Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d847f456-e8d3-370d-a002-2a243799547e.roa
File:                     d847f456-e8d3-370d-a002-2a243799547e.roa (raw, json)
Hash identifier:          RNKN0F+y3VWIOFdysvCgk4+9stnrM6isMSzCbOMIulE=
Subject key identifier:   24:8F:32:82:11:21:59:F7:04:EE:31:F6:90:DD:0A:47:FC:DB:EF:5A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E6B209B00E7784831574CB2C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d847f456-e8d3-370d-a002-2a243799547e.roa
Signing time:             Thu 30 Jun 2022 12:00:00 +0000
ROA not before:           Thu 30 Jun 2022 12:00:00 +0000
ROA not after:            Fri 05 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.204.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6b:20:9b:00:e7:78:48:31:57:4c:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 30 12:00:00 2022 GMT
            Not After : Aug  5 04:00:00 2022 GMT
        Subject: CN=67f815fd-3c46-4958-b4ed-bbd1bc2f813d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:02:ec:31:a0:c5:98:41:aa:18:0d:cc:0d:45:
                    f5:3f:f9:6f:0d:0d:ce:ea:7e:18:66:61:f2:7b:c8:
                    7a:1e:e5:c4:5d:40:10:66:06:35:43:64:75:32:95:
                    a4:7e:b6:91:a7:f4:4b:b9:47:05:37:24:a6:61:8e:
                    25:9f:8c:f2:51:3b:e5:bc:79:56:e7:f1:c0:34:86:
                    5a:5c:f9:91:bf:b0:ac:8a:3f:28:53:eb:c8:25:3b:
                    41:9f:d1:ef:62:d9:65:63:7e:1b:18:5d:09:7b:e0:
                    e3:39:a5:c2:4e:d9:15:85:84:6d:c7:36:5f:48:d9:
                    ab:29:57:36:1a:4b:c4:b6:99:ed:01:9d:7b:8b:d3:
                    6d:26:29:18:37:a4:4a:01:43:08:1c:9b:87:fc:25:
                    20:ad:cc:fa:d2:3f:b4:16:01:b9:7d:78:7d:8a:6f:
                    a8:85:88:88:3b:8a:98:30:4d:1a:aa:e4:17:12:2a:
                    74:aa:31:af:88:3a:0e:54:84:2f:f7:59:a0:50:70:
                    b8:f4:99:d0:af:8a:eb:d3:ac:5b:a6:84:45:27:eb:
                    07:6b:23:a5:1d:28:59:3b:6d:83:4f:7e:fe:0b:4a:
                    89:8e:10:b3:8d:78:30:cd:ce:ba:c8:87:18:32:5e:
                    20:0f:39:47:43:cf:dd:6e:dd:43:71:e5:0d:e2:00:
                    ac:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8F:32:82:11:21:59:F7:04:EE:31:F6:90:DD:0A:47:FC:DB:EF:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d847f456-e8d3-370d-a002-2a243799547e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.204.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:dc:88:0a:e6:3d:53:f7:b5:70:95:18:0c:58:44:fd:25:69:
         f9:d9:74:97:a5:35:71:d4:a7:46:ab:70:ea:6d:3b:00:d2:9c:
         8e:6c:94:02:aa:c0:d2:f0:a1:cd:94:10:a0:00:f7:c5:c2:e4:
         9b:cb:73:15:93:66:c2:86:97:8b:ba:b3:a0:ce:cc:19:93:52:
         65:1c:cd:d5:e4:cf:e5:b2:88:e5:35:0a:36:73:73:a3:2a:dc:
         9d:29:64:5f:c1:b2:57:46:0e:f4:c1:89:f5:eb:2e:b1:f4:26:
         58:aa:48:ee:1a:d1:01:2e:40:95:93:74:85:29:cf:c3:f9:4a:
         20:bf:38:0f:68:d3:c8:23:65:b7:63:58:38:ee:e6:c3:ef:cf:
         92:b1:a4:b5:b5:8d:35:33:7a:c9:47:33:d4:99:c8:e4:59:c1:
         74:5b:87:aa:bd:45:77:cf:e0:43:09:21:6c:9a:36:a2:2b:90:
         80:48:01:fb:88:94:3f:f2:68:39:80:ac:32:b5:a9:bc:bb:b1:
         fd:f5:24:3b:54:83:36:77:d6:1b:0b:26:79:7e:00:63:ee:b1:
         4f:ee:dd:a2:43:8a:65:cb:57:43:51:1e:ea:32:2c:00:7b:03:
         c5:a6:ba:75:c7:b8:75:bb:b1:ca:08:9f:6f:b6:de:b5:4f:56:
         b8:11:1e:20
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5rIJsA53hIMVdMssAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYzMDEyMDAwMFoXDTIyMDgwNTA0MDAwMFowLzEtMCsGA1UEAxMk
NjdmODE1ZmQtM2M0Ni00OTU4LWI0ZWQtYmJkMWJjMmY4MTNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwALsMaDFmEGqGA3MDUX1P/lvDQ3O6n4YZmHy
e8h6HuXEXUAQZgY1Q2R1MpWkfraRp/RLuUcFNySmYY4ln4zyUTvlvHlW5/HANIZa
XPmRv7Csij8oU+vIJTtBn9HvYtllY34bGF0Je+DjOaXCTtkVhYRtxzZfSNmrKVc2
GkvEtpntAZ17i9NtJikYN6RKAUMIHJuH/CUgrcz60j+0FgG5fXh9im+ohYiIO4qY
ME0aquQXEip0qjGviDoOVIQv91mgUHC49JnQr4rr06xbpoRFJ+sHayOlHShZO22D
T37+C0qJjhCzjXgwzc66yIcYMl4gDzlHQ8/dbt1DceUN4gCsswIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCSPMoIRIVn3BO4x9pDdCkf82+9aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZDg0N2Y0NTYtZThkMy0z
NzBkLWEwMDItMmEyNDM3OTk1NDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEMwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAg9yICuY9U/e1cJUYDFhE/SVp+dl0l6U1cdSnRqtw6m07ANKcjmyUAqrA
0vChzZQQoAD3xcLkm8tzFZNmwoaXi7qzoM7MGZNSZRzN1eTP5bKI5TUKNnNzoyrc
nSlkX8GyV0YO9MGJ9esusfQmWKpI7hrRAS5AlZN0hSnPw/lKIL84D2jTyCNlt2NY
OO7mw+/PkrGktbWNNTN6yUcz1JnI5FnBdFuHqr1Fd8/gQwkhbJo2oiuQgEgB+4iU
P/JoOYCsMrWpvLux/fUkO1SDNnfWGwsmeX4AY+6xT+7dokOKZctXQ1Ee6jIsAHsD
xaa6dce4dbuxygifb7betU9WuBEeIA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:44 2025 by rpki-client