Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc086ff7-c0c0-3581-995b-f01bf038ee1d.roa
File:                     bc086ff7-c0c0-3581-995b-f01bf038ee1d.roa (raw, json)
Hash identifier:          mlOV/5/BllyuZGtszSxhTPwkANP8VaD1OOjYq520GyM=
Subject key identifier:   F3:F4:9F:95:6E:31:44:F2:49:F2:27:DC:51:A0:64:D6:2A:CE:A3:DC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CBA08526B6F623B681F8FA440
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc086ff7-c0c0-3581-995b-f01bf038ee1d.roa
Signing time:             Thu 27 Jan 2022 05:00:00 +0000
ROA not before:           Thu 27 Jan 2022 05:00:00 +0000
ROA not after:            Thu 03 Mar 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.48.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:ba:08:52:6b:6f:62:3b:68:1f:8f:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 27 05:00:00 2022 GMT
            Not After : Mar  3 05:00:00 2022 GMT
        Subject: CN=97e411fb-97a2-4db8-bd1d-b0150dd6160c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:61:d0:54:bb:82:90:50:a2:42:2f:a3:29:17:
                    2f:69:a1:90:e0:ea:e8:c8:07:db:f0:38:a8:40:1d:
                    14:02:4f:e0:c0:bf:61:da:30:12:5c:91:de:e6:49:
                    e5:9f:39:5e:36:09:43:50:27:c7:5e:3b:4b:49:b7:
                    da:d6:43:69:e4:6e:d7:66:f0:7b:1c:f4:40:69:ad:
                    3a:15:91:99:e0:af:1f:9a:f9:0d:bd:7f:dc:dd:44:
                    39:e6:1b:1d:ad:a5:bb:8d:65:09:3e:0f:92:65:40:
                    ef:3e:fd:37:b7:24:fa:b8:29:02:3c:f1:a8:a0:66:
                    0b:45:d9:d1:b6:8a:bc:60:fa:66:e5:10:5d:de:7e:
                    3f:63:48:0e:69:bf:fa:fd:d0:4a:66:ec:eb:f5:8a:
                    0f:d9:7f:03:3e:bd:9e:93:72:d2:38:6a:c3:76:0d:
                    e6:eb:9c:7b:ac:dc:7d:dc:5d:df:58:42:a9:27:b8:
                    69:88:21:a8:b7:17:a5:d5:c6:62:37:33:45:72:33:
                    28:f3:2a:f4:d5:32:f6:98:da:ea:d4:88:bc:1f:48:
                    a9:96:28:b9:6d:1f:e8:f3:95:b2:4d:5c:ca:6f:a4:
                    52:c4:ee:3e:78:ee:42:38:54:07:96:6e:3c:5b:f8:
                    b2:a8:81:f6:09:37:c9:d0:ee:49:39:64:3a:94:d8:
                    ee:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F4:9F:95:6E:31:44:F2:49:F2:27:DC:51:A0:64:D6:2A:CE:A3:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc086ff7-c0c0-3581-995b-f01bf038ee1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.48.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:e0:48:8c:4b:c1:27:87:c8:16:b4:e3:41:07:e8:7a:7f:87:
         58:32:56:f8:88:de:5f:1f:4a:3a:d8:bd:96:8e:8c:e1:5b:20:
         ca:24:b9:a0:e6:61:c4:ad:b8:f5:77:80:ab:37:69:46:ca:9f:
         11:34:32:f1:2a:b8:fe:70:17:7a:47:41:c4:fd:7a:71:f9:d1:
         51:07:4f:df:dd:b8:90:1c:2b:41:1a:9c:4b:bf:fc:13:81:cb:
         6f:e6:95:13:79:7d:31:b6:a1:87:40:f7:17:19:a2:70:e7:e0:
         da:39:ee:0a:e8:f4:f0:0a:4d:25:8f:b1:11:80:20:f1:03:af:
         53:da:e2:7e:af:35:cd:cd:10:c9:59:ec:3c:d0:e8:8d:7d:c9:
         f5:5b:86:c9:4a:48:82:db:47:59:45:5b:44:17:ba:b8:e4:41:
         98:53:29:c6:1b:64:c8:76:10:35:8e:76:17:35:da:00:29:a5:
         02:7d:8d:49:cd:7f:df:af:a1:29:52:5c:84:6e:2d:49:29:06:
         fd:81:28:8a:48:47:d8:17:9b:17:bc:fd:7d:65:d2:22:be:9b:
         de:0a:a9:07:3b:75:72:2c:2d:30:85:3b:11:55:44:90:41:1c:
         a8:78:f5:fb:3e:b8:97:50:5c:cf:5e:2e:a1:71:08:4a:56:e7:
         3d:02:57:35
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDy6CFJrb2I7aB+PpEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDEyNzA1MDAwMFoXDTIyMDMwMzA1MDAwMFowLzEtMCsGA1UEAxMk
OTdlNDExZmItOTdhMi00ZGI4LWJkMWQtYjAxNTBkZDYxNjBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmHQVLuCkFCiQi+jKRcvaaGQ4OroyAfb8Dio
QB0UAk/gwL9h2jASXJHe5knlnzleNglDUCfHXjtLSbfa1kNp5G7XZvB7HPRAaa06
FZGZ4K8fmvkNvX/c3UQ55hsdraW7jWUJPg+SZUDvPv03tyT6uCkCPPGooGYLRdnR
toq8YPpm5RBd3n4/Y0gOab/6/dBKZuzr9YoP2X8DPr2ek3LSOGrDdg3m65x7rNx9
3F3fWEKpJ7hpiCGotxel1cZiNzNFcjMo8yr01TL2mNrq1Ii8H0iplii5bR/o85Wy
TVzKb6RSxO4+eO5COFQHlm48W/iyqIH2CTfJ0O5JOWQ6lNjuewIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPP0n5VuMUTySfIn3FGgZNYqzqPcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYmMwODZmZjctYzBjMC0z
NTgxLTk5NWItZjAxYmYwMzhlZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEDAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATuBIjEvBJ4fIFrTjQQfoen+HWDJW+IjeXx9KOti9lo6M4VsgyiS5oOZh
xK249XeAqzdpRsqfETQy8Sq4/nAXekdBxP16cfnRUQdP3924kBwrQRqcS7/8E4HL
b+aVE3l9Mbahh0D3FxmicOfg2jnuCuj08ApNJY+xEYAg8QOvU9rifq81zc0QyVns
PNDojX3J9VuGyUpIgttHWUVbRBe6uORBmFMpxhtkyHYQNY52FzXaACmlAn2NSc1/
36+hKVJchG4tSSkG/YEoikhH2BebF7z9fWXSIr6b3gqpBzt1ciwtMIU7EVVEkEEc
qHj1+z64l1Bcz14uoXEISlbnPQJXNQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:50 2025 by rpki-client