Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d5c56a34-efe6-3a56-97b7-d12d9881eca4.roa
File:                     d5c56a34-efe6-3a56-97b7-d12d9881eca4.roa (raw, json)
Hash identifier:          tsgSq5o6qoDuRrqWmGEa/JCjRu/fQz0cmfbNNAmR+aI=
Subject key identifier:   0C:21:9C:48:A8:34:29:07:F8:9C:A8:D5:78:77:AB:82:EE:CB:0E:78
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D33270B2D9C5F33EDFEE4DF80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d5c56a34-efe6-3a56-97b7-d12d9881eca4.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        100.24.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:27:0b:2d:9c:5f:33:ed:fe:e4:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=28b0df38-f795-4d5b-b149-7b19a379ba61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:80:a1:f1:07:c2:4c:4d:a5:9c:96:1f:3d:8d:
                    9f:a7:61:4b:a7:86:e9:38:44:aa:be:08:2c:5b:33:
                    7e:55:c3:e6:39:24:1e:d5:2f:08:dc:dc:89:7c:05:
                    f1:4f:04:86:82:83:7c:52:e0:46:0d:76:d2:7a:e2:
                    ca:71:6a:73:89:22:99:3a:26:f2:c5:0b:84:e4:41:
                    eb:25:e4:ac:ab:ab:04:3a:16:8e:3f:da:1d:54:e8:
                    32:a2:4e:e6:38:ad:f7:85:df:9a:f1:c2:f9:f3:02:
                    ec:a5:94:03:22:5a:40:91:cd:0f:7f:ee:3b:f3:ee:
                    62:0c:96:eb:3a:c2:47:5d:ab:83:41:9e:f1:0c:b8:
                    a9:f0:a6:ce:b8:30:0c:4c:f3:e2:85:1e:ed:a8:56:
                    a6:18:48:82:eb:96:84:2e:8d:0f:13:c9:e1:d3:66:
                    66:77:e5:28:49:55:7f:e7:89:f3:1d:92:ce:ac:69:
                    94:42:03:f3:cb:75:fd:e7:1b:e1:fd:f4:df:6c:c9:
                    75:eb:19:a0:87:ff:a2:1e:ca:5c:fb:59:59:73:f2:
                    79:4c:92:68:28:ea:5e:1b:0f:59:26:20:28:15:ee:
                    1e:d4:7f:de:7b:9c:db:e9:24:90:07:0e:d6:ae:f6:
                    85:f1:e6:c7:28:cd:89:8d:84:40:df:d8:9b:3c:a5:
                    3e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:21:9C:48:A8:34:29:07:F8:9C:A8:D5:78:77:AB:82:EE:CB:0E:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d5c56a34-efe6-3a56-97b7-d12d9881eca4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.24.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:25:57:9e:76:09:f5:c8:28:c4:69:6f:de:f0:0d:fa:8d:7e:
         8c:c7:2d:36:17:36:73:ce:9b:3f:62:0f:8a:64:23:6b:53:f5:
         ec:a4:6e:82:f2:d9:0a:54:51:f1:27:74:13:7f:13:5e:e2:2a:
         34:45:f7:b2:56:38:12:03:47:76:60:37:a1:d8:87:b9:0d:7c:
         d8:58:92:37:15:74:13:1b:a1:25:4c:36:22:09:bd:9d:29:5f:
         23:76:00:3a:7d:67:03:26:56:fd:98:6f:34:b4:ec:55:cc:0b:
         fd:cd:4a:0b:4d:b4:de:c6:ab:b8:1f:4d:ee:96:8e:0b:00:c9:
         d5:33:31:17:5d:db:35:d5:4e:96:d5:28:fe:57:a1:4d:fe:1f:
         d3:1a:7e:9b:e4:60:72:4a:76:7d:52:e7:11:23:3d:d4:ed:6c:
         90:85:2e:b9:8d:39:cc:64:7e:c8:81:8f:06:25:e1:d8:9c:9a:
         e8:43:25:1d:b7:18:ac:79:e5:56:84:ee:4f:c6:d4:d9:d1:18:
         0f:f4:dd:d6:0c:b6:57:08:bc:da:fb:00:6a:fb:a1:3a:d3:c4:
         ef:f9:2e:28:cb:fe:14:b6:70:e4:37:d1:f1:e8:7f:b6:ea:93:
         ba:c0:6b:2b:e1:6e:f1:ed:83:62:12:a3:43:58:37:1d:23:de:
         6b:22:50:00
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0zJwstnF8z7f7k34AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
MjhiMGRmMzgtZjc5NS00ZDViLWIxNDktN2IxOWEzNzliYTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoCh8QfCTE2lnJYfPY2fp2FLp4bpOESqvggs
WzN+VcPmOSQe1S8I3NyJfAXxTwSGgoN8UuBGDXbSeuLKcWpziSKZOibyxQuE5EHr
JeSsq6sEOhaOP9odVOgyok7mOK33hd+a8cL58wLspZQDIlpAkc0Pf+478+5iDJbr
OsJHXauDQZ7xDLip8KbOuDAMTPPihR7tqFamGEiC65aELo0PE8nh02Zmd+UoSVV/
54nzHZLOrGmUQgPzy3X95xvh/fTfbMl16xmgh/+iHspc+1lZc/J5TJJoKOpeGw9Z
JiAoFe4e1H/ee5zb6SSQBw7WrvaF8ebHKM2JjYRA39ibPKU+uQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAwhnEioNCkH+Jyo1Xh3q4Luyw54MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZDVjNTZhMzQtZWZlNi0z
YTU2LTk3YjctZDEyZDk4ODFlY2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDZBgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAXCVXnnYJ9cgoxGlv3vAN+o1+jMctNhc2c86bP2IPimQja1P17KRugvLZ
ClRR8Sd0E38TXuIqNEX3slY4EgNHdmA3odiHuQ182FiSNxV0ExuhJUw2Igm9nSlf
I3YAOn1nAyZW/ZhvNLTsVcwL/c1KC0203saruB9N7paOCwDJ1TMxF13bNdVOltUo
/lehTf4f0xp+m+Rgckp2fVLnESM91O1skIUuuY05zGR+yIGPBiXh2Jya6EMlHbcY
rHnlVoTuT8bU2dEYD/Td1gy2Vwi82vsAavuhOtPE7/kuKMv+FLZw5DfR8eh/tuqT
usBrK+Fu8e2DYhKjQ1g3HSPeayJQAA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:37 2025 by rpki-client