Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf81edaf-bc84-362a-9a79-9167566d0491.roa
File:                     cf81edaf-bc84-362a-9a79-9167566d0491.roa (raw, json)
Hash identifier:          RmUlVr8vBxOLmOJn84BQOrcVeetiGHn8WHPdYi6Lgik=
Subject key identifier:   39:B1:6B:68:2A:24:F1:14:17:4C:E8:1F:8E:96:28:D5:51:34:69:0A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840380674F04954A3D3FC9AD580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf81edaf-bc84-362a-9a79-9167566d0491.roa
Signing time:             Mon 12 Dec 2022 12:00:00 +0000
ROA not before:           Mon 12 Dec 2022 12:00:00 +0000
ROA not after:            Tue 17 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        182.29.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:38:06:74:f0:49:54:a3:d3:fc:9a:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 12 12:00:00 2022 GMT
            Not After : Jan 17 05:00:00 2023 GMT
        Subject: CN=89068461-b889-4cb0-9d52-c5ca0bb82318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3a:b5:97:40:a8:b6:78:6c:1f:a4:b9:70:f4:
                    8c:e2:75:05:a6:2b:ab:09:97:fa:b9:04:a3:2f:d2:
                    8e:11:fd:83:95:55:15:9d:ed:ed:8d:80:ab:37:35:
                    56:61:ca:f9:58:b0:32:c3:0f:89:b2:4b:71:ca:6e:
                    2d:81:e3:28:ff:99:3a:f3:65:74:45:b3:76:22:6d:
                    26:b4:94:a9:ec:73:78:3c:91:e8:41:d8:24:39:e4:
                    15:2d:1c:65:fb:d5:7f:f1:8a:2a:41:36:00:ff:9b:
                    55:47:19:5f:2c:c9:17:b8:19:0d:83:27:b8:6a:60:
                    05:e1:d6:e6:65:f7:6f:3f:3c:e0:26:4f:8c:1c:53:
                    37:db:ef:0a:c3:f0:d1:76:5e:c4:86:aa:d0:b4:15:
                    75:68:9d:4c:95:83:c5:14:28:06:ef:11:14:6a:8d:
                    9f:0c:e0:95:31:b4:aa:82:f5:1d:31:9e:f5:89:b6:
                    c0:4c:44:4f:23:b1:f5:4d:38:90:48:61:1b:94:03:
                    3a:f5:46:68:fb:70:14:4b:5a:81:26:81:d9:f2:c6:
                    41:8c:6a:9e:bc:8a:a8:1d:7d:69:13:15:0d:cd:c0:
                    ee:87:85:4c:1e:a5:5c:df:5b:97:17:ab:92:92:e1:
                    26:74:a6:6c:a9:e4:01:22:18:c4:97:a7:b7:46:b9:
                    45:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B1:6B:68:2A:24:F1:14:17:4C:E8:1F:8E:96:28:D5:51:34:69:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf81edaf-bc84-362a-9a79-9167566d0491.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.29.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:0a:bc:7e:c5:42:0a:2a:48:9e:d1:ad:a3:86:7a:78:bd:d3:
         0f:24:3e:24:3d:6e:f4:40:3b:e6:19:04:98:c5:49:bb:88:9d:
         d5:44:62:34:44:e3:05:81:cb:33:95:cc:f9:20:57:7f:70:71:
         91:26:a1:e7:4e:ad:4d:60:d8:dd:8d:cd:5a:21:5c:ad:39:05:
         06:72:27:af:d6:20:07:3b:0a:3a:ac:19:1a:ff:29:bd:ff:4c:
         d2:60:5e:b5:0d:b1:c8:54:3f:4c:1a:bc:54:8d:89:76:28:ac:
         6e:30:f8:01:38:3c:cd:71:71:cc:fa:4d:0c:3d:6e:11:dc:fe:
         fe:a1:80:b6:af:0c:23:55:dc:23:cc:d4:17:d4:e8:cb:62:2c:
         2e:56:7e:64:94:90:1e:d7:6f:44:ee:6f:00:3c:38:c4:d5:f9:
         62:18:ea:37:19:2f:5c:22:20:a6:3c:4b:27:3f:a7:c4:99:a3:
         86:1a:13:92:60:4c:5d:60:1c:f7:01:05:d1:f2:6a:c9:d9:11:
         86:fa:ee:d0:67:bb:af:42:34:aa:e7:56:96:ce:c9:b4:a6:58:
         fb:df:0c:81:48:a9:44:18:be:d8:c3:b0:34:02:a9:ff:3d:02:
         6b:e4:7f:73:18:26:77:1c:26:4e:33:58:29:48:dd:da:fe:8f:
         d7:d1:ea:d7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEA4BnTwSVSj0/ya1YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxMjEyMDAwMFoXDTIzMDExNzA1MDAwMFowLzEtMCsGA1UEAxMk
ODkwNjg0NjEtYjg4OS00Y2IwLTlkNTItYzVjYTBiYjgyMzE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjq1l0CotnhsH6S5cPSM4nUFpiurCZf6uQSj
L9KOEf2DlVUVne3tjYCrNzVWYcr5WLAyww+Jsktxym4tgeMo/5k682V0RbN2Im0m
tJSp7HN4PJHoQdgkOeQVLRxl+9V/8YoqQTYA/5tVRxlfLMkXuBkNgye4amAF4dbm
ZfdvPzzgJk+MHFM32+8Kw/DRdl7EhqrQtBV1aJ1MlYPFFCgG7xEUao2fDOCVMbSq
gvUdMZ71ibbATERPI7H1TTiQSGEblAM69UZo+3AUS1qBJoHZ8sZBjGqevIqoHX1p
ExUNzcDuh4VMHqVc31uXF6uSkuEmdKZsqeQBIhjEl6e3RrlFZwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDmxa2gqJPEUF0zoH46WKNVRNGkKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvY2Y4MWVkYWYtYmM4NC0z
NjJhLTlhNzktOTE2NzU2NmQwNDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAth0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATAq8fsVCCipIntGto4Z6eL3TDyQ+JD1u9EA75hkEmMVJu4id1URiNETj
BYHLM5XM+SBXf3BxkSah506tTWDY3Y3NWiFcrTkFBnInr9YgBzsKOqwZGv8pvf9M
0mBetQ2xyFQ/TBq8VI2JdiisbjD4ATg8zXFxzPpNDD1uEdz+/qGAtq8MI1XcI8zU
F9Toy2IsLlZ+ZJSQHtdvRO5vADw4xNX5YhjqNxkvXCIgpjxLJz+nxJmjhhoTkmBM
XWAc9wEF0fJqydkRhvru0Ge7r0I0qudWls7JtKZY+98MgUipRBi+2MOwNAKp/z0C
a+R/cxgmdxwmTjNYKUjd2v6P19Hq1w==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:55 2025 by rpki-client