Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc5fa900-13fe-3f14-aa30-cfc217d07013.roa
File:                     bc5fa900-13fe-3f14-aa30-cfc217d07013.roa (raw, json)
Hash identifier:          mvPg0ECSP4AuLwX8qCotv51nGOB3eWa4ieCW+8eIM0w=
Subject key identifier:   7D:5F:1A:F1:E8:23:46:03:73:3F:E8:BB:CB:B9:36:70:60:91:07:4E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D805C67C1FCECE252B12D3CA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc5fa900-13fe-3f14-aa30-cfc217d07013.roa
Signing time:             Fri 08 Apr 2022 04:00:00 +0000
ROA not before:           Fri 08 Apr 2022 04:00:00 +0000
ROA not after:            Fri 13 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.128.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:80:5c:67:c1:fc:ec:e2:52:b1:2d:3c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr  8 04:00:00 2022 GMT
            Not After : May 13 04:00:00 2022 GMT
        Subject: CN=6c01e7ec-00c6-4ef9-b275-36cca6acfd43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9b:17:e6:2d:f6:a8:8a:aa:5f:4e:44:2c:75:
                    16:bb:70:21:5f:78:ab:69:4a:2c:b0:fb:39:88:f2:
                    56:df:6b:b9:4d:e7:e2:7d:f2:ad:84:ab:e2:03:62:
                    68:c0:38:51:f9:74:39:61:78:f5:c7:8d:3c:a0:b5:
                    f5:d8:8f:88:13:09:9d:7c:78:04:b3:d2:33:2d:58:
                    d9:6b:a5:3e:f0:c3:6c:9a:20:4f:eb:de:2e:ba:81:
                    e7:94:15:0e:97:71:93:42:58:a6:53:1d:58:a3:4d:
                    2d:87:ba:3b:2b:54:c1:56:2f:d3:69:4c:59:ac:e0:
                    df:04:64:e9:b8:2f:81:4a:83:3a:84:51:90:0f:41:
                    12:a3:95:48:c2:84:8c:f2:88:89:94:c7:b1:59:d0:
                    8a:ab:f6:60:e2:10:aa:6c:e7:93:6b:6b:30:81:33:
                    16:64:87:59:18:ac:3a:7f:c7:45:26:27:55:c4:fc:
                    f4:52:7b:8b:5b:71:35:49:47:1b:07:ea:36:11:cc:
                    80:45:6f:f5:a6:a7:49:50:dd:b7:4f:0d:e8:cc:e5:
                    29:1d:a3:b2:0f:bb:0e:8c:01:75:d2:36:c9:26:a8:
                    54:4e:74:4b:e0:46:66:82:e3:ed:8a:d4:40:08:bd:
                    78:bb:41:74:26:69:d3:12:0f:20:46:8c:0c:14:a9:
                    f0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5F:1A:F1:E8:23:46:03:73:3F:E8:BB:CB:B9:36:70:60:91:07:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc5fa900-13fe-3f14-aa30-cfc217d07013.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.128.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:e8:a3:f7:af:3e:0e:ee:a6:f2:c0:42:50:ed:4b:9b:44:dc:
         8e:d1:a3:38:12:08:8c:40:1e:71:d7:69:75:20:37:53:e5:6b:
         95:05:98:46:01:a6:a7:bc:ff:f0:35:a9:a4:e6:41:a3:b2:af:
         96:67:fc:6c:8e:23:b3:d3:8a:65:fc:ce:ab:4b:06:da:1e:14:
         30:1c:03:de:05:b4:75:99:7a:18:ff:3d:8c:04:30:90:5a:2b:
         99:73:3c:2b:86:4c:b2:22:e9:ca:87:01:d7:3c:52:f1:0a:06:
         2f:71:29:2e:05:66:9d:97:4e:70:f6:2d:be:41:fa:1f:b0:0f:
         9f:2f:e2:ad:bd:c2:6c:c6:75:ec:a7:81:6c:cd:6b:85:22:24:
         53:93:d0:c5:12:57:67:c4:08:73:70:67:ec:aa:37:02:36:49:
         45:0f:1d:87:1b:3e:b1:db:2f:b7:26:89:a4:05:6e:b8:01:37:
         7b:55:c4:15:6a:ea:b1:3c:56:9e:db:9f:ae:ae:fe:1f:81:9c:
         9f:d0:32:fa:d1:18:7e:0d:08:7a:a9:a2:ba:5c:64:b5:cb:8a:
         e0:8c:28:e1:18:72:c1:9f:29:b1:56:af:39:ad:10:d3:78:86:
         61:c4:d2:2c:49:48:41:b3:44:6f:5a:29:8a:b4:31:56:91:15:
         b4:16:95:9b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2AXGfB/OziUrEtPKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDQwODA0MDAwMFoXDTIyMDUxMzA0MDAwMFowLzEtMCsGA1UEAxMk
NmMwMWU3ZWMtMDBjNi00ZWY5LWIyNzUtMzZjY2E2YWNmZDQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJsX5i32qIqqX05ELHUWu3AhX3iraUossPs5
iPJW32u5TefiffKthKviA2JowDhR+XQ5YXj1x408oLX12I+IEwmdfHgEs9IzLVjZ
a6U+8MNsmiBP694uuoHnlBUOl3GTQlimUx1Yo00th7o7K1TBVi/TaUxZrODfBGTp
uC+BSoM6hFGQD0ESo5VIwoSM8oiJlMexWdCKq/Zg4hCqbOeTa2swgTMWZIdZGKw6
f8dFJidVxPz0UnuLW3E1SUcbB+o2EcyARW/1pqdJUN23Tw3ozOUpHaOyD7sOjAF1
0jbJJqhUTnRL4EZmguPtitRACL14u0F0JmnTEg8gRowMFKnw3wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFH1fGvHoI0YDcz/ou8u5NnBgkQdOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYmM1ZmE5MDAtMTNmZS0z
ZjE0LWFhMzAtY2ZjMjE3ZDA3MDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEIAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEArOij968+Du6m8sBCUO1Lm0TcjtGjOBIIjEAecddpdSA3U+VrlQWYRgGm
p7z/8DWppOZBo7Kvlmf8bI4js9OKZfzOq0sG2h4UMBwD3gW0dZl6GP89jAQwkFor
mXM8K4ZMsiLpyocB1zxS8QoGL3EpLgVmnZdOcPYtvkH6H7APny/irb3CbMZ17KeB
bM1rhSIkU5PQxRJXZ8QIc3Bn7Ko3AjZJRQ8dhxs+sdsvtyaJpAVuuAE3e1XEFWrq
sTxWntufrq7+H4Gcn9Ay+tEYfg0IeqmiulxktcuK4Iwo4RhywZ8psVavOa0Q03iG
YcTSLElIQbNEb1opirQxVpEVtBaVmw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:46 2025 by rpki-client