Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cde5a0f3-d435-3d40-8bbb-3e1e5e632cfb.roa
File:                     cde5a0f3-d435-3d40-8bbb-3e1e5e632cfb.roa (raw, json)
Hash identifier:          idgilLGTLbX6PrM5F8naU4eIY+AHL9xh8lVoTweCQRI=
Subject key identifier:   91:C4:F2:74:1C:96:BD:85:E0:B7:77:C8:E6:65:9D:30:05:73:68:F6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FCDF839ACA95398FA1E11C600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cde5a0f3-d435-3d40-8bbb-3e1e5e632cfb.roa
Signing time:             Fri 04 Nov 2022 12:00:00 +0000
ROA not before:           Fri 04 Nov 2022 12:00:00 +0000
ROA not after:            Sat 10 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        184.72.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cd:f8:39:ac:a9:53:98:fa:1e:11:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  4 12:00:00 2022 GMT
            Not After : Dec 10 05:00:00 2022 GMT
        Subject: CN=a5de2cc8-e57e-4fd4-8199-04ddf1f84d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:6f:fa:56:54:3e:1b:18:b9:fa:ed:46:61:fc:
                    47:4b:cc:f0:57:76:5a:af:8a:78:2c:04:05:82:ba:
                    93:f0:aa:14:77:80:8d:02:cd:9b:3e:6e:81:e9:b6:
                    f6:1d:80:51:9a:dd:7d:3c:c4:cf:fc:28:ac:55:99:
                    df:9f:a0:32:75:92:09:30:cd:4e:6a:ee:06:07:61:
                    63:8b:44:5c:ab:44:0f:fc:86:4f:a1:72:b6:a4:74:
                    7a:f0:e0:42:9c:6d:cc:8b:20:89:66:76:e3:45:8f:
                    d4:35:44:21:6c:dd:65:c2:61:bd:c7:cf:ba:9e:10:
                    85:c4:c1:5b:a5:8c:f8:23:4c:1a:57:b2:e9:81:5d:
                    97:09:0e:3a:91:d7:0f:a9:9a:1d:a0:32:08:19:0c:
                    5c:e2:e5:70:35:61:7d:05:49:f9:3f:e7:b9:a6:6b:
                    05:2e:97:a9:4c:82:e2:c6:97:02:46:ff:a6:03:83:
                    36:f1:d5:f7:b9:a5:42:d0:4d:18:da:81:03:a5:c1:
                    6a:06:3e:07:84:df:45:58:30:88:16:6a:97:f7:47:
                    93:92:b5:20:cf:5a:43:61:48:68:a8:02:31:a4:0b:
                    23:b6:75:c9:16:7a:e8:de:c2:61:f0:60:25:c9:a5:
                    59:f7:50:56:8e:be:de:8e:7a:ef:c0:b3:ea:1b:7d:
                    b2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C4:F2:74:1C:96:BD:85:E0:B7:77:C8:E6:65:9D:30:05:73:68:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cde5a0f3-d435-3d40-8bbb-3e1e5e632cfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.72.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:9a:3e:00:04:6d:0b:6c:49:1b:9e:91:3a:78:f0:cf:d4:40:
         47:37:48:b7:62:3c:b4:75:b2:49:05:b9:db:df:b6:6e:f0:26:
         00:e5:93:ae:52:bc:d0:1c:0a:3f:81:f6:f6:ef:2d:1f:01:3a:
         43:e9:fc:9f:6f:61:79:30:a8:08:1b:85:ab:bf:32:f0:db:57:
         88:4b:6f:9d:e6:9a:58:65:34:f0:aa:2e:80:da:ff:ea:b3:4f:
         18:4b:5a:aa:f6:3e:d5:81:dc:a7:0b:e0:ae:dd:98:05:80:af:
         b1:31:ef:13:5d:b8:c1:cd:d6:60:5f:7c:51:91:f7:99:65:b5:
         68:f4:16:80:0d:36:3a:db:0c:ce:3a:7e:80:dc:36:6d:9e:e4:
         a8:34:85:52:c4:63:7f:91:15:b6:53:be:34:07:63:4f:27:bc:
         d0:bf:75:bb:50:7a:ba:52:09:7f:29:6f:fa:83:c5:2c:3d:4f:
         1f:6d:bb:e0:74:82:a0:aa:e4:c8:77:f4:39:1d:20:ce:c6:ee:
         a2:af:25:a1:d3:8d:df:eb:60:12:c0:e9:7f:b4:b0:2f:0c:a2:
         d1:7d:79:8b:5f:81:2e:b7:16:c3:4e:95:85:c6:b7:24:57:49:
         09:5f:1a:ce:ce:79:59:9a:ed:38:f1:76:5a:c4:5f:45:8e:9e:
         f6:3c:36:86
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/N+DmsqVOY+h4RxgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEwNDEyMDAwMFoXDTIyMTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
YTVkZTJjYzgtZTU3ZS00ZmQ0LTgxOTktMDRkZGYxZjg0ZDdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+m/6VlQ+Gxi5+u1GYfxHS8zwV3Zar4p4LAQF
grqT8KoUd4CNAs2bPm6B6bb2HYBRmt19PMTP/CisVZnfn6AydZIJMM1Oau4GB2Fj
i0Rcq0QP/IZPoXK2pHR68OBCnG3MiyCJZnbjRY/UNUQhbN1lwmG9x8+6nhCFxMFb
pYz4I0waV7LpgV2XCQ46kdcPqZodoDIIGQxc4uVwNWF9BUn5P+e5pmsFLpepTILi
xpcCRv+mA4M28dX3uaVC0E0Y2oEDpcFqBj4HhN9FWDCIFmqX90eTkrUgz1pDYUho
qAIxpAsjtnXJFnro3sJh8GAlyaVZ91BWjr7ejnrvwLPqG32y9QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJHE8nQclr2F4Ld3yOZlnTAFc2j2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvY2RlNWEwZjMtZDQzNS0z
ZDQwLThiYmItM2UxZTVlNjMyY2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBuEgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAX5o+AARtC2xJG56ROnjwz9RARzdIt2I8tHWySQW529+2bvAmAOWTrlK8
0BwKP4H29u8tHwE6Q+n8n29heTCoCBuFq78y8NtXiEtvneaaWGU08KougNr/6rNP
GEtaqvY+1YHcpwvgrt2YBYCvsTHvE124wc3WYF98UZH3mWW1aPQWgA02OtsMzjp+
gNw2bZ7kqDSFUsRjf5EVtlO+NAdjTye80L91u1B6ulIJfylv+oPFLD1PH2274HSC
oKrkyHf0OR0gzsbuoq8lodON3+tgEsDpf7SwLwyi0X15i1+BLrcWw06Vhca3JFdJ
CV8azs55WZrtOPF2WsRfRY6e9jw2hg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:08 2025 by rpki-client