Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d3f79a14-39bf-3db2-afbd-6dd21808d769.roa
File:                     d3f79a14-39bf-3db2-afbd-6dd21808d769.roa (raw, json)
Hash identifier:          IAy7kjir1nSdCLGeEqkjC1zW+5ZMm5r2bwPfKXpoAXU=
Subject key identifier:   E6:7C:5A:4D:A7:DC:4E:E7:CF:AF:19:99:44:F6:86:B8:3C:85:3B:51
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D16736722FF51DA6164F7BA20
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d3f79a14-39bf-3db2-afbd-6dd21808d769.roa
Signing time:             Tue 01 Mar 2022 05:00:00 +0000
ROA not before:           Tue 01 Mar 2022 05:00:00 +0000
ROA not after:            Tue 05 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.175.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:16:73:67:22:ff:51:da:61:64:f7:ba:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar  1 05:00:00 2022 GMT
            Not After : Apr  5 04:00:00 2022 GMT
        Subject: CN=06c37df7-78a5-4e26-ad35-67d67a419361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:29:30:07:f8:24:0b:94:bb:2d:eb:4b:3c:92:
                    7a:49:ff:1e:ee:41:8b:51:a9:00:5e:79:53:6b:d8:
                    53:fb:ef:48:93:aa:62:e8:c5:44:0b:46:c9:a6:68:
                    9b:78:0d:9b:92:c4:da:ae:d8:ab:b3:33:e0:13:ce:
                    d4:62:75:d4:d5:29:59:68:b9:48:83:db:58:19:5e:
                    e5:54:82:4f:5e:77:da:e6:e5:66:7a:90:97:80:4e:
                    fd:45:0a:76:2a:3c:b3:16:90:38:e1:7a:1b:fd:94:
                    3c:cb:41:c2:71:3c:2d:b3:b3:e9:8e:63:2e:8e:bd:
                    28:63:1c:49:dc:3e:17:15:14:81:59:41:8a:78:ee:
                    fa:41:93:58:92:a4:d9:91:8a:6d:8c:8b:30:40:46:
                    98:8b:b2:23:2e:de:24:bf:7d:73:dc:d5:b3:a4:30:
                    60:db:77:d4:f3:7e:fe:3a:61:e5:43:69:4b:62:88:
                    8f:b0:c6:38:54:df:99:b6:2a:bd:f3:f6:d5:02:35:
                    a7:aa:30:d9:a4:57:b6:36:aa:08:1e:ea:2b:7c:54:
                    c4:84:91:4d:09:1e:17:85:f3:77:81:de:56:58:58:
                    81:85:95:c3:c9:04:69:2d:d9:2a:88:ff:7a:60:3f:
                    4b:4e:b8:61:a8:84:7a:be:fa:6f:88:64:4c:c5:ca:
                    34:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7C:5A:4D:A7:DC:4E:E7:CF:AF:19:99:44:F6:86:B8:3C:85:3B:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d3f79a14-39bf-3db2-afbd-6dd21808d769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.175.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:7d:21:29:2f:92:67:81:60:5f:dd:7c:dd:b5:52:ab:b7:a6:
         c6:2e:c1:e1:61:08:b0:0d:12:be:7c:b8:12:61:58:63:47:5e:
         77:2f:b0:df:07:a0:a8:64:4b:17:28:52:be:85:fa:03:50:b6:
         0f:ee:86:8f:bc:f9:77:8f:99:42:5c:c2:c1:cf:78:5b:3c:1b:
         ef:8c:67:5a:b0:84:ff:eb:3b:1f:15:f9:a7:ec:3d:85:47:af:
         37:c2:30:b4:ae:31:cc:3f:b9:28:03:0b:2e:2e:33:dc:78:b9:
         b0:03:d6:28:48:47:11:88:27:e8:57:95:c6:fc:01:89:ef:cc:
         1a:60:7b:72:30:ca:cd:5c:c0:f7:ee:9b:34:d3:a3:b4:d9:d9:
         11:7f:1b:22:dd:33:ce:e2:82:23:54:b6:e1:cc:b7:28:e7:3e:
         4c:3d:56:e8:23:61:89:82:09:2e:22:c7:8b:77:61:9d:35:79:
         58:85:00:09:30:30:08:8c:ac:8c:f1:bc:f2:38:5b:e4:55:6b:
         5a:11:94:fd:d1:93:58:fc:4f:0f:a5:c9:e5:dd:eb:4d:14:33:
         b7:a8:2e:d7:92:45:e0:7b:86:b7:c8:ef:1c:00:ae:37:3b:ba:
         c1:66:d5:95:83:cb:c6:6a:dc:5c:11:32:df:ff:c1:14:9b:c1:
         c5:d1:01:98
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0Wc2ci/1HaYWT3uiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMwMTA1MDAwMFoXDTIyMDQwNTA0MDAwMFowLzEtMCsGA1UEAxMk
MDZjMzdkZjctNzhhNS00ZTI2LWFkMzUtNjdkNjdhNDE5MzYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCkwB/gkC5S7LetLPJJ6Sf8e7kGLUakAXnlT
a9hT++9Ik6pi6MVEC0bJpmibeA2bksTartirszPgE87UYnXU1SlZaLlIg9tYGV7l
VIJPXnfa5uVmepCXgE79RQp2KjyzFpA44Xob/ZQ8y0HCcTwts7PpjmMujr0oYxxJ
3D4XFRSBWUGKeO76QZNYkqTZkYptjIswQEaYi7IjLt4kv31z3NWzpDBg23fU837+
OmHlQ2lLYoiPsMY4VN+Ztiq98/bVAjWnqjDZpFe2NqoIHuorfFTEhJFNCR4XhfN3
gd5WWFiBhZXDyQRpLdkqiP96YD9LTrhhqIR6vvpviGRMxco0fQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOZ8Wk2n3E7nz68ZmUT2hrg8hTtRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZDNmNzlhMTQtMzliZi0z
ZGIyLWFmYmQtNmRkMjE4MDhkNzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEK8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAkH0hKS+SZ4FgX9183bVSq7emxi7B4WEIsA0Svny4EmFYY0dedy+w3weg
qGRLFyhSvoX6A1C2D+6Gj7z5d4+ZQlzCwc94Wzwb74xnWrCE/+s7HxX5p+w9hUev
N8IwtK4xzD+5KAMLLi4z3Hi5sAPWKEhHEYgn6FeVxvwBie/MGmB7cjDKzVzA9+6b
NNOjtNnZEX8bIt0zzuKCI1S24cy3KOc+TD1W6CNhiYIJLiLHi3dhnTV5WIUACTAw
CIysjPG88jhb5FVrWhGU/dGTWPxPD6XJ5d3rTRQzt6gu15JF4HuGt8jvHACuNzu6
wWbVlYPLxmrcXBEy3//BFJvBxdEBmA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:22 2025 by rpki-client