Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b893cba8-8d40-3f3d-9433-bab957bab8c7.roa
File:                     b893cba8-8d40-3f3d-9433-bab957bab8c7.roa (raw, json)
Hash identifier:          5Lxj8drGK/GaxIdFN3s7S2CbDoE504aTnxWNWykULaU=
Subject key identifier:   51:71:AC:A6:99:C0:1B:23:74:B4:3E:40:70:67:CA:EE:0B:EF:18:44
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C6FE877E4111E7AED8A60E840
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b893cba8-8d40-3f3d-9433-bab957bab8c7.roa
Signing time:             Fri 31 Dec 2021 05:00:00 +0000
ROA not before:           Fri 31 Dec 2021 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        162.222.148.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6f:e8:77:e4:11:1e:7a:ed:8a:60:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 31 05:00:00 2021 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=3075efee-a0eb-48c8-a021-acc8bc9e53bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e7:3d:e4:d8:ed:ec:79:2f:e2:2e:f4:4e:a7:
                    66:df:fa:fb:84:bb:67:43:cd:78:22:66:69:26:e5:
                    79:30:ab:ae:7f:5d:3c:8e:6b:a8:87:59:b8:77:fd:
                    cd:fc:49:56:ab:9e:04:3a:42:31:f5:73:de:3d:10:
                    19:23:92:76:e5:2c:63:93:cd:63:0f:17:5b:12:0d:
                    9f:99:f7:06:3d:ab:d3:1f:55:04:d0:6d:19:55:bb:
                    f7:41:ba:ce:74:c7:a5:91:77:d2:5d:84:96:40:ff:
                    36:1b:47:83:bb:47:5d:ce:51:f2:dc:a9:0c:cd:98:
                    38:a9:e3:a4:ca:73:1f:3b:a4:a3:d7:45:1a:d5:51:
                    e2:81:fc:ae:96:71:0f:be:d9:c4:3f:26:21:0d:d3:
                    2a:4d:95:a3:f8:27:ca:92:e0:19:bf:d5:db:b4:46:
                    96:90:2d:cb:9a:e2:50:b1:b1:13:be:ad:c6:11:8f:
                    50:6b:da:9c:83:c7:ab:22:5d:c5:85:08:74:6d:63:
                    db:ec:9c:57:58:19:b4:a6:28:d3:4f:a3:52:08:7a:
                    3a:00:b7:40:56:d0:5f:4e:ff:bd:3d:cb:fb:22:95:
                    ba:94:32:d4:a1:bd:b3:d8:dd:a2:01:78:3e:30:9d:
                    9a:93:2d:09:45:92:ab:ee:7c:5c:7b:30:5f:e6:d1:
                    d0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:71:AC:A6:99:C0:1B:23:74:B4:3E:40:70:67:CA:EE:0B:EF:18:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b893cba8-8d40-3f3d-9433-bab957bab8c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:46:3a:5a:e0:4f:84:84:17:fb:eb:5d:49:08:17:91:d8:79:
         1a:0b:83:d4:e6:5e:b3:ff:e8:73:03:d7:b6:e4:dc:5d:33:82:
         72:1a:e8:20:d7:7c:97:4c:65:bb:ca:5d:10:6f:74:b0:c7:39:
         a8:37:62:15:c5:10:61:3c:fc:94:87:08:a7:30:0e:06:1d:5a:
         dc:1c:da:ed:79:5f:2d:68:68:5a:cb:df:0e:9b:2e:fd:e6:55:
         ab:4b:73:36:ae:a0:b2:84:07:7f:a2:3b:e7:0a:9a:9b:a9:f2:
         3a:2c:56:8a:07:41:e4:c6:4c:8b:d9:15:6e:ce:d6:05:55:f9:
         eb:38:8d:ef:ae:7f:00:14:cc:3a:dc:74:a3:61:42:4a:cf:75:
         a7:18:fd:ad:a3:53:e4:9d:83:a1:af:e8:53:bb:f1:79:e9:17:
         7f:85:5e:0d:91:3a:df:be:0a:af:31:02:a3:05:91:cf:fc:11:
         ce:1e:8c:3f:ef:f9:aa:ef:2d:34:e7:38:8d:f0:8a:f2:3d:e6:
         c4:2d:a4:24:68:e4:5f:ae:a2:e8:90:62:2c:05:7c:94:5b:e7:
         7f:d3:3d:cd:1b:24:a9:98:d2:4a:81:68:00:e8:8a:65:2c:40:
         e2:46:4b:69:4b:b7:d7:59:5c:aa:a7:cf:ed:75:eb:31:2b:7b:
         2e:90:01:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDxv6HfkER567Ypg6EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIxMTIzMTA1MDAwMFoXDTIyMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
MzA3NWVmZWUtYTBlYi00OGM4LWEwMjEtYWNjOGJjOWU1M2JiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+c95Njt7Hkv4i70Tqdm3/r7hLtnQ814ImZp
JuV5MKuuf108jmuoh1m4d/3N/ElWq54EOkIx9XPePRAZI5J25Sxjk81jDxdbEg2f
mfcGPavTH1UE0G0ZVbv3QbrOdMelkXfSXYSWQP82G0eDu0ddzlHy3KkMzZg4qeOk
ynMfO6Sj10Ua1VHigfyulnEPvtnEPyYhDdMqTZWj+CfKkuAZv9XbtEaWkC3LmuJQ
sbETvq3GEY9Qa9qcg8erIl3FhQh0bWPb7JxXWBm0pijTT6NSCHo6ALdAVtBfTv+9
Pcv7IpW6lDLUob2z2N2iAXg+MJ2aky0JRZKr7nxcezBf5tHQbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFFxrKaZwBsjdLQ+QHBnyu4L7xhEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYjg5M2NiYTgtOGQ0MC0z
ZjNkLTk0MzMtYmFiOTU3YmFiOGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCot6UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG1GOlrgT4SEF/vrXUkIF5HYeRoLg9TmXrP/6HMD17bk3F0zgnIa6CDX
fJdMZbvKXRBvdLDHOag3YhXFEGE8/JSHCKcwDgYdWtwc2u15Xy1oaFrL3w6bLv3m
VatLczauoLKEB3+iO+cKmpup8josVooHQeTGTIvZFW7O1gVV+es4je+ufwAUzDrc
dKNhQkrPdacY/a2jU+Sdg6Gv6FO78XnpF3+FXg2ROt++Cq8xAqMFkc/8Ec4ejD/v
+arvLTTnOI3wivI95sQtpCRo5F+uouiQYiwFfJRb53/TPc0bJKmY0kqBaADoimUs
QOJGS2lLt9dZXKqnz+116zErey6QAcg=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:47 2025 by rpki-client