Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfa7982f-e3bf-3ddf-a835-0800db8948de.roa
File:                     bfa7982f-e3bf-3ddf-a835-0800db8948de.roa (raw, json)
Hash identifier:          VKMDchTaD/8LJgs/7+ZSEc9bVR+mqnCG+2yNLj8/yBI=
Subject key identifier:   B3:63:B5:39:09:8F:68:D5:53:9B:8D:32:B0:C9:7C:5E:6F:45:07:BC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C968624E6FDC73539CD14A840
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfa7982f-e3bf-3ddf-a835-0800db8948de.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        75.22.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:96:86:24:e6:fd:c7:35:39:cd:14:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=ed3075b9-3015-486f-87b2-496970754ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d9:87:60:dc:46:fa:03:de:54:e2:ce:f3:6f:
                    e2:30:2d:4c:43:46:06:bc:0a:21:b1:2e:d8:5a:5c:
                    18:d6:51:a8:89:03:e7:04:06:75:30:b6:fd:9d:b8:
                    41:cf:59:5f:c2:7a:10:6e:d5:1e:dc:08:23:b4:60:
                    a9:09:3c:3a:35:7f:87:ef:0d:19:df:93:d9:cf:20:
                    3a:4f:9c:eb:0f:e5:bd:f7:c4:88:0b:87:fc:18:8e:
                    d8:e0:67:1e:82:15:c7:9a:35:c1:68:a5:3c:3f:de:
                    16:b5:11:f6:e1:1d:75:b8:62:05:38:c7:d8:aa:87:
                    ba:bc:1e:89:07:63:e6:61:13:52:03:80:fe:bd:63:
                    7e:36:d2:bc:54:85:ea:99:9a:1e:c9:e4:91:df:a3:
                    c2:bd:60:94:bc:14:28:20:ab:49:97:56:76:c8:d2:
                    e7:38:bf:3c:17:24:39:81:9e:62:34:a7:ff:bf:e2:
                    ad:d3:77:3f:ed:c5:b5:f3:7f:e4:3e:09:78:58:00:
                    44:ad:af:73:0e:9d:63:99:9e:dc:6e:7d:03:d1:ea:
                    b0:58:49:6a:a9:2c:3a:3b:a1:a0:e3:e7:bf:e6:52:
                    b2:5d:39:da:90:60:c4:2c:4c:43:57:92:ad:6e:19:
                    e4:f1:b6:43:e4:cc:a2:f0:f6:74:df:0a:e4:18:77:
                    9e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:63:B5:39:09:8F:68:D5:53:9B:8D:32:B0:C9:7C:5E:6F:45:07:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfa7982f-e3bf-3ddf-a835-0800db8948de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.22.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:d1:8c:88:43:d0:ef:7d:0d:d8:8e:87:f8:d3:e7:44:f1:29:
         04:3f:8e:c4:b1:cb:02:1f:a9:e7:99:cd:32:10:5c:c9:41:a3:
         19:44:36:08:0e:fb:a7:3e:16:5d:53:c8:ab:99:40:18:01:e9:
         e1:b7:cb:2a:36:cb:a2:ca:83:5d:0b:d2:a1:83:d7:8e:0a:35:
         37:51:95:58:87:6c:3d:c4:77:39:17:04:af:b2:83:05:c1:f9:
         c8:5b:37:02:74:fc:b3:cd:5b:5d:fc:a4:7c:5e:c2:bf:c8:72:
         58:07:5b:c8:82:c2:28:77:3b:87:81:d6:66:53:0f:86:06:64:
         38:b2:54:0e:b7:de:76:eb:ab:7b:d7:1f:b5:1a:d7:d7:41:44:
         30:69:ef:b0:b6:bd:53:c0:67:0d:ac:87:5e:51:37:fd:a7:ac:
         4c:2c:75:76:d6:7c:76:b3:ae:4d:9b:5e:3d:96:0f:ca:83:cd:
         f5:c9:68:af:9d:9d:c5:a1:30:97:22:a2:4d:d1:ec:25:96:d5:
         07:7b:fd:f7:0c:e9:4d:d1:33:4a:8f:e5:f5:76:f2:c0:c8:75:
         2d:82:21:d6:cf:a3:bb:0d:40:b7:c2:d4:69:a4:42:bc:38:f3:
         03:23:b6:a2:4d:9d:bc:80:4f:49:a1:a9:d0:45:d0:e8:29:fd:
         de:e6:29:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDyWhiTm/cc1Oc0UqEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDExNDA1MDAwMFoXDTIyMDIxODA1MDAwMFowLzEtMCsGA1UEAxMk
ZWQzMDc1YjktMzAxNS00ODZmLTg3YjItNDk2OTcwNzU0Y2VkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9mHYNxG+gPeVOLO82/iMC1MQ0YGvAohsS7Y
WlwY1lGoiQPnBAZ1MLb9nbhBz1lfwnoQbtUe3AgjtGCpCTw6NX+H7w0Z35PZzyA6
T5zrD+W998SIC4f8GI7Y4GceghXHmjXBaKU8P94WtRH24R11uGIFOMfYqoe6vB6J
B2PmYRNSA4D+vWN+NtK8VIXqmZoeyeSR36PCvWCUvBQoIKtJl1Z2yNLnOL88FyQ5
gZ5iNKf/v+Kt03c/7cW183/kPgl4WABEra9zDp1jmZ7cbn0D0eqwWElqqSw6O6Gg
4+e/5lKyXTnakGDELExDV5Ktbhnk8bZD5Myi8PZ03wrkGHeeSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLNjtTkJj2jVU5uNMrDJfF5vRQe8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYmZhNzk4MmYtZTNiZi0z
ZGRmLWE4MzUtMDgwMGRiODk0OGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSxbAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACnRjIhD0O99DdiOh/jT50TxKQQ/jsSxywIfqeeZzTIQXMlBoxlENggO
+6c+Fl1TyKuZQBgB6eG3yyo2y6LKg10L0qGD144KNTdRlViHbD3EdzkXBK+ygwXB
+chbNwJ0/LPNW138pHxewr/IclgHW8iCwih3O4eB1mZTD4YGZDiyVA633nbrq3vX
H7Ua19dBRDBp77C2vVPAZw2sh15RN/2nrEwsdXbWfHazrk2bXj2WD8qDzfXJaK+d
ncWhMJciok3R7CWW1Qd7/fcM6U3RM0qP5fV28sDIdS2CIdbPo7sNQLfC1GmkQrw4
8wMjtqJNnbyAT0mhqdBF0Ogp/d7mKWg=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:22 2025 by rpki-client