Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cfa044ae-2b13-3462-8c44-c9982a73fa37.roa
File:                     cfa044ae-2b13-3462-8c44-c9982a73fa37.roa (raw, json)
Hash identifier:          bFSXa3zyUGLoBdNZXuoG4dlcOLJ4D13b5djkGVJSXmM=
Subject key identifier:   AF:B4:CF:36:D9:A3:B5:C8:40:1C:EA:A2:7E:5B:4F:CC:24:A6:84:9D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF57D28ACD3005A097696E380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cfa044ae-2b13-3462-8c44-c9982a73fa37.roa
Signing time:             Fri 18 Nov 2022 12:00:00 +0000
ROA not before:           Fri 18 Nov 2022 12:00:00 +0000
ROA not after:            Sat 24 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        76.238.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f5:7d:28:ac:d3:00:5a:09:76:96:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 18 12:00:00 2022 GMT
            Not After : Dec 24 05:00:00 2022 GMT
        Subject: CN=a16978ec-9465-4e24-b324-e9b655da1c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c4:29:11:ec:76:d0:3f:66:e8:a0:9b:f8:e5:
                    e8:f9:5d:cf:fc:09:7a:80:a9:09:fe:c9:9b:a0:4b:
                    a5:08:72:d7:c0:f1:20:fa:77:2f:bb:44:d4:87:11:
                    e0:99:b5:b7:42:77:62:e5:dd:72:c7:7f:83:28:83:
                    f0:a5:f6:c7:d0:59:48:5c:4e:a9:02:28:9f:07:44:
                    57:ac:94:70:a3:d2:1e:a8:30:c8:06:d3:be:65:88:
                    ed:30:a6:ce:05:9e:b8:7a:81:d5:11:1b:22:ae:b0:
                    62:c5:8e:12:1c:69:7e:d2:21:28:85:95:a8:4b:31:
                    e6:29:7f:2b:ed:70:59:b4:96:21:8f:57:b7:6a:a3:
                    de:ff:45:c8:d4:76:9f:cc:b3:17:ec:e1:30:1b:9d:
                    8e:5f:0a:4d:25:f6:3c:8b:26:19:57:19:21:26:87:
                    d0:87:3a:b9:68:69:ea:14:ce:18:93:1b:77:7b:02:
                    3c:c9:4c:33:0a:7c:64:a6:ee:e7:6e:9d:d7:71:f1:
                    cd:87:16:bd:93:96:d5:c0:d5:51:9a:c0:3c:c5:ed:
                    88:3b:42:74:06:be:1d:f0:b7:c3:c4:9c:d3:1c:41:
                    67:3b:19:da:75:cb:88:0e:04:52:d4:7d:54:9b:f5:
                    d8:71:53:e5:be:85:ed:4c:07:d9:e6:46:97:68:a0:
                    04:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B4:CF:36:D9:A3:B5:C8:40:1C:EA:A2:7E:5B:4F:CC:24:A6:84:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cfa044ae-2b13-3462-8c44-c9982a73fa37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.238.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:1c:8f:e3:31:1c:aa:89:f2:31:c2:5d:a5:78:12:29:90:c5:
         19:51:38:38:fc:42:57:f6:03:7a:c3:7c:9d:2c:3f:47:a2:68:
         92:67:49:0e:7a:cc:4a:a1:f6:db:4d:69:8d:db:28:ae:44:cb:
         0c:d1:43:ae:16:9b:61:47:37:7f:4b:17:1e:da:1c:18:7c:5c:
         0d:cd:ab:a9:4f:3b:cb:e2:a9:25:0b:d6:1c:f5:7e:8f:da:5a:
         f5:b8:dd:7c:07:ba:5e:9a:4c:9f:54:e5:88:23:6d:3c:15:80:
         5e:ec:dc:cc:1c:c7:eb:d0:08:3f:50:4f:30:cc:0b:b0:35:2f:
         41:56:f6:cf:67:cc:7f:75:54:6d:0f:45:6d:ce:56:46:1d:bb:
         77:77:69:96:ca:f6:73:33:3b:bb:eb:1b:56:4e:c2:d2:21:64:
         46:ed:1d:f8:69:18:e8:5c:3a:97:79:de:77:fa:0f:b1:12:41:
         af:4d:b2:c7:5f:f1:6c:51:7c:20:90:75:e7:72:87:9d:b0:62:
         8f:5c:22:ba:87:0b:b7:89:83:be:0f:ba:70:8e:82:0d:8f:67:
         47:ab:d9:58:8f:91:51:37:b8:ef:fb:d7:c2:d3:6d:98:ed:a9:
         37:7c:b7:b8:7b:40:b5:81:10:45:95:64:a2:0d:d9:aa:f5:f5:
         14:36:d8:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD/1fSis0wBaCXaW44AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTExODEyMDAwMFoXDTIyMTIyNDA1MDAwMFowLzEtMCsGA1UEAxMk
YTE2OTc4ZWMtOTQ2NS00ZTI0LWIzMjQtZTliNjU1ZGExYzk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsQpEex20D9m6KCb+OXo+V3P/Al6gKkJ/smb
oEulCHLXwPEg+ncvu0TUhxHgmbW3Qndi5d1yx3+DKIPwpfbH0FlIXE6pAiifB0RX
rJRwo9IeqDDIBtO+ZYjtMKbOBZ64eoHVERsirrBixY4SHGl+0iEohZWoSzHmKX8r
7XBZtJYhj1e3aqPe/0XI1HafzLMX7OEwG52OXwpNJfY8iyYZVxkhJofQhzq5aGnq
FM4Ykxt3ewI8yUwzCnxkpu7nbp3XcfHNhxa9k5bVwNVRmsA8xe2IO0J0Br4d8LfD
xJzTHEFnOxnadcuIDgRS1H1Um/XYcVPlvoXtTAfZ5kaXaKAEowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK+0zzbZo7XIQBzqon5bT8wkpoSdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvY2ZhMDQ0YWUtMmIxMy0z
NDYyLThjNDQtYzk5ODJhNzNmYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGTO4AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADQcj+MxHKqJ8jHCXaV4EimQxRlRODj8Qlf2A3rDfJ0sP0eiaJJnSQ56
zEqh9ttNaY3bKK5EywzRQ64Wm2FHN39LFx7aHBh8XA3Nq6lPO8viqSUL1hz1fo/a
WvW43XwHul6aTJ9U5YgjbTwVgF7s3Mwcx+vQCD9QTzDMC7A1L0FW9s9nzH91VG0P
RW3OVkYdu3d3aZbK9nMzO7vrG1ZOwtIhZEbtHfhpGOhcOpd53nf6D7ESQa9Nssdf
8WxRfCCQdedyh52wYo9cIrqHC7eJg74PunCOgg2PZ0er2ViPkVE3uO/718LTbZjt
qTd8t7h7QLWBEEWVZKIN2ar19RQ22Dg=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:01 2025 by rpki-client