Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b39189e6-86c1-390d-8288-1c62007047c1.roa
File:                     b39189e6-86c1-390d-8288-1c62007047c1.roa (raw, json)
Hash identifier:          0ZhSCeKSlJjyhpmwVtHzzU8VGJ0PLCsvVqeHc3U8Ww8=
Subject key identifier:   F4:81:31:4D:20:9A:77:1A:74:1C:A9:DB:F9:22:55:28:92:E4:7C:27
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858406AEA89C0317E2BBAC49BB580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b39189e6-86c1-390d-8288-1c62007047c1.roa
Signing time:             Fri 30 Dec 2022 19:54:08 +0000
ROA not before:           Fri 30 Dec 2022 19:54:08 +0000
ROA not after:            Sat 04 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        70.237.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6a:ea:89:c0:31:7e:2b:ba:c4:9b:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 30 19:54:08 2022 GMT
            Not After : Feb  4 05:00:00 2023 GMT
        Subject: CN=be228e74-4b60-472d-ad50-f99357bd9c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cc:45:8d:ab:0b:b2:54:c6:36:be:2c:68:55:
                    84:13:d0:a7:01:a5:f2:fe:c6:50:0c:ce:9b:f6:a7:
                    d6:9f:46:36:15:02:98:b6:55:5a:11:db:fb:90:28:
                    f3:8c:88:95:9a:f1:ca:9c:51:99:58:37:ac:bf:fb:
                    8a:19:4e:de:1f:bc:d9:52:9c:81:90:0d:70:0d:83:
                    20:fd:bc:4f:bb:37:33:db:9e:5b:8d:ff:59:a2:c6:
                    f0:be:d0:b6:55:e6:1a:50:38:21:5a:25:52:1a:97:
                    70:c7:cb:d9:0b:3a:5a:9b:24:a8:a3:38:61:40:f4:
                    e9:f5:69:a9:a5:e2:ff:a0:ba:63:0f:57:2b:9f:fc:
                    2a:cd:9d:a0:c5:90:36:b9:b9:a3:a5:d2:fd:b1:88:
                    7d:78:11:fb:bb:a3:57:ec:4c:10:fd:da:db:b7:e5:
                    20:26:de:e3:47:d9:59:0c:13:f6:fb:7a:d8:db:cc:
                    3d:4a:27:ee:de:c8:f1:0a:a4:f2:9d:0d:2d:f3:96:
                    ac:dd:d9:a7:7f:7d:c5:40:e7:e6:27:8c:40:fd:b8:
                    f4:8e:e5:75:25:2a:1d:f8:0e:dd:23:13:6b:c7:69:
                    10:20:2a:4c:58:77:8a:9b:ab:3c:89:a0:7f:6d:db:
                    38:bf:4a:02:49:34:54:3f:63:90:f3:6d:9a:64:d8:
                    89:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:81:31:4D:20:9A:77:1A:74:1C:A9:DB:F9:22:55:28:92:E4:7C:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b39189e6-86c1-390d-8288-1c62007047c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.237.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:85:7b:1c:62:9b:e8:7f:5d:8e:6f:09:05:23:24:b0:a4:e5:
         39:f7:2e:b0:85:ae:f6:59:03:bf:0e:b5:e5:e3:0c:8e:e4:40:
         0f:ca:ec:f0:8f:99:9f:25:4e:b2:64:eb:b6:fd:dd:81:fc:43:
         12:4a:19:75:7f:d4:47:b8:f7:94:b1:4e:35:39:48:d8:df:87:
         fc:89:15:8d:a8:ae:86:53:1e:13:a6:ad:5d:3a:68:20:a4:e4:
         01:cd:d5:44:7c:a5:0d:13:0a:ed:0f:cf:58:90:95:44:cd:5c:
         14:d0:62:1e:79:9d:38:75:65:ec:d0:8d:c4:1c:cd:bb:37:bc:
         30:c8:53:2e:f0:d5:cd:11:e4:5e:e5:da:5c:07:33:af:26:a5:
         94:0c:c4:68:a9:80:33:7f:e8:33:e8:75:4a:a8:ed:c6:6b:ee:
         2a:cd:28:bc:30:4e:47:b6:6e:bf:02:c4:9e:73:fa:18:f7:3f:
         da:29:bc:f2:68:bf:95:2e:0e:ac:da:8e:24:28:b1:7c:96:39:
         4e:43:50:2e:81:12:bb:0e:d1:17:5e:24:53:e8:e8:a9:2d:62:
         90:67:73:46:98:db:8e:b8:88:08:4b:d2:bb:bf:dc:6f:66:da:
         10:96:22:fc:87:4d:86:f2:bb:d4:23:d6:c5:e0:cd:95:ae:31:
         04:a0:3e:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBq6onAMX4rusSbtYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIzMDE5NTQwOFoXDTIzMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
YmUyMjhlNzQtNGI2MC00NzJkLWFkNTAtZjk5MzU3YmQ5YzgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsxFjasLslTGNr4saFWEE9CnAaXy/sZQDM6b
9qfWn0Y2FQKYtlVaEdv7kCjzjIiVmvHKnFGZWDesv/uKGU7eH7zZUpyBkA1wDYMg
/bxPuzcz255bjf9ZosbwvtC2VeYaUDghWiVSGpdwx8vZCzpamySoozhhQPTp9Wmp
peL/oLpjD1crn/wqzZ2gxZA2ubmjpdL9sYh9eBH7u6NX7EwQ/drbt+UgJt7jR9lZ
DBP2+3rY28w9Sifu3sjxCqTynQ0t85as3dmnf33FQOfmJ4xA/bj0juV1JSod+A7d
IxNrx2kQICpMWHeKm6s8iaB/bds4v0oCSTRUP2OQ822aZNiJfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPSBMU0gmncadByp2/kiVSiS5HwnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYjM5MTg5ZTYtODZjMS0z
OTBkLTgyODgtMWM2MjAwNzA0N2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRu3AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE6Fexxim+h/XY5vCQUjJLCk5Tn3LrCFrvZZA78OteXjDI7kQA/K7PCP
mZ8lTrJk67b93YH8QxJKGXV/1Ee495SxTjU5SNjfh/yJFY2oroZTHhOmrV06aCCk
5AHN1UR8pQ0TCu0Pz1iQlUTNXBTQYh55nTh1ZezQjcQczbs3vDDIUy7w1c0R5F7l
2lwHM68mpZQMxGipgDN/6DPodUqo7cZr7irNKLwwTke2br8CxJ5z+hj3P9opvPJo
v5UuDqzajiQosXyWOU5DUC6BErsO0RdeJFPo6KktYpBnc0aY2464iAhL0ru/3G9m
2hCWIvyHTYbyu9Qj1sXgzZWuMQSgPuo=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:41 2025 by rpki-client