Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b5acf860-11a2-3fdd-bf3b-7fe2e367758d.roa
File:                     b5acf860-11a2-3fdd-bf3b-7fe2e367758d.roa (raw, json)
Hash identifier:          BHxLYrRei9C46FsV/WRi1ZrSBNGfEJLCntM8by8Tu3s=
Subject key identifier:   AD:89:D5:C6:E8:42:0E:BF:C4:C2:40:AF:DB:33:46:F4:9D:C0:D6:18
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D3380DDCB9D63407F62B6F980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b5acf860-11a2-3fdd-bf3b-7fe2e367758d.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        198.99.3.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:80:dd:cb:9d:63:40:7f:62:b6:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=c6f9102a-9bcb-41b1-b11b-2293bccb2fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fb:4f:34:bc:6e:e0:f2:2c:b1:12:2c:d6:22:
                    45:59:85:d8:70:20:3d:0b:19:75:80:45:d6:30:e1:
                    14:4b:31:69:80:f1:bf:e8:7a:7a:5f:ab:3c:b2:2d:
                    a7:76:4e:cd:c0:cb:d5:cc:26:ca:33:67:f1:87:06:
                    e4:75:4a:f7:78:18:85:32:8e:d2:c8:1a:ba:aa:02:
                    f1:97:1a:9e:85:92:d7:75:f6:6c:20:a7:fb:81:b2:
                    ed:0a:56:44:85:a0:fc:0d:2c:55:09:f1:5f:29:3f:
                    c8:60:3b:52:26:fb:5d:df:4e:2f:c6:ca:f5:89:52:
                    e3:0b:38:28:f5:3f:d3:d9:7c:bd:64:94:61:09:18:
                    9e:fb:c1:c5:b2:71:a8:a2:4a:f2:e8:ff:a3:f1:ec:
                    52:9c:e1:69:cc:5e:7a:06:90:16:eb:d7:70:d2:4e:
                    3e:8b:32:88:2e:76:a2:2d:1f:a1:eb:e9:76:bf:de:
                    c3:a1:81:d4:6d:5c:be:66:e2:53:67:9c:10:a2:19:
                    35:6f:a0:4b:bc:5f:83:33:e4:ac:1c:ef:b8:0b:21:
                    de:14:d6:68:f5:a0:68:48:5e:81:16:20:78:19:31:
                    90:cc:4f:b9:eb:4e:d7:17:47:ff:e4:85:36:73:fd:
                    3e:5f:f3:0d:fd:1a:da:56:ab:bb:ac:b6:14:23:32:
                    b4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:89:D5:C6:E8:42:0E:BF:C4:C2:40:AF:DB:33:46:F4:9D:C0:D6:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b5acf860-11a2-3fdd-bf3b-7fe2e367758d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.99.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:da:57:76:8e:22:0e:a0:f4:f3:b7:7d:57:42:66:b5:e1:cf:
         1e:e8:69:d1:ea:38:a3:46:d7:a8:51:b7:9d:7d:f5:1d:53:ac:
         db:c0:3e:30:cf:ef:3a:cc:fd:7d:7b:aa:53:47:f5:90:aa:67:
         55:4d:34:a1:de:0b:04:60:9d:b6:c3:1f:50:b6:6e:c5:55:f2:
         0d:13:5b:78:6b:a2:40:c6:cf:db:99:48:48:f2:af:06:26:9a:
         45:a1:4e:36:f1:5d:b2:e7:d3:5d:d0:85:4e:df:e5:50:36:d1:
         ab:87:a3:2a:f4:a1:f3:5d:01:ce:38:62:80:f0:ab:58:be:56:
         49:db:0e:7b:64:6c:a2:17:33:8f:2c:d1:30:e0:c5:6a:fb:c7:
         a2:e6:c3:8a:96:36:b2:7f:7f:ea:2b:26:af:fc:d7:87:db:05:
         00:ab:af:44:29:e4:18:e5:16:25:26:0f:6e:a5:d8:44:87:a4:
         0d:50:34:bc:45:a3:25:62:89:16:67:ae:d5:92:70:ba:99:42:
         e9:eb:da:37:26:b8:ae:26:05:af:67:89:fb:2a:8f:f7:a3:f6:
         da:65:1d:50:d5:d6:b4:8f:27:62:e7:89:9c:ab:6b:7f:d6:b7:
         b8:07:40:78:32:2c:e8:b3:d5:b5:3f:47:07:98:83:7d:f4:2a:
         c4:92:ec:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD0zgN3LnWNAf2K2+YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
YzZmOTEwMmEtOWJjYi00MWIxLWIxMWItMjI5M2JjY2IyZmRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/tPNLxu4PIssRIs1iJFWYXYcCA9Cxl1gEXW
MOEUSzFpgPG/6Hp6X6s8si2ndk7NwMvVzCbKM2fxhwbkdUr3eBiFMo7SyBq6qgLx
lxqehZLXdfZsIKf7gbLtClZEhaD8DSxVCfFfKT/IYDtSJvtd304vxsr1iVLjCzgo
9T/T2Xy9ZJRhCRie+8HFsnGookry6P+j8exSnOFpzF56BpAW69dw0k4+izKILnai
LR+h6+l2v97DoYHUbVy+ZuJTZ5wQohk1b6BLvF+DM+SsHO+4CyHeFNZo9aBoSF6B
FiB4GTGQzE+5607XF0f/5IU2c/0+X/MN/RraVqu7rLYUIzK0XQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK2J1cboQg6/xMJAr9szRvSdwNYYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYjVhY2Y4NjAtMTFhMi0z
ZmRkLWJmM2ItN2ZlMmUzNjc3NThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmMDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG7aV3aOIg6g9PO3fVdCZrXhzx7oadHqOKNG16hRt5199R1TrNvAPjDP
7zrM/X17qlNH9ZCqZ1VNNKHeCwRgnbbDH1C2bsVV8g0TW3hrokDGz9uZSEjyrwYm
mkWhTjbxXbLn013QhU7f5VA20auHoyr0ofNdAc44YoDwq1i+VknbDntkbKIXM48s
0TDgxWr7x6Lmw4qWNrJ/f+orJq/814fbBQCrr0Qp5BjlFiUmD26l2ESHpA1QNLxF
oyViiRZnrtWScLqZQunr2jcmuK4mBa9nifsqj/ej9tplHVDV1rSPJ2LniZyra3/W
t7gHQHgyLOiz1bU/RweYg330KsSS7Mg=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:04:13 2025 by rpki-client