Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c72d9625-4794-34ba-9e7e-aa4c0881c82a.roa
File:                     c72d9625-4794-34ba-9e7e-aa4c0881c82a.roa (raw, json)
Hash identifier:          Y7nHGutH+oF19Thyx1j+jXED3t9Sdxc8FuQ9S8CJjFU=
Subject key identifier:   2B:CE:56:77:78:0A:32:62:72:4F:EB:7F:38:96:A0:77:BD:F7:19:C9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FFDE4AA365393A2612E5F53A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c72d9625-4794-34ba-9e7e-aa4c0881c82a.roa
Signing time:             Mon 21 Nov 2022 12:00:00 +0000
ROA not before:           Mon 21 Nov 2022 12:00:00 +0000
ROA not after:            Tue 27 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        40.167.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:fd:e4:aa:36:53:93:a2:61:2e:5f:53:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 21 12:00:00 2022 GMT
            Not After : Dec 27 05:00:00 2022 GMT
        Subject: CN=d81bb3b8-0740-4ad5-a249-12abe20bb098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ac:58:a5:30:c9:34:c7:94:8b:77:0f:ad:a9:
                    2a:40:fb:da:fc:c2:e8:e7:cd:b3:54:c7:41:8d:7a:
                    6c:91:f0:2f:35:6d:2d:df:ae:0d:aa:24:2d:32:56:
                    71:52:92:8f:a3:5a:de:f2:76:29:f0:cb:fb:01:04:
                    6b:b8:89:f3:ac:7c:b4:83:b5:46:f7:43:2f:fe:37:
                    7d:20:c8:cf:da:96:eb:fc:63:cd:72:c3:b2:38:29:
                    c5:83:36:1d:30:92:fc:53:65:05:d0:d9:12:bb:26:
                    b4:e1:91:60:5b:1a:c8:2f:40:a6:b5:3f:ae:e7:bb:
                    7c:65:f0:3a:8a:5a:ff:07:cb:8c:89:be:63:e7:69:
                    ee:76:46:6d:80:82:6b:5c:34:96:cd:e2:a7:64:88:
                    05:94:19:ed:bf:93:55:02:93:6c:06:2b:e3:fd:51:
                    03:ae:ae:63:b8:f1:e4:8c:b1:d9:a6:31:f6:0e:d9:
                    3a:07:2d:d1:57:05:2b:f4:4d:af:0b:00:e0:ed:e1:
                    b1:3c:b6:16:da:00:e8:a5:64:f2:24:d5:57:92:af:
                    93:0b:8b:47:a2:c7:4f:57:34:31:5b:01:26:28:b3:
                    e9:93:d6:5e:06:15:61:fe:37:8b:d3:47:18:50:0c:
                    bd:e6:c6:9b:88:cd:f9:14:5d:ad:f3:82:3f:2b:7d:
                    ca:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:CE:56:77:78:0A:32:62:72:4F:EB:7F:38:96:A0:77:BD:F7:19:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c72d9625-4794-34ba-9e7e-aa4c0881c82a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.167.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:21:48:b5:d9:2b:86:d7:82:8a:7f:90:11:82:3d:96:4e:32:
         03:b1:ee:02:b8:e8:c6:0d:a4:a1:73:8c:51:9d:85:33:f6:b5:
         d0:0d:53:24:ba:a7:d4:54:76:69:1f:c3:b3:b2:d3:1b:55:a1:
         c8:21:8c:40:f5:bf:17:33:a4:c6:13:cb:f5:b6:27:51:86:64:
         66:78:dd:14:97:93:0f:71:39:61:0c:d8:ed:41:20:bc:d7:ca:
         04:29:b1:31:9c:93:18:ba:c8:03:66:19:ce:52:83:6e:92:56:
         ae:b8:2e:eb:0a:5b:ce:9c:bf:4b:95:5f:df:f4:ac:3d:7e:43:
         0a:6f:7f:a8:dc:21:c9:89:4a:a4:00:22:5a:fa:6d:3f:49:22:
         80:99:a5:34:19:54:fd:ce:fe:79:fa:c0:ef:05:6e:90:b9:1c:
         17:b9:dd:5a:c5:01:c8:33:8c:31:02:c9:c9:08:d6:d3:69:18:
         42:6d:11:9a:35:29:40:43:73:9d:bd:69:a8:c4:79:48:ff:7a:
         06:1c:f0:2c:0e:25:0b:e9:3a:6c:3b:ec:f5:65:5c:59:08:79:
         7f:53:5b:87:dc:a2:0a:64:5d:85:bd:1e:f3:1c:82:bd:6e:00:
         b0:3b:b2:a4:89:a3:dc:76:39:76:ef:20:a4:4a:f7:bd:a8:01:
         ca:f7:af:dd
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/95Ko2U5OiYS5fU6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEyMTEyMDAwMFoXDTIyMTIyNzA1MDAwMFowLzEtMCsGA1UEAxMk
ZDgxYmIzYjgtMDc0MC00YWQ1LWEyNDktMTJhYmUyMGJiMDk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0axYpTDJNMeUi3cPrakqQPva/MLo582zVMdB
jXpskfAvNW0t364NqiQtMlZxUpKPo1re8nYp8Mv7AQRruInzrHy0g7VG90Mv/jd9
IMjP2pbr/GPNcsOyOCnFgzYdMJL8U2UF0NkSuya04ZFgWxrIL0CmtT+u57t8ZfA6
ilr/B8uMib5j52nudkZtgIJrXDSWzeKnZIgFlBntv5NVApNsBivj/VEDrq5juPHk
jLHZpjH2Dtk6By3RVwUr9E2vCwDg7eGxPLYW2gDopWTyJNVXkq+TC4tHosdPVzQx
WwEmKLPpk9ZeBhVh/jeL00cYUAy95sabiM35FF2t84I/K33KfQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCvOVnd4CjJick/rfziWoHe99xnJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYzcyZDk2MjUtNDc5NC0z
NGJhLTllN2UtYWE0YzA4ODFjODJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKKcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAayFItdkrhteCin+QEYI9lk4yA7HuArjoxg2koXOMUZ2FM/a10A1TJLqn
1FR2aR/Ds7LTG1WhyCGMQPW/FzOkxhPL9bYnUYZkZnjdFJeTD3E5YQzY7UEgvNfK
BCmxMZyTGLrIA2YZzlKDbpJWrrgu6wpbzpy/S5Vf3/SsPX5DCm9/qNwhyYlKpAAi
WvptP0kigJmlNBlU/c7+efrA7wVukLkcF7ndWsUByDOMMQLJyQjW02kYQm0RmjUp
QENznb1pqMR5SP96BhzwLA4lC+k6bDvs9WVcWQh5f1Nbh9yiCmRdhb0e8xyCvW4A
sDuypImj3HY5du8gpEr3vagByvev3Q==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:38:30 2025 by rpki-client