Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b554d8b6-cdd0-380e-b37b-49f2c9434658.roa
File:                     b554d8b6-cdd0-380e-b37b-49f2c9434658.roa (raw, json)
Hash identifier:          bvFx+oCQkQysyEP/SJD7RA5K3xqzes8NgUVmH2RlF2k=
Subject key identifier:   A5:B2:CC:AF:C2:0C:D0:36:AB:EE:04:01:11:06:36:FB:F3:FF:09:FE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E962A9E7ED452FBF6FF6EF680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b554d8b6-cdd0-380e-b37b-49f2c9434658.roa
Signing time:             Fri 15 Jul 2022 12:00:00 +0000
ROA not before:           Fri 15 Jul 2022 12:00:00 +0000
ROA not after:            Sat 20 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        65.8.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:96:2a:9e:7e:d4:52:fb:f6:ff:6e:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 15 12:00:00 2022 GMT
            Not After : Aug 20 04:00:00 2022 GMT
        Subject: CN=8464a674-d7ef-493f-bac6-1355124462cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4b:ca:5f:95:7a:bb:13:58:9b:b1:24:1a:39:
                    10:04:fe:e2:9d:6a:53:2e:0e:a5:6d:71:34:ce:bc:
                    e8:ef:8a:0b:ee:cb:e3:34:1a:f3:0f:22:4b:74:b8:
                    28:e9:6d:c2:ff:f3:cc:8f:50:bd:c3:56:0e:27:c4:
                    63:f1:ae:de:45:85:44:a8:8a:83:e2:12:57:87:0a:
                    10:a4:e9:a6:c4:56:14:26:b5:27:47:0f:ed:fa:82:
                    8c:9e:16:4b:db:74:bf:1a:b5:8a:c5:44:ae:8b:78:
                    a9:e2:57:eb:09:e0:62:49:86:b8:54:41:ea:4f:61:
                    2e:49:a6:71:82:82:a1:af:ca:cb:17:7b:78:5c:5c:
                    ea:de:0a:3a:1f:4f:7b:30:11:09:0c:d0:e8:bc:14:
                    5c:08:80:5c:9a:a5:28:4a:54:c7:37:87:fd:b9:5a:
                    f2:b4:ec:43:a8:61:d4:ce:2d:58:6b:38:1a:a2:f9:
                    6a:b8:24:99:0d:25:e8:b8:94:8b:68:17:14:01:65:
                    60:c8:64:9f:c1:3b:d9:3f:9c:53:b1:50:9c:8e:ac:
                    7f:01:de:17:94:83:53:07:fa:4b:21:8a:50:0f:8e:
                    f8:d8:78:16:24:bd:77:52:3d:7e:03:65:fe:5c:40:
                    8c:19:12:d2:ed:f5:d0:75:ab:ab:1b:65:38:5f:45:
                    56:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B2:CC:AF:C2:0C:D0:36:AB:EE:04:01:11:06:36:FB:F3:FF:09:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b554d8b6-cdd0-380e-b37b-49f2c9434658.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:b6:cb:f0:1f:a7:2d:5b:83:18:77:a3:14:e6:2c:22:09:46:
         f1:bd:78:0f:98:2f:12:86:67:6c:04:10:93:9e:78:60:70:7c:
         85:c8:cf:c8:96:10:3f:7e:31:3e:45:f1:ba:97:6b:b5:17:88:
         50:91:06:1b:eb:d9:15:79:07:21:30:fa:f1:b8:41:c2:07:39:
         b5:82:70:d8:a8:26:42:16:89:91:de:72:7b:42:27:bb:0f:43:
         59:96:31:ff:97:22:6a:5e:45:f8:0f:79:f0:d4:ca:c1:82:b7:
         03:43:09:1c:fc:29:42:e4:ec:45:a2:24:31:62:28:bf:ee:b2:
         bc:23:e5:06:fa:a8:9b:74:20:34:a3:8d:4d:bb:d1:2f:0a:74:
         a2:73:c5:af:21:38:57:a2:9c:85:4e:83:e4:8e:7f:e0:b3:95:
         b2:92:f4:b3:b7:ea:f7:52:77:d7:5e:e8:9a:8d:98:1c:d1:74:
         9e:8d:39:de:cc:7c:78:d5:87:42:dd:98:8c:a7:38:8a:a7:43:
         49:5c:d7:aa:11:29:ee:02:de:26:4b:54:9b:33:1c:f3:d5:d4:
         2e:38:57:b8:14:c1:5d:c5:95:13:f9:11:cb:15:b3:e8:26:0b:
         a9:e6:57:ac:b1:6d:f1:74:6e:8d:48:18:da:45:e3:f9:b2:a0:
         bf:6d:08:d3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6WKp5+1FL79v9u9oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcxNTEyMDAwMFoXDTIyMDgyMDA0MDAwMFowLzEtMCsGA1UEAxMk
ODQ2NGE2NzQtZDdlZi00OTNmLWJhYzYtMTM1NTEyNDQ2MmNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kvKX5V6uxNYm7EkGjkQBP7inWpTLg6lbXE0
zrzo74oL7svjNBrzDyJLdLgo6W3C//PMj1C9w1YOJ8Rj8a7eRYVEqIqD4hJXhwoQ
pOmmxFYUJrUnRw/t+oKMnhZL23S/GrWKxUSui3ip4lfrCeBiSYa4VEHqT2EuSaZx
goKhr8rLF3t4XFzq3go6H097MBEJDNDovBRcCIBcmqUoSlTHN4f9uVrytOxDqGHU
zi1YazgaovlquCSZDSXouJSLaBcUAWVgyGSfwTvZP5xTsVCcjqx/Ad4XlINTB/pL
IYpQD4742HgWJL13Uj1+A2X+XECMGRLS7fXQdaurG2U4X0VWgQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKWyzK/CDNA2q+4EAREGNvvz/wn+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYjU1NGQ4YjYtY2RkMC0z
ODBlLWIzN2ItNDlmMmM5NDM0NjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCQQgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEApbbL8B+nLVuDGHejFOYsIglG8b14D5gvEoZnbAQQk554YHB8hcjPyJYQ
P34xPkXxupdrtReIUJEGG+vZFXkHITD68bhBwgc5tYJw2KgmQhaJkd5ye0Inuw9D
WZYx/5cial5F+A958NTKwYK3A0MJHPwpQuTsRaIkMWIov+6yvCPlBvqom3QgNKON
TbvRLwp0onPFryE4V6KchU6D5I5/4LOVspL0s7fq91J3117omo2YHNF0no053sx8
eNWHQt2YjKc4iqdDSVzXqhEp7gLeJktUmzMc89XULjhXuBTBXcWVE/kRyxWz6CYL
qeZXrLFt8XRujUgY2kXj+bKgv20I0w==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:42 2025 by rpki-client