Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c7e84ecc-e438-387b-a1a5-4e855f605671.roa
File:                     c7e84ecc-e438-387b-a1a5-4e855f605671.roa (raw, json)
Hash identifier:          wZAvpzgzM7ujreWlUvvUzMdZOq+cCsj4E2uf1+vxuuw=
Subject key identifier:   D4:06:37:80:F8:72:46:90:27:4C:D2:47:70:33:C9:75:D7:BB:44:1E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EE403DBEE494E60F6333AF8C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c7e84ecc-e438-387b-a1a5-4e855f605671.roa
Signing time:             Fri 12 Aug 2022 14:42:08 +0000
ROA not before:           Fri 12 Aug 2022 14:42:08 +0000
ROA not after:            Sat 17 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        68.66.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e4:03:db:ee:49:4e:60:f6:33:3a:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 12 14:42:08 2022 GMT
            Not After : Sep 17 04:00:00 2022 GMT
        Subject: CN=c75f4176-1ab9-45ea-9102-1b22f7cdbde7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:22:82:3c:89:1d:17:14:f5:e0:d8:5d:10:72:
                    63:35:d2:8b:69:3f:2b:36:63:28:6e:ad:4e:e8:b2:
                    36:96:ba:57:09:fe:24:56:e6:3d:f4:36:0c:0b:f5:
                    46:4b:21:7a:1f:14:b7:c7:fe:8e:47:85:86:aa:29:
                    a3:0b:45:21:0e:77:9b:5a:e2:4b:ce:82:cc:2c:c4:
                    b8:82:a2:ec:5d:61:db:19:f6:7c:f8:d2:e4:e9:83:
                    ee:c8:26:d0:62:45:4f:ac:75:16:2f:dd:98:2f:04:
                    24:dc:e9:44:55:dc:a8:30:aa:d5:ab:ae:4a:1a:ac:
                    45:fa:25:c4:67:62:95:46:5e:21:ef:b0:7f:2f:fc:
                    39:2d:16:0e:26:02:2a:36:51:13:6b:af:6d:68:dd:
                    3d:9f:69:fa:71:32:ed:22:ed:5c:3f:8f:c8:0a:ba:
                    37:eb:9a:5b:0c:0a:46:9f:db:10:9d:9f:de:14:d7:
                    a7:a6:8e:65:12:d1:00:0f:02:61:0e:3d:9b:a3:ce:
                    9b:db:4b:c5:2c:d6:6c:22:29:ed:c3:87:8d:70:33:
                    94:34:56:a3:be:fd:5a:25:56:4b:25:2a:e6:ef:1b:
                    e5:27:12:f9:a6:6f:5b:d2:08:db:ad:bb:56:77:e9:
                    63:09:02:ed:d8:13:da:77:43:ff:b0:9f:87:28:20:
                    43:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:06:37:80:F8:72:46:90:27:4C:D2:47:70:33:C9:75:D7:BB:44:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c7e84ecc-e438-387b-a1a5-4e855f605671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.66.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d5:ed:03:a5:83:59:23:d9:06:70:31:20:9d:84:24:c1:af:
         fc:a4:d4:b2:a5:f6:1c:16:65:a0:e3:f9:61:48:15:8e:4c:ca:
         5f:1e:8e:99:4a:dc:ea:9e:d8:f2:af:c4:41:dd:8a:b9:77:82:
         72:22:00:b8:24:a7:e4:95:8a:46:0d:27:aa:3d:f5:2f:c3:b0:
         eb:48:fe:10:e5:52:d8:76:d5:fe:95:7a:49:47:95:ec:3e:b6:
         24:76:92:d7:5b:80:bf:f9:ae:bf:c2:1c:24:0a:d6:98:53:71:
         ce:28:6f:52:76:69:9c:79:36:9a:92:8f:98:c8:b7:7e:d2:f3:
         bf:4e:9b:b6:eb:a3:c6:5a:f4:2f:73:dd:14:4a:c2:7a:21:54:
         d7:2e:93:11:90:b0:d7:8d:8f:7e:71:32:f5:5a:b7:21:60:ab:
         99:f7:51:37:bc:44:d4:1f:8f:0b:ef:a5:d2:73:ce:a4:aa:23:
         d6:47:c7:ee:ce:ce:22:7e:19:04:d9:b5:1f:78:b7:8d:d6:2f:
         67:49:ef:20:11:3a:d2:20:be:a5:b0:8d:3b:cf:9a:7f:83:b9:
         cc:96:5e:1a:23:fa:f8:fa:a9:85:2b:07:e0:83:30:0a:af:d7:
         ee:25:39:10:90:ce:64:1c:a7:53:e6:b4:5e:49:2c:af:f1:7b:
         e6:09:df:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD7kA9vuSU5g9jM6+MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDgxMjE0NDIwOFoXDTIyMDkxNzA0MDAwMFowLzEtMCsGA1UEAxMk
Yzc1ZjQxNzYtMWFiOS00NWVhLTkxMDItMWIyMmY3Y2RiZGU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiKCPIkdFxT14NhdEHJjNdKLaT8rNmMobq1O
6LI2lrpXCf4kVuY99DYMC/VGSyF6HxS3x/6OR4WGqimjC0UhDnebWuJLzoLMLMS4
gqLsXWHbGfZ8+NLk6YPuyCbQYkVPrHUWL92YLwQk3OlEVdyoMKrVq65KGqxF+iXE
Z2KVRl4h77B/L/w5LRYOJgIqNlETa69taN09n2n6cTLtIu1cP4/ICro365pbDApG
n9sQnZ/eFNenpo5lEtEADwJhDj2bo86b20vFLNZsIintw4eNcDOUNFajvv1aJVZL
JSrm7xvlJxL5pm9b0gjbrbtWd+ljCQLt2BPad0P/sJ+HKCBDEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNQGN4D4ckaQJ0zSR3AzyXXXu0QeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYzdlODRlY2MtZTQzOC0z
ODdiLWExYTUtNGU4NTVmNjA1NjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEREJwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEHV7QOlg1kj2QZwMSCdhCTBr/yk1LKl9hwWZaDj+WFIFY5Myl8ejplK
3Oqe2PKvxEHdirl3gnIiALgkp+SVikYNJ6o99S/DsOtI/hDlUth21f6VeklHlew+
tiR2ktdbgL/5rr/CHCQK1phTcc4ob1J2aZx5NpqSj5jIt37S879Om7bro8Za9C9z
3RRKwnohVNcukxGQsNeNj35xMvVatyFgq5n3UTe8RNQfjwvvpdJzzqSqI9ZHx+7O
ziJ+GQTZtR94t43WL2dJ7yAROtIgvqWwjTvPmn+DucyWXhoj+vj6qYUrB+CDMAqv
1+4lORCQzmQcp1PmtF5JLK/xe+YJ3z8=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:51 2025 by rpki-client