Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d67ce015-84bc-3ce1-b43c-d50c77618721.roa
File:                     d67ce015-84bc-3ce1-b43c-d50c77618721.roa (raw, json)
Hash identifier:          mQSekw2u7PExSTb3JCqPJrsXJ91OSI7HFQWGjtSBp2w=
Subject key identifier:   8C:3F:30:00:77:60:32:C4:7C:86:86:A7:CF:5E:7D:AB:B3:07:8E:8F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858405F8C15FF91BC1E3A88A0E3C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d67ce015-84bc-3ce1-b43c-d50c77618721.roa
Signing time:             Mon 26 Dec 2022 12:00:00 +0000
ROA not before:           Mon 26 Dec 2022 12:00:00 +0000
ROA not after:            Tue 31 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        32.184.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:5f:8c:15:ff:91:bc:1e:3a:88:a0:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 26 12:00:00 2022 GMT
            Not After : Jan 31 05:00:00 2023 GMT
        Subject: CN=2ee6ea0f-f19d-4db4-9b04-807cdf103a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f3:4e:58:19:e4:ad:a1:5f:1a:35:a0:09:bc:
                    98:b5:d6:36:17:09:11:81:a4:18:f0:10:8f:26:80:
                    12:b8:10:19:40:a4:9d:bc:98:d0:2f:f9:0e:7e:d6:
                    ac:3d:45:f4:73:80:2b:4d:40:6a:05:cd:c5:1d:74:
                    49:99:d8:de:ff:88:73:5d:42:00:2e:e5:92:1a:13:
                    18:f9:2a:72:f8:1f:5e:03:8c:28:71:51:87:1c:a6:
                    40:7c:db:36:d6:7b:3e:45:6f:e8:64:42:fd:48:93:
                    37:bf:3d:1b:bd:2c:b0:49:e9:47:22:80:07:d7:e7:
                    08:ac:56:76:d4:2f:de:37:fa:a5:ed:56:33:0a:9a:
                    4b:a8:98:55:16:93:29:ba:b5:7a:ef:9d:a5:2a:9b:
                    12:f3:1f:56:d3:06:95:ad:b0:59:9d:12:c6:47:d2:
                    f6:3b:f2:91:1d:24:71:80:19:05:7e:ec:a7:f7:46:
                    18:39:d9:c1:26:4c:a1:4d:32:4e:f7:ab:3a:34:eb:
                    20:7c:39:90:3b:33:c0:42:36:05:d3:9d:88:92:c4:
                    78:60:5e:34:02:d9:65:15:69:1f:8b:64:52:c6:87:
                    d5:55:c2:65:cc:b0:6f:8b:76:50:d7:58:44:19:d5:
                    b8:ca:79:db:df:f5:c7:d9:a4:c0:bd:bb:e2:fc:cf:
                    77:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3F:30:00:77:60:32:C4:7C:86:86:A7:CF:5E:7D:AB:B3:07:8E:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d67ce015-84bc-3ce1-b43c-d50c77618721.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  32.184.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:35:9d:6f:ee:d0:b1:0c:66:21:12:13:62:37:0b:e7:74:c7:
         e8:80:1b:93:a1:5c:26:bb:09:21:08:8d:96:a9:a1:81:6b:99:
         10:2b:8e:37:26:28:74:db:13:a5:8d:d0:7b:da:3f:39:16:bc:
         a1:d2:9b:35:0a:71:ac:54:f5:31:92:a4:a2:78:30:b1:de:d9:
         2c:77:7f:24:cd:e4:28:ab:07:67:e2:8e:d6:fb:86:d6:61:df:
         4f:ca:8b:bd:03:c8:4c:b0:51:c5:8f:e0:89:4f:c9:20:c3:e9:
         53:51:3c:db:aa:67:b5:33:a2:0b:7e:9c:97:ab:be:ef:3d:85:
         0e:22:3a:ee:29:cd:5f:67:b2:c5:8e:30:a3:40:c4:d8:42:2a:
         12:c8:0b:66:26:7f:00:5b:70:e9:98:e5:5b:2b:0f:68:50:1e:
         c9:d1:9f:02:5e:45:c4:ac:ca:87:eb:54:25:1c:0d:d4:96:b2:
         77:66:02:65:08:99:b6:d9:e5:44:19:a5:53:8d:8c:7b:ef:07:
         3f:3c:f7:75:31:e7:fb:ad:56:d5:71:e7:33:b2:16:c9:58:90:
         8d:70:de:bb:68:52:01:4c:1f:67:90:07:18:a8:da:91:57:d4:
         90:23:f8:ba:52:13:0f:44:28:35:a9:fd:09:b5:04:a8:80:90:
         0d:49:3a:15
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBfjBX/kbweOoig48AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIyNjEyMDAwMFoXDTIzMDEzMTA1MDAwMFowLzEtMCsGA1UEAxMk
MmVlNmVhMGYtZjE5ZC00ZGI0LTliMDQtODA3Y2RmMTAzYTMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvNOWBnkraFfGjWgCbyYtdY2FwkRgaQY8BCP
JoASuBAZQKSdvJjQL/kOftasPUX0c4ArTUBqBc3FHXRJmdje/4hzXUIALuWSGhMY
+Spy+B9eA4wocVGHHKZAfNs21ns+RW/oZEL9SJM3vz0bvSywSelHIoAH1+cIrFZ2
1C/eN/ql7VYzCppLqJhVFpMpurV6752lKpsS8x9W0waVrbBZnRLGR9L2O/KRHSRx
gBkFfuyn90YYOdnBJkyhTTJO96s6NOsgfDmQOzPAQjYF052IksR4YF40AtllFWkf
i2RSxofVVcJlzLBvi3ZQ11hEGdW4ynnb3/XH2aTAvbvi/M93nwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIw/MAB3YDLEfIaGp89efauzB46PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZDY3Y2UwMTUtODRiYy0z
Y2UxLWI0M2MtZDUwYzc3NjE4NzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDILgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAfTWdb+7QsQxmIRITYjcL53TH6IAbk6FcJrsJIQiNlqmhgWuZECuONyYo
dNsTpY3Qe9o/ORa8odKbNQpxrFT1MZKkongwsd7ZLHd/JM3kKKsHZ+KO1vuG1mHf
T8qLvQPITLBRxY/giU/JIMPpU1E826pntTOiC36cl6u+7z2FDiI67inNX2eyxY4w
o0DE2EIqEsgLZiZ/AFtw6ZjlWysPaFAeydGfAl5FxKzKh+tUJRwN1Jayd2YCZQiZ
ttnlRBmlU42Me+8HPzz3dTHn+61W1XHnM7IWyViQjXDeu2hSAUwfZ5AHGKjakVfU
kCP4ulITD0QoNan9CbUEqICQDUk6FQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:11 2025 by rpki-client