Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b532e310-5618-3298-9494-4eba6e7df286.roa
File:                     b532e310-5618-3298-9494-4eba6e7df286.roa (raw, json)
Hash identifier:          VaMvlDwdfg75gvMJYMcswqKTHRmMSvyAR0ZebtujcX8=
Subject key identifier:   6A:11:48:E1:E5:AF:CA:10:EE:83:CA:62:44:BB:CF:B4:25:51:84:5A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584040507FDEB066E93912BF2700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b532e310-5618-3298-9494-4eba6e7df286.roa
Signing time:             Thu 15 Dec 2022 12:00:00 +0000
ROA not before:           Thu 15 Dec 2022 12:00:00 +0000
ROA not after:            Fri 20 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        198.99.2.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:40:50:7f:de:b0:66:e9:39:12:bf:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 15 12:00:00 2022 GMT
            Not After : Jan 20 05:00:00 2023 GMT
        Subject: CN=c9b3c3bf-e543-4de8-b4b7-038fdcedded3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c4:26:a2:a0:b7:55:aa:c3:f0:ee:b0:99:d1:
                    a4:9c:f7:4e:6d:72:61:18:5f:03:55:0c:cb:e7:f9:
                    17:bc:55:cc:56:00:c4:8e:8c:91:ce:21:5d:88:72:
                    15:37:1b:4c:48:ea:06:fd:4c:5d:43:0a:94:31:70:
                    a3:ac:22:0b:7c:44:88:52:4e:82:4c:03:0d:3f:18:
                    51:e5:26:3f:8a:82:b6:47:c7:8d:fc:cd:b7:36:61:
                    7f:90:2e:45:72:2f:06:7c:5b:58:ac:0e:5a:e7:03:
                    e6:1f:81:d2:5b:a7:3d:c0:44:ba:84:3a:54:a9:33:
                    bd:da:6b:e5:c3:79:12:28:08:82:93:af:4a:0e:de:
                    7c:7a:32:f1:24:4e:93:c9:a6:ff:db:36:02:95:7a:
                    47:49:11:4e:b6:d0:bc:51:33:11:dc:3f:05:56:b0:
                    45:01:ce:84:29:80:28:65:ea:3e:27:a4:6b:bb:7f:
                    fe:96:48:ab:b0:cc:0e:18:80:01:b8:c2:59:f2:62:
                    33:72:b1:ca:f2:bc:93:cb:5b:df:53:7b:be:fe:ef:
                    f3:b4:86:ee:2b:69:65:34:f2:32:0e:62:5e:93:e7:
                    80:3f:f1:5d:f3:21:5a:a9:25:e9:0b:ad:fd:06:31:
                    fc:41:b9:21:15:39:0d:69:aa:26:9d:e0:2d:4b:2d:
                    f3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:11:48:E1:E5:AF:CA:10:EE:83:CA:62:44:BB:CF:B4:25:51:84:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b532e310-5618-3298-9494-4eba6e7df286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.99.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:80:71:36:04:f4:45:50:c4:23:99:68:cf:7c:b4:c9:01:23:
         32:5c:89:e7:28:e9:df:55:53:31:bf:a2:e3:ba:c1:34:fd:18:
         71:21:f8:6d:0b:c0:12:45:3e:57:5e:f6:5e:a0:c7:91:48:69:
         c1:81:d9:8b:96:93:72:02:28:9a:6b:0d:b5:3b:f6:3c:5e:d7:
         96:c9:7c:7d:f2:7b:62:f5:de:41:59:a5:ef:db:69:3b:91:89:
         d5:21:2d:3b:4b:56:19:b9:19:30:d3:61:07:0b:f5:e3:9c:48:
         b7:8c:45:19:19:ef:95:3b:a8:d6:23:1e:84:3c:c5:65:c6:dc:
         cb:a8:5c:d6:49:10:71:9c:1a:2b:67:bb:7c:d6:2a:b4:33:2d:
         b4:77:4b:eb:51:8e:43:45:37:af:a3:bb:a4:18:66:a6:2c:98:
         90:94:56:5f:f2:a5:9e:33:45:ec:42:e7:00:fc:ce:06:94:e5:
         30:03:cb:57:63:83:cc:99:7d:4d:8f:c1:0c:a8:07:02:1f:c5:
         4a:9a:c9:57:59:8b:b4:db:fb:70:71:21:28:d6:63:ab:67:94:
         97:b7:d7:ed:31:ab:64:17:14:ce:7d:dd:5f:98:c5:23:7a:2d:
         60:8f:7e:6b:c0:ba:56:13:3a:79:27:8e:93:a0:dd:37:b4:48:
         5b:77:45:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBAUH/esGbpORK/JwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxNTEyMDAwMFoXDTIzMDEyMDA1MDAwMFowLzEtMCsGA1UEAxMk
YzliM2MzYmYtZTU0My00ZGU4LWI0YjctMDM4ZmRjZWRkZWQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8QmoqC3VarD8O6wmdGknPdObXJhGF8DVQzL
5/kXvFXMVgDEjoyRziFdiHIVNxtMSOoG/UxdQwqUMXCjrCILfESIUk6CTAMNPxhR
5SY/ioK2R8eN/M23NmF/kC5Fci8GfFtYrA5a5wPmH4HSW6c9wES6hDpUqTO92mvl
w3kSKAiCk69KDt58ejLxJE6Tyab/2zYClXpHSRFOttC8UTMR3D8FVrBFAc6EKYAo
Zeo+J6Rru3/+lkirsMwOGIABuMJZ8mIzcrHK8ryTy1vfU3u+/u/ztIbuK2llNPIy
DmJek+eAP/Fd8yFaqSXpC639BjH8QbkhFTkNaaomneAtSy3zAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGoRSOHlr8oQ7oPKYkS7z7QlUYRaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYjUzMmUzMTAtNTYxOC0z
Mjk4LTk0OTQtNGViYTZlN2RmMjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmMCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHeAcTYE9EVQxCOZaM98tMkBIzJcieco6d9VUzG/ouO6wTT9GHEh+G0L
wBJFPlde9l6gx5FIacGB2YuWk3ICKJprDbU79jxe15bJfH3ye2L13kFZpe/baTuR
idUhLTtLVhm5GTDTYQcL9eOcSLeMRRkZ75U7qNYjHoQ8xWXG3MuoXNZJEHGcGitn
u3zWKrQzLbR3S+tRjkNFN6+ju6QYZqYsmJCUVl/ypZ4zRexC5wD8zgaU5TADy1dj
g8yZfU2PwQyoBwIfxUqayVdZi7Tb+3BxISjWY6tnlJe31+0xq2QXFM593V+YxSN6
LWCPfmvAulYTOnknjpOg3Te0SFt3RSY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:03 2025 by rpki-client