:56:FA:9B:54:16:5F:74:ED:FF:80:CD:59:E9:DE:AB:DE:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b3154c84-195c-3bf1-b62a-31ce12807bce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.182.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:06:61:39:2d:3e:14:57:e7:8c:16:e6:96:ad:6c:da:4a:c0:
         5a:c1:31:cb:a5:e9:60:ad:23:6c:52:45:fd:3c:cc:1e:bd:71:
         17:f5:0a:22:0d:e6:d6:b2:cc:9e:f3:16:41:42:ea:be:98:73:
         d9:81:63:de:16:c7:1b:4e:81:0b:3f:e8:31:54:78:e4:2f:10:
         5c:ed:99:44:4a:f0:13:0c:2c:64:a2:8d:05:bd:bb:07:f5:95:
         83:c7:85:74:12:a7:6b:a4:16:e6:7c:03:53:d7:51:02:f5:35:
         bd:e1:0c:d7:ad:64:a8:06:d1:54:6a:ab:2a:c2:47:5c:a6:af:
         2e:37:a0:ef:00:ad:0e:2f:18:bc:1a:f6:3e:1d:a1:0b:27:3d:
         9b:e4:33:90:3a:31:46:21:4c:38:03:e7:3b:2c:17:f9:50:5d:
         83:9c:10:95:ad:a9:31:a1:c8:46:65:0d:5d:5c:b6:2c:2d:4a:
         92:ba:97:d4:41:b4:7d:4a:6e:7b:a0:ea:a2:63:34:04:94:1c:
         17:6f:84:6c:04:f6:fb:44:70:59:b8:36:f8:e6:d9:30:0c:84:
         9b:88:be:1e:84:3b:a2:1e:3a:ec:4c:49:4d:e3:4d:8f:b6:7b:
         09:09:1e:4a:da:72:2b:c7:ed:50:15:67:93:31:f8:6c:05:04:
         be:a2:f0:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD6T7Wj1qdAjsYSzZMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcxNDIxMTIwOFoXDTIyMDgxOTA0MDAwMFowLzEtMCsGA1UEAxMk
ODMzNmFlYTktYmViYS00M2QyLThhYWUtZGM2NDRlNTkwN2Q2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMHLb3a2EoB1gRIbr02iVs7rROla9hAmBY8i
+4rr9FWeYFo925MiY+xt/Zmm2nbeq2hwaaXmk4IoHPU5yBJSL7OAa51dKIYuuT+L
kS0BakMS22IaajKQvRdn8cJ5jb6Li2FpBCUJnz6VIYiQQeJIcskWC9ceFUkY+2eJ
yyhvllqLAiE/dDCjiD6ieMghGGyB855/SVfSsf5TcaekZWoQ50rfdYVad4k60Id6
gnmxkYDn7FfLW+rq1zjPk8zdwckz+5OORsK+gVT6xGoBSA29EvR/UPQHRoS8527H
RvSQk3pIyjbX0ywpwxuH/ocFT0uud9OhqVmaatfgqk2jrdUZ/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMcbllb6m1QWX3Tt/4DNWeneq94ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYjMxNTRjODQtMTk1Yy0z
YmYxLWI2MmEtMzFjZTEyODA3YmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2LbgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACkGYTktPhRX54wW5patbNpKwFrBMcul6WCtI2xSRf08zB69cRf1CiIN
5tayzJ7zFkFC6r6Yc9mBY94WxxtOgQs/6DFUeOQvEFztmURK8BMMLGSijQW9uwf1
lYPHhXQSp2ukFuZ8A1PXUQL1Nb3hDNetZKgG0VRqqyrCR1ymry43oO8ArQ4vGLwa
9j4doQsnPZvkM5A6MUYhTDgD5zssF/lQXYOcEJWtqTGhyEZlDV1ctiwtSpK6l9RB
tH1Kbnug6qJjNASUHBdvhGwE9vtEcFm4Nvjm2TAMhJuIvh6EO6IeOuxMSU3jTY+2
ewkJHkracivH7VAVZ5Mx+GwFBL6i8O4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:10 2025 by rpki-client