Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c9bc4454-97a9-3d97-8456-d9db3c1c4fef.roa
File:                     c9bc4454-97a9-3d97-8456-d9db3c1c4fef.roa (raw, json)
Hash identifier:          /TBIkGC3JGiX7Afef7DAS+UY6rEbFVUEmicURnepS7A=
Subject key identifier:   38:E6:2A:2E:DB:FE:EE:6F:07:9C:63:D3:52:97:EF:35:A6:08:64:D2
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D3D6AC033BBC1946D43D37180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c9bc4454-97a9-3d97-8456-d9db3c1c4fef.roa
Signing time:             Tue 15 Mar 2022 04:00:00 +0000
ROA not before:           Tue 15 Mar 2022 04:00:00 +0000
ROA not after:            Tue 19 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.180.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:3d:6a:c0:33:bb:c1:94:6d:43:d3:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 15 04:00:00 2022 GMT
            Not After : Apr 19 04:00:00 2022 GMT
        Subject: CN=b73cab11-62a5-43f0-b59f-c261c1c48659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:46:d1:a6:54:9a:f8:07:03:ed:49:98:43:cd:
                    9d:a7:3c:91:3a:b9:83:e4:3f:26:8d:4d:64:b2:8b:
                    2a:d0:eb:aa:4a:33:de:09:4b:dc:9c:f0:bd:e1:85:
                    b9:91:9d:30:e0:22:9f:60:4f:09:63:6b:84:ca:60:
                    cf:43:b7:e1:2c:1c:3a:4a:b9:0c:17:31:f2:06:f9:
                    f5:6d:fa:38:0b:e8:fb:57:68:3b:97:3f:52:49:37:
                    c0:7c:09:b5:35:0b:f1:e6:a6:fb:92:e4:71:91:6b:
                    b5:67:e6:4f:f6:90:17:0a:59:66:33:6c:87:ea:61:
                    70:26:60:0e:d6:69:3b:bd:da:97:15:0a:aa:51:48:
                    2a:5a:52:0c:af:fc:6c:57:df:49:2f:5e:59:74:b1:
                    5f:cc:3b:7f:9c:1c:c8:b0:9b:d8:f9:b3:f3:43:4e:
                    aa:67:6b:7b:7f:00:67:04:e6:a6:6e:fc:fc:63:57:
                    b6:d0:45:a3:ab:90:c6:13:05:81:94:4d:98:bd:3a:
                    da:0f:b2:82:2c:28:ad:74:1f:8d:36:97:6b:69:97:
                    42:dc:12:fd:fd:eb:90:a0:e3:83:ec:49:a0:1c:ec:
                    82:1c:31:8a:20:1a:bf:4e:a0:1c:e6:ea:1c:6a:c0:
                    e2:6f:33:df:31:d1:fb:ea:0e:a7:bf:2a:bc:c9:72:
                    50:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E6:2A:2E:DB:FE:EE:6F:07:9C:63:D3:52:97:EF:35:A6:08:64:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c9bc4454-97a9-3d97-8456-d9db3c1c4fef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.180.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:e8:fa:17:ff:0f:36:79:6d:f8:d1:68:31:83:f5:29:f8:b9:
         35:6c:f3:a0:35:cc:40:df:02:11:2a:65:92:5a:f3:48:46:6b:
         9f:0b:bc:de:4e:15:cf:90:7e:be:ce:ec:d3:fc:5f:cb:e6:4e:
         37:2d:39:34:3c:ea:6f:f4:74:9b:ce:14:1b:85:c8:11:ef:21:
         07:b0:95:0a:b8:29:65:95:06:75:50:90:cf:09:85:22:7b:d9:
         7e:4c:1f:d1:19:3c:ed:bd:fd:d2:1f:7e:bd:fd:d7:5d:8f:61:
         16:14:0e:5b:a7:9b:b6:84:98:e9:65:1a:b9:cd:87:fb:30:77:
         42:85:48:79:7e:6a:99:b0:d2:2e:6d:12:f0:44:13:0c:71:e7:
         65:b9:dc:90:be:c7:fa:85:bf:e0:05:34:01:36:a0:a0:9f:7f:
         81:23:77:77:86:2f:7d:d8:e1:66:e8:2d:63:13:60:e7:f1:2a:
         7d:55:83:86:61:40:1b:6b:c1:1f:43:61:99:cb:32:4b:07:c1:
         10:c2:73:86:0b:59:4b:1d:bc:27:9f:f6:2e:71:73:ba:7f:ef:
         f1:cc:dc:a3:25:c5:84:19:57:20:bc:04:7b:09:b1:3e:27:98:
         fa:6f:55:6e:1c:85:97:35:99:3e:6d:23:33:5b:1a:d8:cb:f6:
         da:27:54:2f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD09asAzu8GUbUPTcYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMxNTA0MDAwMFoXDTIyMDQxOTA0MDAwMFowLzEtMCsGA1UEAxMk
YjczY2FiMTEtNjJhNS00M2YwLWI1OWYtYzI2MWMxYzQ4NjU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0bRplSa+AcD7UmYQ82dpzyROrmD5D8mjU1k
sosq0OuqSjPeCUvcnPC94YW5kZ0w4CKfYE8JY2uEymDPQ7fhLBw6SrkMFzHyBvn1
bfo4C+j7V2g7lz9SSTfAfAm1NQvx5qb7kuRxkWu1Z+ZP9pAXCllmM2yH6mFwJmAO
1mk7vdqXFQqqUUgqWlIMr/xsV99JL15ZdLFfzDt/nBzIsJvY+bPzQ06qZ2t7fwBn
BOambvz8Y1e20EWjq5DGEwWBlE2YvTraD7KCLCitdB+NNpdraZdC3BL9/euQoOOD
7EmgHOyCHDGKIBq/TqAc5uocasDibzPfMdH76g6nvyq8yXJQjwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDjmKi7b/u5vB5xj01KX7zWmCGTSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYzliYzQ0NTQtOTdhOS0z
ZDk3LTg0NTYtZDlkYjNjMWM0ZmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAELQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmOj6F/8PNnlt+NFoMYP1Kfi5NWzzoDXMQN8CESplklrzSEZrnwu83k4V
z5B+vs7s0/xfy+ZONy05NDzqb/R0m84UG4XIEe8hB7CVCrgpZZUGdVCQzwmFInvZ
fkwf0Rk87b390h9+vf3XXY9hFhQOW6ebtoSY6WUauc2H+zB3QoVIeX5qmbDSLm0S
8EQTDHHnZbnckL7H+oW/4AU0ATagoJ9/gSN3d4YvfdjhZugtYxNg5/EqfVWDhmFA
G2vBH0NhmcsySwfBEMJzhgtZSx28J5/2LnFzun/v8czcoyXFhBlXILwEewmxPieY
+m9VbhyFlzWZPm0jM1sa2Mv22idULw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:53:20 2025 by rpki-client