Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c145bf12-2487-301f-8821-c72b91626b0d.roa
File:                     c145bf12-2487-301f-8821-c72b91626b0d.roa (raw, json)
Hash identifier:          5LdXUiEYd+m7ipjZ9emG0/33KPR39LU9aH/Tykc2zwM=
Subject key identifier:   DE:04:B7:21:08:98:6E:AF:2A:E3:A2:EB:65:68:EC:4F:91:B7:C1:7D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DAA440A875195B8F7C1676600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c145bf12-2487-301f-8821-c72b91626b0d.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        192.189.196.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:aa:44:0a:87:51:95:b8:f7:c1:67:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=c3045e07-790a-4e77-9a6a-6cc36a6f4316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0e:58:d2:f1:4d:cb:f4:b3:23:ca:df:95:46:
                    b6:16:03:43:d1:d3:14:23:f5:7e:71:94:9e:51:d6:
                    a1:74:74:c0:97:82:32:78:99:13:f1:71:8d:87:c1:
                    47:e5:5c:ae:c7:3c:2f:b6:3b:96:5b:a2:9f:13:2b:
                    40:33:a3:43:67:84:2e:dc:52:76:10:4f:fb:46:f2:
                    43:a3:73:21:64:1e:cc:f1:a2:d1:21:8e:53:11:63:
                    8f:55:ad:63:3c:29:0a:02:b9:7f:84:e8:64:89:b5:
                    f0:ba:eb:c6:26:f2:bd:e7:7f:6a:54:30:21:98:1b:
                    19:20:2f:fe:1e:b7:03:51:27:fb:c6:cf:9e:65:a4:
                    fe:6b:13:d5:ca:07:5b:95:c8:cb:c2:9a:00:ad:f8:
                    79:8d:40:44:f2:44:f8:a4:28:d1:58:ce:22:f1:17:
                    95:e2:8b:4b:70:7b:fc:9b:45:ca:4b:27:3e:e3:d4:
                    26:fc:07:6d:e0:2b:77:b1:a4:ef:b0:c6:d8:21:35:
                    91:95:37:62:eb:1b:13:43:ca:ef:51:c9:02:f6:b7:
                    a5:85:17:9a:34:10:51:f0:77:67:52:0e:8e:33:9a:
                    1b:1b:6b:5c:83:6d:ae:f0:12:d3:4c:0d:a8:b3:73:
                    e1:5a:bf:eb:a1:26:1b:95:f6:59:f4:37:fa:fa:33:
                    2d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:04:B7:21:08:98:6E:AF:2A:E3:A2:EB:65:68:EC:4F:91:B7:C1:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c145bf12-2487-301f-8821-c72b91626b0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:70:84:9a:49:be:89:dc:42:1e:4d:58:72:fb:73:8c:e7:9e:
         64:a0:3d:d0:9a:01:ad:d9:28:52:23:61:28:a4:98:ae:3e:3e:
         af:8b:0f:f3:0b:78:62:6a:bf:a2:6c:1d:40:f3:6d:8c:b2:3b:
         1e:8c:dd:b7:cd:71:8e:11:5a:dd:d1:83:02:7d:a9:64:8a:57:
         28:0c:1b:54:8b:c0:a2:c5:da:75:82:2a:89:b5:69:90:eb:f9:
         97:82:04:86:17:4f:28:2e:06:3a:96:be:f7:4e:50:7d:1e:94:
         0e:b4:38:80:1c:41:ff:5a:f7:98:c7:ad:40:f6:6a:08:d3:26:
         48:b3:f8:26:6f:3f:a0:65:b7:6c:7b:97:bb:70:37:49:2b:b3:
         46:5c:1a:1d:e6:44:13:4a:75:89:d6:52:09:05:4c:97:0d:d5:
         3a:7e:44:39:ab:f6:93:48:b5:e7:00:98:c1:c2:9f:66:67:5c:
         3a:0f:48:6b:b1:37:7b:4a:41:fe:cb:62:9e:7e:34:4b:64:73:
         80:4e:c3:d4:86:29:70:6c:46:63:62:89:77:6f:b4:21:bf:09:
         bf:b5:f6:40:b2:3e:1a:a8:b2:bc:be:8a:4c:19:69:5b:e4:50:
         9f:ba:c3:ed:53:51:d2:10:d3:a9:15:44:4c:82:10:0c:39:21:
         02:99:87:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD2qRAqHUZW498FnZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDQyMjEyMDAwMFoXDTIyMDUyODA0MDAwMFowLzEtMCsGA1UEAxMk
YzMwNDVlMDctNzkwYS00ZTc3LTlhNmEtNmNjMzZhNmY0MzE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ5Y0vFNy/SzI8rflUa2FgND0dMUI/V+cZSe
UdahdHTAl4IyeJkT8XGNh8FH5VyuxzwvtjuWW6KfEytAM6NDZ4Qu3FJ2EE/7RvJD
o3MhZB7M8aLRIY5TEWOPVa1jPCkKArl/hOhkibXwuuvGJvK9539qVDAhmBsZIC/+
HrcDUSf7xs+eZaT+axPVygdblcjLwpoArfh5jUBE8kT4pCjRWM4i8ReV4otLcHv8
m0XKSyc+49Qm/Adt4Ct3saTvsMbYITWRlTdi6xsTQ8rvUckC9relhReaNBBR8Hdn
Ug6OM5obG2tcg22u8BLTTA2os3PhWr/roSYblfZZ9Df6+jMtNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN4EtyEImG6vKuOi62Vo7E+Rt8F9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYzE0NWJmMTItMjQ4Ny0z
MDFmLTg4MjEtYzcyYjkxNjI2YjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL3EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACJwhJpJvoncQh5NWHL7c4znnmSgPdCaAa3ZKFIjYSikmK4+Pq+LD/ML
eGJqv6JsHUDzbYyyOx6M3bfNcY4RWt3RgwJ9qWSKVygMG1SLwKLF2nWCKom1aZDr
+ZeCBIYXTyguBjqWvvdOUH0elA60OIAcQf9a95jHrUD2agjTJkiz+CZvP6Blt2x7
l7twN0krs0ZcGh3mRBNKdYnWUgkFTJcN1Tp+RDmr9pNItecAmMHCn2ZnXDoPSGux
N3tKQf7LYp5+NEtkc4BOw9SGKXBsRmNiiXdvtCG/Cb+19kCyPhqosry+ikwZaVvk
UJ+6w+1TUdIQ06kVREyCEAw5IQKZh4I=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:12 2025 by rpki-client