Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf353d1a-d9f6-3abc-b956-2038242750dc.roa
File:                     cf353d1a-d9f6-3abc-b956-2038242750dc.roa (raw, json)
Hash identifier:          n2AvOegcxwk5KuCvfZjdWaEpjY1DBSoAf0wDYlRYgOU=
Subject key identifier:   3F:18:82:23:D5:A5:CB:27:EA:90:17:1B:B7:9D:96:FC:F4:9A:14:D4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E2D5C7C9488798C3AB4465300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf353d1a-d9f6-3abc-b956-2038242750dc.roa
Signing time:             Wed 08 Jun 2022 12:00:00 +0000
ROA not before:           Wed 08 Jun 2022 12:00:00 +0000
ROA not after:            Thu 14 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        13.184.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:2d:5c:7c:94:88:79:8c:3a:b4:46:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun  8 12:00:00 2022 GMT
            Not After : Jul 14 04:00:00 2022 GMT
        Subject: CN=843a3cbe-e72a-4630-b412-8bf9dab5c2a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:1a:9b:86:5c:a1:cf:5b:ca:19:95:64:33:9d:
                    3b:3e:45:f7:3c:5b:cc:ff:dc:b4:2d:e3:68:7a:25:
                    ed:02:38:ef:23:3f:36:0e:84:c6:28:65:ea:4d:3c:
                    6e:e2:6b:e5:f1:0c:9f:91:3a:7f:a2:7f:0e:18:25:
                    6e:10:07:ff:1a:58:1d:9e:29:16:93:ad:be:3d:4b:
                    86:1f:7a:72:d0:70:02:21:11:39:5f:7b:2d:83:a1:
                    25:e7:bc:6e:eb:e4:b1:93:6f:10:2b:b2:3d:89:14:
                    b4:61:c8:ee:69:ed:2d:8d:e0:f2:95:ea:ce:d2:04:
                    20:4a:e0:e6:79:5d:e1:ac:48:b1:67:f6:a7:2e:94:
                    b3:fa:b2:29:7c:81:96:56:93:95:d6:72:3b:24:a3:
                    0c:6b:34:9c:8a:86:bd:12:42:26:3b:42:fe:6a:46:
                    ec:0d:b9:55:51:6e:e9:3a:31:bb:f4:48:b5:55:be:
                    6a:28:18:1d:5e:d3:64:2e:38:22:3a:ba:7b:42:36:
                    dc:98:a6:9f:36:74:19:93:51:52:d4:55:d0:31:30:
                    07:47:f9:3f:2e:0a:be:01:11:a2:9f:4e:bb:e5:c1:
                    f9:90:69:07:3d:96:94:61:e4:72:48:88:9b:cc:30:
                    50:37:cc:bc:67:40:ae:3c:7f:8e:5f:a5:e6:4e:27:
                    77:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:18:82:23:D5:A5:CB:27:EA:90:17:1B:B7:9D:96:FC:F4:9A:14:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf353d1a-d9f6-3abc-b956-2038242750dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.184.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:4f:96:f9:06:9a:77:67:f7:1f:9d:05:da:a1:5a:4a:5a:a9:
         e1:44:60:54:9d:02:4c:61:e0:3b:28:73:12:e6:8b:33:71:d8:
         09:1f:37:50:79:c4:25:a7:41:90:90:7c:04:21:54:9e:4e:a5:
         3a:98:ac:1d:65:8a:cb:5c:d2:57:5f:52:2f:72:e5:25:f8:15:
         29:bb:24:76:dc:07:7d:80:9c:20:37:9e:c5:17:a9:82:6f:44:
         86:1d:df:62:b5:c2:b6:9e:59:0e:30:82:a0:cf:5c:d0:00:78:
         e1:87:dd:3a:18:b2:bc:79:72:fb:76:0a:89:c7:c9:be:03:b1:
         66:45:26:b7:b0:78:a5:81:cb:0a:2b:4a:89:e9:7d:a6:73:e7:
         e8:b5:9b:0a:1c:58:1f:e2:0b:fd:34:72:0d:26:b5:ba:ee:66:
         d8:df:44:55:17:cb:12:34:92:84:bd:1d:0a:c8:24:68:fa:f1:
         52:b4:f2:b7:1c:d9:72:61:8e:66:f5:8d:a1:04:d0:bd:fa:d1:
         83:ec:2d:d3:ad:37:78:3c:25:db:63:34:24:74:45:4f:6f:fa:
         e6:f7:ea:b4:52:b4:69:85:c4:53:f8:af:a5:2f:5c:4a:2f:43:
         cd:45:a0:19:1d:82:d1:15:c4:45:3b:5e:dd:0c:3f:1b:b4:d3:
         cc:8f:79:f5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4tXHyUiHmMOrRGUwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYwODEyMDAwMFoXDTIyMDcxNDA0MDAwMFowLzEtMCsGA1UEAxMk
ODQzYTNjYmUtZTcyYS00NjMwLWI0MTItOGJmOWRhYjVjMmEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+xqbhlyhz1vKGZVkM507PkX3PFvM/9y0LeNo
eiXtAjjvIz82DoTGKGXqTTxu4mvl8QyfkTp/on8OGCVuEAf/GlgdnikWk62+PUuG
H3py0HACIRE5X3stg6El57xu6+Sxk28QK7I9iRS0Ycjuae0tjeDylerO0gQgSuDm
eV3hrEixZ/anLpSz+rIpfIGWVpOV1nI7JKMMazScioa9EkImO0L+akbsDblVUW7p
OjG79Ei1Vb5qKBgdXtNkLjgiOrp7QjbcmKafNnQZk1FS1FXQMTAHR/k/Lgq+ARGi
n0675cH5kGkHPZaUYeRySIibzDBQN8y8Z0CuPH+OX6XmTid3fQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFD8YgiPVpcsn6pAXG7edlvz0mhTUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvY2YzNTNkMWEtZDlmNi0z
YWJjLWI5NTYtMjAzODI0Mjc1MGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDDbgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAi0+W+Qaad2f3H50F2qFaSlqp4URgVJ0CTGHgOyhzEuaLM3HYCR83UHnE
JadBkJB8BCFUnk6lOpisHWWKy1zSV19SL3LlJfgVKbskdtwHfYCcIDeexRepgm9E
hh3fYrXCtp5ZDjCCoM9c0AB44YfdOhiyvHly+3YKicfJvgOxZkUmt7B4pYHLCitK
iel9pnPn6LWbChxYH+IL/TRyDSa1uu5m2N9EVRfLEjSShL0dCsgkaPrxUrTytxzZ
cmGOZvWNoQTQvfrRg+wt0603eDwl22M0JHRFT2/65vfqtFK0aYXEU/ivpS9cSi9D
zUWgGR2C0RXERTte3Qw/G7TTzI959Q==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:57 2025 by rpki-client