Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b4f97e50-e819-3f3a-825e-ce17fdb16e0a.roa
File:                     b4f97e50-e819-3f3a-825e-ce17fdb16e0a.roa (raw, json)
Hash identifier:          U6pt2ZxSMCGz30lPETMemS7VPz06Yej5H8A1kV4zV84=
Subject key identifier:   F9:1F:B5:A0:4D:5B:CD:E0:AA:F0:D1:95:E4:30:70:D0:AF:BB:C3:A8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CA11C7E05D2068F5241FCD180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b4f97e50-e819-3f3a-825e-ce17fdb16e0a.roa
Signing time:             Tue 18 Jan 2022 05:00:00 +0000
ROA not before:           Tue 18 Jan 2022 05:00:00 +0000
ROA not after:            Tue 22 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        16.136.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:a1:1c:7e:05:d2:06:8f:52:41:fc:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 18 05:00:00 2022 GMT
            Not After : Feb 22 05:00:00 2022 GMT
        Subject: CN=b77e892f-89dd-4c17-a8df-13d2384b23f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ad:e8:80:24:9b:17:22:74:5c:b6:8f:f0:08:
                    06:bf:0a:8b:d2:a2:84:c5:81:fe:b0:7d:13:88:ce:
                    77:ef:46:3c:89:59:a0:88:95:f7:4a:1f:6d:07:f3:
                    54:39:cd:31:40:9a:ab:42:df:60:10:dd:ab:eb:ee:
                    fc:55:ee:04:ce:5c:a0:f1:11:75:96:10:1d:ce:2a:
                    f9:1f:53:f9:1a:98:85:45:84:ab:84:a5:9f:7e:a2:
                    75:fb:79:72:37:90:0b:81:c6:e8:df:2c:d6:9b:56:
                    0d:89:cd:d0:43:42:1e:f9:83:83:ae:0a:ef:00:b4:
                    83:66:bc:74:3f:9b:c4:b4:96:22:a8:40:1b:63:c1:
                    7f:3b:b6:ca:26:38:f7:35:80:2d:a3:4c:c6:b9:87:
                    09:14:f3:2a:a9:31:ea:36:e4:d6:c6:f5:40:13:ae:
                    44:b8:6b:fe:5a:13:38:12:ba:6c:cb:5a:58:8a:46:
                    49:c6:a9:c3:c6:e7:12:6f:65:e8:4e:85:77:74:01:
                    2c:a8:05:af:0b:ca:21:15:03:9f:cb:60:b2:d3:78:
                    aa:4b:91:0e:b0:0b:7c:34:4f:69:58:c8:a5:2b:2d:
                    21:ce:fb:3a:6c:6c:ff:31:e7:46:36:8d:e3:6c:cd:
                    27:f1:da:c3:b2:85:cf:93:a2:36:96:c4:a2:75:e5:
                    07:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1F:B5:A0:4D:5B:CD:E0:AA:F0:D1:95:E4:30:70:D0:AF:BB:C3:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b4f97e50-e819-3f3a-825e-ce17fdb16e0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.136.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:54:32:c3:6f:54:69:0d:01:24:e4:4c:65:20:36:03:b7:09:
         9f:14:b9:9f:bf:16:ba:dd:73:27:c5:e2:70:08:ab:42:72:f1:
         aa:f1:40:ec:d1:76:54:28:b9:3c:a3:38:56:f9:1d:cd:9c:17:
         0e:2b:e6:ef:68:96:a2:46:c2:22:f0:e5:8d:15:c3:99:4c:99:
         7f:c8:13:5d:8a:91:99:ae:e7:45:43:ea:85:53:8c:f6:df:88:
         a4:89:19:c5:dc:f8:b5:44:2a:0e:59:53:d5:8f:1d:a1:ce:b6:
         53:76:3d:26:e4:c0:bd:fc:13:53:54:4d:1c:f0:8c:34:05:1e:
         5f:e7:4d:75:a5:4b:d9:3e:e4:e3:57:d3:a3:d7:42:99:85:dc:
         bc:28:28:60:75:7b:27:c5:95:24:69:df:b2:91:2f:6b:5a:71:
         b5:51:0e:74:ca:80:ad:0c:61:26:cd:4a:a8:9e:22:48:1f:cd:
         fd:77:9e:ac:dc:0a:5c:e5:be:d0:b4:14:6c:39:71:da:e9:6c:
         3a:a4:e8:d6:4e:43:ba:5d:80:47:33:1f:f6:e3:d2:e9:bd:8f:
         3e:6c:c5:0b:c1:b1:31:f9:5c:58:cf:4f:ed:e3:05:ab:7f:fc:
         a1:c3:25:4d:9d:6c:cf:bd:da:dc:02:b3:73:57:84:ec:d8:d4:
         34:3b:b5:19
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDyhHH4F0gaPUkH80YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDExODA1MDAwMFoXDTIyMDIyMjA1MDAwMFowLzEtMCsGA1UEAxMk
Yjc3ZTg5MmYtODlkZC00YzE3LWE4ZGYtMTNkMjM4NGIyM2Y1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma3ogCSbFyJ0XLaP8AgGvwqL0qKExYH+sH0T
iM5370Y8iVmgiJX3Sh9tB/NUOc0xQJqrQt9gEN2r6+78Ve4Ezlyg8RF1lhAdzir5
H1P5GpiFRYSrhKWffqJ1+3lyN5ALgcbo3yzWm1YNic3QQ0Ie+YODrgrvALSDZrx0
P5vEtJYiqEAbY8F/O7bKJjj3NYAto0zGuYcJFPMqqTHqNuTWxvVAE65EuGv+WhM4
Erpsy1pYikZJxqnDxucSb2XoToV3dAEsqAWvC8ohFQOfy2Cy03iqS5EOsAt8NE9p
WMilKy0hzvs6bGz/MedGNo3jbM0n8drDsoXPk6I2lsSideUHHQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPkftaBNW83gqvDRleQwcNCvu8OoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYjRmOTdlNTAtZTgxOS0z
ZjNhLTgyNWUtY2UxN2ZkYjE2ZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEIgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAl1Qyw29UaQ0BJORMZSA2A7cJnxS5n78Wut1zJ8XicAirQnLxqvFA7NF2
VCi5PKM4VvkdzZwXDivm72iWokbCIvDljRXDmUyZf8gTXYqRma7nRUPqhVOM9t+I
pIkZxdz4tUQqDllT1Y8doc62U3Y9JuTAvfwTU1RNHPCMNAUeX+dNdaVL2T7k41fT
o9dCmYXcvCgoYHV7J8WVJGnfspEva1pxtVEOdMqArQxhJs1KqJ4iSB/N/XeerNwK
XOW+0LQUbDlx2ulsOqTo1k5Dul2ARzMf9uPS6b2PPmzFC8GxMflcWM9P7eMFq3/8
ocMlTZ1sz73a3AKzc1eE7NjUNDu1GQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:05 2025 by rpki-client