Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c88ef7ce-bbc6-3f94-bc6d-07bf062633d8.roa
File:                     c88ef7ce-bbc6-3f94-bc6d-07bf062633d8.roa (raw, json)
Hash identifier:          hnAdo9PCBi7OOGY6yL5sgEMgu3BMvjLPK49XacH+DDg=
Subject key identifier:   33:B2:D6:20:B0:EF:B2:B5:96:4A:01:70:3C:8B:23:A6:B0:0A:BB:9A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E2299B3E2C56884A593F62B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c88ef7ce-bbc6-3f94-bc6d-07bf062633d8.roa
Signing time:             Sat 04 Jun 2022 12:00:00 +0000
ROA not before:           Sat 04 Jun 2022 12:00:00 +0000
ROA not after:            Sun 10 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.159.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:22:99:b3:e2:c5:68:84:a5:93:f6:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun  4 12:00:00 2022 GMT
            Not After : Jul 10 04:00:00 2022 GMT
        Subject: CN=e14045fe-209d-471b-8036-bc94ea2c8ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8e:d6:f8:d8:ee:6c:86:61:d0:9b:50:fb:e3:
                    c2:e8:fa:9d:24:d9:31:8e:41:ae:e8:76:a4:56:70:
                    f0:ee:e9:ae:ac:44:7a:b3:a5:79:c8:96:19:35:12:
                    e3:51:c2:38:1a:c9:d5:49:1c:00:aa:81:b6:40:dc:
                    ba:d5:19:ce:08:cb:0b:ef:20:cd:38:12:cc:7d:dc:
                    ce:61:07:28:3c:c8:ce:21:25:11:53:70:cf:da:80:
                    a3:84:a8:db:63:76:a4:f0:e6:f4:82:9a:82:46:6a:
                    14:9b:86:c4:85:15:49:c5:ac:b8:66:9e:9e:c0:80:
                    38:2d:9e:03:69:db:73:e2:c4:a2:2f:dd:32:f1:fe:
                    70:0d:e3:b0:e4:bf:28:0c:8f:71:61:4a:1a:74:df:
                    ff:e2:bb:d3:13:a1:e2:2f:77:ad:9a:d2:fb:b4:04:
                    65:28:4c:d6:d4:ce:96:47:5a:78:65:62:88:f1:90:
                    06:f4:9f:f7:7a:43:b3:72:b5:c1:db:d8:94:7a:76:
                    95:c8:d2:35:02:df:9f:f7:69:df:85:fe:96:ba:0b:
                    e2:f3:8d:2c:18:94:65:14:41:0b:b4:13:5a:bd:cb:
                    46:ec:09:c4:ff:7d:27:51:c8:39:ae:8c:3e:ff:90:
                    d9:c7:46:90:06:dc:4f:32:e7:80:0f:7d:84:3f:f6:
                    f0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B2:D6:20:B0:EF:B2:B5:96:4A:01:70:3C:8B:23:A6:B0:0A:BB:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c88ef7ce-bbc6-3f94-bc6d-07bf062633d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.159.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:34:cb:45:9d:6e:bc:6f:98:06:b9:47:11:3c:84:1a:92:78:
         23:3b:ff:e9:7c:41:39:f3:95:ec:5c:cb:44:e1:d8:9f:d4:74:
         ce:55:f2:5e:c5:d4:e0:34:5b:82:62:31:59:76:54:b6:cd:7e:
         a0:83:17:b3:a0:2e:18:a0:e9:7a:5e:7a:d4:25:7d:c2:ed:6f:
         18:cb:fc:f5:78:30:48:71:4b:1a:a8:8b:09:a2:45:58:9b:01:
         9d:b2:6b:b1:f9:4b:d6:0b:9b:6c:de:33:88:75:ca:74:d7:0f:
         70:bb:06:31:94:f1:bb:8b:d9:91:82:f1:b2:af:ea:e3:d1:37:
         6f:5e:b8:b2:96:c3:f0:fa:6e:8f:17:a4:cf:8b:a7:9d:41:9a:
         ac:38:3b:3d:85:e7:7b:5a:d7:17:81:10:ec:f5:80:47:29:7a:
         4e:5f:47:05:c0:b3:0b:3e:b3:24:67:a3:7c:64:de:ae:3a:f7:
         e9:2f:0b:dd:1d:20:ff:db:eb:31:16:41:40:32:38:9d:05:5f:
         b1:ed:9b:aa:68:b0:50:af:e2:89:52:00:cb:2a:a6:a7:68:0c:
         b3:ae:ce:ee:7f:a1:e2:5d:31:6e:45:ce:c3:2e:72:f8:7c:da:
         f2:0e:0e:72:d6:de:e0:ad:7b:5d:8e:8e:9d:2a:96:a8:e5:db:
         82:35:9d:11
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4imbPixWiEpZP2K4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYwNDEyMDAwMFoXDTIyMDcxMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZTE0MDQ1ZmUtMjA5ZC00NzFiLTgwMzYtYmM5NGVhMmM4ZWEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj47W+NjubIZh0JtQ++PC6PqdJNkxjkGu6Hak
VnDw7umurER6s6V5yJYZNRLjUcI4GsnVSRwAqoG2QNy61RnOCMsL7yDNOBLMfdzO
YQcoPMjOISURU3DP2oCjhKjbY3ak8Ob0gpqCRmoUm4bEhRVJxay4Zp6ewIA4LZ4D
adtz4sSiL90y8f5wDeOw5L8oDI9xYUoadN//4rvTE6HiL3etmtL7tARlKEzW1M6W
R1p4ZWKI8ZAG9J/3ekOzcrXB29iUenaVyNI1At+f92nfhf6Wugvi840sGJRlFEEL
tBNavctG7AnE/30nUcg5row+/5DZx0aQBtxPMueAD32EP/bw5wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDOy1iCw77K1lkoBcDyLI6awCruaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYzg4ZWY3Y2UtYmJjNi0z
Zjk0LWJjNmQtMDdiZjA2MjYzM2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEJ8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZDTLRZ1uvG+YBrlHETyEGpJ4Izv/6XxBOfOV7FzLROHYn9R0zlXyXsXU
4DRbgmIxWXZUts1+oIMXs6AuGKDpel561CV9wu1vGMv89XgwSHFLGqiLCaJFWJsB
nbJrsflL1gubbN4ziHXKdNcPcLsGMZTxu4vZkYLxsq/q49E3b164spbD8Ppujxek
z4unnUGarDg7PYXne1rXF4EQ7PWARyl6Tl9HBcCzCz6zJGejfGTerjr36S8L3R0g
/9vrMRZBQDI4nQVfse2bqmiwUK/iiVIAyyqmp2gMs67O7n+h4l0xbkXOwy5y+Hza
8g4Octbe4K17XY6OnSqWqOXbgjWdEQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:11 2025 by rpki-client