Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d3d149e7-be5e-374e-b114-5dc63495bfd8.roa
File:                     d3d149e7-be5e-374e-b114-5dc63495bfd8.roa (raw, json)
Hash identifier:          oonWn+z4bP4MCSy3MSAinOZUIxVIlA7Usq3M1M2fdRQ=
Subject key identifier:   71:51:5F:A7:8F:8E:23:09:44:F5:1C:DC:5D:3D:4B:FF:68:95:3D:80
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FB1E7E06D2A02C58AA5619400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d3d149e7-be5e-374e-b114-5dc63495bfd8.roa
Signing time:             Tue 25 Oct 2022 12:00:00 +0000
ROA not before:           Tue 25 Oct 2022 12:00:00 +0000
ROA not after:            Wed 30 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        56.184.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b1:e7:e0:6d:2a:02:c5:8a:a5:61:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 25 12:00:00 2022 GMT
            Not After : Nov 30 05:00:00 2022 GMT
        Subject: CN=797558d0-d9fa-4d85-8c72-71d33c333b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b5:81:26:c1:35:c8:2b:98:e1:f5:6f:82:06:
                    b8:48:21:bd:f1:3e:41:08:d3:2d:fc:13:8b:7e:e7:
                    33:04:3a:64:d0:ec:17:2d:bd:39:f4:e2:ef:a5:87:
                    c3:dd:ed:01:e4:0d:38:c9:53:c8:44:66:c3:42:da:
                    b7:d5:0c:d0:5e:a1:47:bf:bc:85:e6:ae:45:14:95:
                    5c:64:e5:75:34:ac:d3:39:7f:9c:ab:17:a5:24:71:
                    06:2f:74:9b:a2:60:45:da:e4:e8:45:58:dd:17:62:
                    4a:70:0a:f9:80:ed:da:5b:12:b5:f1:b8:a4:02:27:
                    fa:fe:11:e1:7c:db:d2:7a:97:97:0f:65:18:03:b4:
                    44:2e:ff:a7:14:85:8a:94:aa:e9:e1:85:29:9f:2a:
                    ab:db:e2:89:18:16:26:b6:b3:ff:c2:c1:7c:8b:29:
                    5d:8a:82:b5:21:f9:11:ed:77:40:03:d6:81:9c:c4:
                    77:7a:fc:f9:7d:9b:08:da:1c:9f:22:48:d3:b4:67:
                    20:5c:59:eb:cb:23:bb:2f:77:6f:75:a8:d4:01:ed:
                    b7:70:9a:3e:a8:51:38:09:e8:63:f0:51:da:9e:4b:
                    86:87:60:f7:f0:a7:a5:66:13:70:ec:cb:b3:d3:60:
                    ce:4d:96:f1:d6:04:1a:d8:bb:cc:53:8e:ba:0d:e1:
                    a2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:51:5F:A7:8F:8E:23:09:44:F5:1C:DC:5D:3D:4B:FF:68:95:3D:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d3d149e7-be5e-374e-b114-5dc63495bfd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.184.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:13:1a:ee:b9:5f:82:b4:27:15:0f:66:e4:54:45:65:9e:5f:
         e3:27:d5:0f:fd:f1:47:72:5a:3d:47:f0:4d:c4:de:1b:01:76:
         03:1d:47:c1:54:04:97:c6:11:df:e0:fd:05:89:c8:38:5a:d2:
         3d:2e:b1:37:ff:b5:21:e7:54:b7:f3:3f:bf:73:aa:53:28:4b:
         b4:b3:15:35:4b:c0:7c:1b:eb:a6:0d:b8:99:25:98:97:86:bc:
         20:64:03:70:f1:40:64:f3:cd:be:cb:d4:99:df:f4:b2:4c:49:
         fd:dd:5c:47:4a:6a:da:1d:ec:9b:88:89:0b:72:1a:5a:3f:f0:
         6d:a7:f7:24:44:65:3e:10:34:11:87:93:13:d0:20:e6:5d:69:
         f3:f9:ad:b5:93:37:95:ed:a0:46:55:a7:7d:bc:37:2e:4f:9b:
         2f:d2:da:7c:29:5a:81:55:20:7b:1b:49:46:c3:a0:8e:ff:7e:
         1f:aa:dd:f0:5a:20:85:c5:46:41:94:55:8b:07:98:14:94:4d:
         60:f5:8f:d0:01:72:d6:2e:50:d0:1e:a1:99:4f:48:7c:c4:73:
         bb:b7:ea:7b:a8:dc:44:4e:db:99:19:f6:d8:75:ea:bb:21:df:
         63:96:26:e7:c3:ca:21:b5:a4:26:f6:33:48:1c:c7:d2:f6:d5:
         a1:f9:ec:fb
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+x5+BtKgLFiqVhlAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAyNTEyMDAwMFoXDTIyMTEzMDA1MDAwMFowLzEtMCsGA1UEAxMk
Nzk3NTU4ZDAtZDlmYS00ZDg1LThjNzItNzFkMzNjMzMzYjgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrWBJsE1yCuY4fVvgga4SCG98T5BCNMt/BOL
fuczBDpk0OwXLb059OLvpYfD3e0B5A04yVPIRGbDQtq31QzQXqFHv7yF5q5FFJVc
ZOV1NKzTOX+cqxelJHEGL3SbomBF2uToRVjdF2JKcAr5gO3aWxK18bikAif6/hHh
fNvSepeXD2UYA7RELv+nFIWKlKrp4YUpnyqr2+KJGBYmtrP/wsF8iyldioK1IfkR
7XdAA9aBnMR3evz5fZsI2hyfIkjTtGcgXFnryyO7L3dvdajUAe23cJo+qFE4Cehj
8FHankuGh2D38KelZhNw7Muz02DOTZbx1gQa2LvMU466DeGi6QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHFRX6ePjiMJRPUc3F09S/9olT2AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZDNkMTQ5ZTctYmU1ZS0z
NzRlLWIxMTQtNWRjNjM0OTViZmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOLgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEArhMa7rlfgrQnFQ9m5FRFZZ5f4yfVD/3xR3JaPUfwTcTeGwF2Ax1HwVQE
l8YR3+D9BYnIOFrSPS6xN/+1IedUt/M/v3OqUyhLtLMVNUvAfBvrpg24mSWYl4a8
IGQDcPFAZPPNvsvUmd/0skxJ/d1cR0pq2h3sm4iJC3IaWj/wbaf3JERlPhA0EYeT
E9Ag5l1p8/mttZM3le2gRlWnfbw3Lk+bL9LafClagVUgextJRsOgjv9+H6rd8Fog
hcVGQZRViweYFJRNYPWP0AFy1i5Q0B6hmU9IfMRzu7fqe6jcRE7bmRn22HXquyHf
Y5Ym58PKIbWkJvYzSBzH0vbVofns+w==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:10 2025 by rpki-client