Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c3dad8a0-1a41-35a1-a730-8995011df3f8.roa
File:                     c3dad8a0-1a41-35a1-a730-8995011df3f8.roa (raw, json)
Hash identifier:          upevSpKiFd6BS9zmhwKHeWxInLDLhcM5m+/ZtyFo1hk=
Subject key identifier:   1D:5E:FE:74:C4:20:53:DF:20:35:11:08:EC:64:0E:C3:CD:30:EB:0C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C6FEF956C3296570337485880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c3dad8a0-1a41-35a1-a730-8995011df3f8.roa
Signing time:             Fri 31 Dec 2021 05:00:00 +0000
ROA not before:           Fri 31 Dec 2021 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        198.200.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6f:ef:95:6c:32:96:57:03:37:48:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 31 05:00:00 2021 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=2cedbf63-49f6-4b1a-8286-82134803084c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a0:17:77:99:27:02:5c:0c:b4:8f:8a:87:2c:
                    82:43:72:63:8d:b3:93:60:c7:de:f7:88:af:76:37:
                    d7:cc:e1:96:cd:ca:f1:9f:7e:a3:af:79:4b:6c:9c:
                    b2:e4:f8:85:78:0e:df:53:ce:da:50:b5:8e:81:7e:
                    fe:0f:20:c9:9f:ca:97:12:5b:a0:6f:be:b8:a5:ca:
                    29:a6:5d:18:da:8d:f8:a1:b5:3c:d6:3f:42:72:97:
                    45:9d:90:a0:aa:5a:2f:be:6f:41:21:85:55:7c:76:
                    45:5e:b7:4e:d4:9f:40:ad:e7:fa:c7:6d:33:98:0c:
                    2a:b1:d0:c3:cd:15:64:15:28:1f:63:8e:55:89:bc:
                    ff:77:12:04:6d:56:40:5b:b7:a1:3c:e2:bb:55:53:
                    59:3d:b8:f8:d3:95:69:c3:79:52:ad:19:df:36:58:
                    85:cc:b9:f8:1d:19:e8:1a:c6:b9:1b:cc:28:db:c2:
                    98:1b:5a:b7:66:22:c2:e9:86:66:a3:aa:22:0a:07:
                    c9:b2:d6:a2:47:16:90:25:28:5a:54:6b:1f:e3:5f:
                    39:a9:bc:f1:08:e4:73:85:b9:e4:cb:b5:aa:67:17:
                    b9:fd:98:d8:db:68:c9:aa:d3:48:94:9c:37:8e:17:
                    41:7e:6f:c4:a2:ed:06:1c:55:9b:7e:56:17:46:86:
                    3d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5E:FE:74:C4:20:53:DF:20:35:11:08:EC:64:0E:C3:CD:30:EB:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c3dad8a0-1a41-35a1-a730-8995011df3f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.200.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:83:b5:66:6e:97:9b:20:a4:19:ec:8a:1b:d1:ec:20:b5:96:
         c5:99:67:1b:87:bd:52:c6:ac:ed:ae:f1:70:91:67:c1:41:9a:
         f2:03:58:72:c0:38:ad:41:1f:70:0d:66:a1:22:ef:a1:3d:64:
         f3:0d:11:6a:a3:31:66:6d:29:54:47:7a:4d:77:df:df:71:d8:
         03:d3:17:ae:04:a4:d8:88:3e:aa:95:af:e9:91:85:ef:4e:44:
         9d:46:26:57:d5:2a:9a:89:ea:94:76:74:06:11:b4:fe:a4:74:
         cf:77:78:4a:52:89:e9:e7:ad:59:f3:9e:55:3d:bf:41:7d:31:
         20:1f:c8:07:61:22:e7:82:b3:a6:74:85:bd:ce:65:11:bc:b3:
         e3:7a:79:2b:38:c8:ce:09:68:2c:7b:69:a7:80:11:4c:6d:1a:
         63:cd:f8:b9:89:a7:f7:35:ad:f8:65:82:7b:7c:56:b9:9d:5c:
         81:93:90:d2:c8:b3:2e:26:e6:8d:e4:06:c9:10:99:a2:8f:4f:
         dd:70:c5:d0:c4:49:a8:4a:15:a8:be:70:f3:88:25:06:6a:70:
         b8:f5:fc:85:e3:b5:e8:f4:c7:06:fc:55:e3:06:fb:87:7e:8d:
         37:63:ba:02:6c:3b:f1:fd:ac:78:c2:5e:2c:c4:64:8a:2c:5c:
         40:eb:f9:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDxv75VsMpZXAzdIWIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIxMTIzMTA1MDAwMFoXDTIyMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
MmNlZGJmNjMtNDlmNi00YjFhLTgyODYtODIxMzQ4MDMwODRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6AXd5knAlwMtI+KhyyCQ3JjjbOTYMfe94iv
djfXzOGWzcrxn36jr3lLbJyy5PiFeA7fU87aULWOgX7+DyDJn8qXElugb764pcop
pl0Y2o34obU81j9CcpdFnZCgqlovvm9BIYVVfHZFXrdO1J9Aref6x20zmAwqsdDD
zRVkFSgfY45Vibz/dxIEbVZAW7ehPOK7VVNZPbj405Vpw3lSrRnfNliFzLn4HRno
Gsa5G8wo28KYG1q3ZiLC6YZmo6oiCgfJstaiRxaQJShaVGsf4185qbzxCORzhbnk
y7WqZxe5/ZjY22jJqtNIlJw3jhdBfm/Eou0GHFWbflYXRoY9qwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB1e/nTEIFPfIDURCOxkDsPNMOsMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYzNkYWQ4YTAtMWE0MS0z
NWExLWE3MzAtODk5NTAxMWRmM2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsiVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKCDtWZul5sgpBnsihvR7CC1lsWZZxuHvVLGrO2u8XCRZ8FBmvIDWHLA
OK1BH3ANZqEi76E9ZPMNEWqjMWZtKVRHek13399x2APTF64EpNiIPqqVr+mRhe9O
RJ1GJlfVKpqJ6pR2dAYRtP6kdM93eEpSiennrVnznlU9v0F9MSAfyAdhIueCs6Z0
hb3OZRG8s+N6eSs4yM4JaCx7aaeAEUxtGmPN+LmJp/c1rfhlgnt8VrmdXIGTkNLI
sy4m5o3kBskQmaKPT91wxdDESahKFai+cPOIJQZqcLj1/IXjtej0xwb8VeMG+4d+
jTdjugJsO/H9rHjCXizEZIosXEDr+YI=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:57:45 2025 by rpki-client