Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d7ed2d76-3a16-356a-bf92-5b9ad2e0a389.roa
File:                     d7ed2d76-3a16-356a-bf92-5b9ad2e0a389.roa (raw, json)
Hash identifier:          Kt9KmsE7Z+Pe8A6KiRvQjAzhptJnmG6AxDmvlsz1BCU=
Subject key identifier:   2D:5E:A2:E2:DA:A9:96:47:05:D9:54:C8:B7:94:56:88:5C:CE:FC:9D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF59B2D9A0BB2E19B03CE8A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d7ed2d76-3a16-356a-bf92-5b9ad2e0a389.roa
Signing time:             Fri 18 Nov 2022 12:00:00 +0000
ROA not before:           Fri 18 Nov 2022 12:00:00 +0000
ROA not after:            Sat 24 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        198.200.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f5:9b:2d:9a:0b:b2:e1:9b:03:ce:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 18 12:00:00 2022 GMT
            Not After : Dec 24 05:00:00 2022 GMT
        Subject: CN=81313515-4950-43aa-8caa-c6d312385471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dc:61:48:08:c3:7e:cc:34:c8:08:8f:67:2b:
                    75:dc:f0:11:68:3b:26:d3:2c:53:07:46:39:a5:43:
                    69:c4:c8:7d:21:19:00:0c:63:a2:63:6a:3d:83:77:
                    24:68:4c:c2:62:54:9d:19:0d:eb:d8:b2:92:36:02:
                    df:b4:87:b9:a9:8c:58:d4:1f:c5:0c:ff:92:f5:ee:
                    9e:f2:7f:e9:3d:90:5b:33:bd:42:bd:2b:24:88:a2:
                    9e:f1:2f:65:16:5b:bb:d9:b7:6a:d8:94:7b:6d:64:
                    61:46:11:bf:df:8e:13:a7:26:28:9d:b6:f7:76:e5:
                    07:1b:8b:aa:79:de:0f:cd:17:e2:c1:6d:5c:08:94:
                    b0:bd:e8:00:0e:e5:86:0f:dc:0a:22:27:8f:50:d7:
                    37:ae:97:aa:2e:bd:63:44:8b:0c:41:de:4d:19:51:
                    18:ff:16:e0:85:c9:65:29:3e:d2:8a:6c:df:04:c5:
                    ba:48:29:6d:86:b1:df:32:ea:09:13:bf:6d:16:ab:
                    87:1d:fa:e1:bb:26:a4:92:e6:4c:be:77:f4:f8:65:
                    83:96:68:3b:27:3c:1c:c5:6e:b8:d4:ed:88:12:f9:
                    e1:e4:4e:21:47:00:6f:c1:a6:5d:7c:26:16:51:b4:
                    18:c1:56:72:36:26:cd:ec:91:c7:09:2f:a4:a7:fc:
                    de:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5E:A2:E2:DA:A9:96:47:05:D9:54:C8:B7:94:56:88:5C:CE:FC:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d7ed2d76-3a16-356a-bf92-5b9ad2e0a389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.200.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:fd:70:48:96:ab:9c:c1:86:57:0b:b5:01:0f:7b:d2:42:1e:
         83:53:6b:86:2b:2a:b4:9f:e6:24:7d:e7:21:80:1e:0a:8a:26:
         fe:fa:71:f1:2d:17:ef:22:ed:63:7a:ec:7a:56:ec:b7:cd:43:
         6d:d3:c6:ed:f9:0d:05:4c:53:02:53:fa:54:d7:c4:53:8c:30:
         0c:ea:71:94:76:18:c3:88:03:17:1b:22:a6:1e:c6:55:00:6e:
         7d:0d:64:54:ca:23:a5:7d:6f:e0:b2:8f:ec:92:a5:4f:81:08:
         d3:bf:28:e5:e6:88:b1:e7:66:2a:cf:f2:b1:75:97:c6:55:26:
         3a:b3:7b:7d:40:33:55:96:a9:f4:3a:3e:f2:24:92:57:9c:1f:
         67:1b:a6:8d:ec:f9:c2:f3:72:ea:60:f8:d6:34:e0:ef:be:01:
         58:2f:e7:f6:ac:a5:1d:ec:a0:da:36:2e:ec:a6:d0:08:5e:7e:
         d0:27:ca:9d:34:34:16:7b:d9:50:f2:30:93:d3:f3:1d:9a:b4:
         34:f7:50:b8:08:96:03:46:94:23:5c:06:ab:d2:20:af:96:b3:
         7b:f1:9a:97:47:67:54:b4:8b:63:43:8c:d0:26:1e:c0:eb:23:
         b0:cc:a9:a4:bf:47:a9:f7:87:7a:7a:24:76:30:f3:3f:b5:71:
         31:d2:eb:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD/1my2aC7LhmwPOigAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTExODEyMDAwMFoXDTIyMTIyNDA1MDAwMFowLzEtMCsGA1UEAxMk
ODEzMTM1MTUtNDk1MC00M2FhLThjYWEtYzZkMzEyMzg1NDcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtxhSAjDfsw0yAiPZyt13PARaDsm0yxTB0Y5
pUNpxMh9IRkADGOiY2o9g3ckaEzCYlSdGQ3r2LKSNgLftIe5qYxY1B/FDP+S9e6e
8n/pPZBbM71CvSskiKKe8S9lFlu72bdq2JR7bWRhRhG/344TpyYonbb3duUHG4uq
ed4PzRfiwW1cCJSwvegADuWGD9wKIiePUNc3rpeqLr1jRIsMQd5NGVEY/xbghcll
KT7SimzfBMW6SClthrHfMuoJE79tFquHHfrhuyakkuZMvnf0+GWDlmg7JzwcxW64
1O2IEvnh5E4hRwBvwaZdfCYWUbQYwVZyNibN7JHHCS+kp/zeMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC1eouLaqZZHBdlUyLeUVohczvydMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZDdlZDJkNzYtM2ExNi0z
NTZhLWJmOTItNWI5YWQyZTBhMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsiVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH39cEiWq5zBhlcLtQEPe9JCHoNTa4YrKrSf5iR95yGAHgqKJv76cfEt
F+8i7WN67HpW7LfNQ23Txu35DQVMUwJT+lTXxFOMMAzqcZR2GMOIAxcbIqYexlUA
bn0NZFTKI6V9b+Cyj+ySpU+BCNO/KOXmiLHnZirP8rF1l8ZVJjqze31AM1WWqfQ6
PvIkklecH2cbpo3s+cLzcupg+NY04O++AVgv5/aspR3soNo2Luym0AheftAnyp00
NBZ72VDyMJPT8x2atDT3ULgIlgNGlCNcBqvSIK+Ws3vxmpdHZ1S0i2NDjNAmHsDr
I7DMqaS/R6n3h3p6JHYw8z+1cTHS668=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:46 2025 by rpki-client