Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b576e8f6-a3ff-3f3b-875f-4c8c5abea206.roa
File:                     b576e8f6-a3ff-3f3b-875f-4c8c5abea206.roa (raw, json)
Hash identifier:          wYb1U20Y0ykHSE/Pig3qzkPvByD1r0V0db5N7z/fX4U=
Subject key identifier:   EE:E6:2A:62:CC:0B:81:AE:56:CC:19:E5:1C:57:F3:30:54:A2:74:54
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F81233821C57A7065C7162FE0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b576e8f6-a3ff-3f3b-875f-4c8c5abea206.roa
Signing time:             Fri 07 Oct 2022 14:24:07 +0000
ROA not before:           Fri 07 Oct 2022 14:24:07 +0000
ROA not after:            Sat 12 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        172.103.40.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:81:23:38:21:c5:7a:70:65:c7:16:2f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  7 14:24:07 2022 GMT
            Not After : Nov 12 05:00:00 2022 GMT
        Subject: CN=b1a05da5-d303-44b2-bea9-03fd5f757254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:74:6c:2f:2b:c2:8c:ba:76:dd:43:6e:77:67:
                    3d:58:d8:50:36:21:15:79:b0:8b:91:bf:93:a1:bd:
                    98:84:6c:2b:e0:b0:14:db:c6:71:c3:c7:83:77:a7:
                    19:35:14:50:16:7e:fe:ad:0e:20:cc:61:f8:e7:79:
                    b5:dd:28:69:50:c2:8c:c8:a8:bc:5e:1e:34:02:c6:
                    79:b7:cd:79:d7:03:c3:3f:17:3b:14:1d:64:5d:2a:
                    b7:26:09:4d:26:67:ad:7e:f9:d4:2f:5a:74:fc:0f:
                    fa:7e:9a:6f:d2:b1:62:0b:48:1e:e3:a6:95:eb:d3:
                    e1:e1:9e:d0:7d:8d:60:a3:fc:f4:6b:63:4e:47:32:
                    4b:00:b3:9e:73:9d:c8:4c:9e:2c:03:14:c0:0b:dc:
                    08:da:d3:ef:bc:e3:39:e4:58:91:ac:e7:74:23:4b:
                    a9:9a:b6:31:72:e7:ad:d7:0f:c9:c3:ad:85:a0:cc:
                    55:fa:75:de:54:f5:9b:87:1e:a4:d8:e1:c7:4f:c7:
                    89:b2:12:be:77:28:80:96:d5:66:44:8d:c3:db:37:
                    61:0f:d6:6e:2f:b1:da:af:11:fb:bd:a8:1a:cb:09:
                    e1:e3:d4:56:be:95:84:2a:46:0c:88:ce:3e:1b:50:
                    c2:15:20:18:4e:1f:50:6f:d4:70:c3:bf:84:e5:2c:
                    72:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E6:2A:62:CC:0B:81:AE:56:CC:19:E5:1C:57:F3:30:54:A2:74:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b576e8f6-a3ff-3f3b-875f-4c8c5abea206.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.103.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:6c:2c:a1:a9:2a:1d:9d:89:f3:a2:3d:eb:e9:0e:d9:e1:b9:
         eb:83:ad:67:72:ed:c9:92:8b:55:94:e8:90:be:db:78:ae:8f:
         bb:28:54:a3:50:ce:16:ec:f1:63:01:4f:4f:49:8a:47:5e:8e:
         8e:b8:d9:d3:1c:c6:8c:4f:cd:7f:65:8d:5e:fc:76:40:27:71:
         6a:47:46:e6:6c:3d:1d:5a:d4:ad:22:7f:82:91:14:93:79:03:
         c5:86:db:c1:38:96:e0:ca:16:fd:36:fb:17:91:33:d9:ce:cc:
         76:9d:34:29:2f:34:6b:8f:f7:7a:c4:d3:81:f7:fb:8d:94:26:
         4f:95:57:01:79:78:75:29:98:53:b2:df:21:51:54:07:17:74:
         d4:5c:7a:ee:84:c3:cf:58:f5:dd:23:27:c3:d4:36:95:e6:66:
         4f:00:30:2b:2d:8b:8b:f2:ad:46:8d:6a:01:e8:4e:33:14:ec:
         6c:e9:db:81:e5:63:04:e0:dc:ee:6e:ed:ef:6c:7b:f2:a3:51:
         26:ea:6e:32:8e:0e:9a:98:9f:d4:35:94:bd:14:14:fe:41:c6:
         95:2c:3a:c7:33:7f:19:09:e2:e6:37:8d:2f:33:0f:73:ed:0b:
         f7:34:38:2a:92:09:b5:47:b9:ab:19:29:95:89:11:38:61:7e:
         d8:3e:09:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD+BIzghxXpwZccWL+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAwNzE0MjQwN1oXDTIyMTExMjA1MDAwMFowLzEtMCsGA1UEAxMk
YjFhMDVkYTUtZDMwMy00NGIyLWJlYTktMDNmZDVmNzU3MjU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnRsLyvCjLp23UNud2c9WNhQNiEVebCLkb+T
ob2YhGwr4LAU28Zxw8eDd6cZNRRQFn7+rQ4gzGH453m13ShpUMKMyKi8Xh40AsZ5
t8151wPDPxc7FB1kXSq3JglNJmetfvnUL1p0/A/6fppv0rFiC0ge46aV69Ph4Z7Q
fY1go/z0a2NORzJLALOec53ITJ4sAxTAC9wI2tPvvOM55FiRrOd0I0upmrYxcuet
1w/Jw62FoMxV+nXeVPWbhx6k2OHHT8eJshK+dyiAltVmRI3D2zdhD9ZuL7HarxH7
vagaywnh49RWvpWEKkYMiM4+G1DCFSAYTh9Qb9Rww7+E5SxyPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO7mKmLMC4GuVswZ5RxX8zBUonRUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYjU3NmU4ZjYtYTNmZi0z
ZjNiLTg3NWYtNGM4YzVhYmVhMjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrGcoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC9sLKGpKh2difOiPevpDtnhueuDrWdy7cmSi1WU6JC+23iuj7soVKNQ
zhbs8WMBT09Jikdejo642dMcxoxPzX9ljV78dkAncWpHRuZsPR1a1K0if4KRFJN5
A8WG28E4luDKFv02+xeRM9nOzHadNCkvNGuP93rE04H3+42UJk+VVwF5eHUpmFOy
3yFRVAcXdNRceu6Ew89Y9d0jJ8PUNpXmZk8AMCsti4vyrUaNagHoTjMU7Gzp24Hl
YwTg3O5u7e9se/KjUSbqbjKODpqYn9Q1lL0UFP5BxpUsOsczfxkJ4uY3jS8zD3Pt
C/c0OCqSCbVHuasZKZWJEThhftg+Cdw=
-----END CERTIFICATE-----
Generated at Wed Apr 16 09:31:20 2025 by rpki-client