Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dab4781f-ddfc-3c93-add4-f07b0ca20295.roa
File:                     dab4781f-ddfc-3c93-add4-f07b0ca20295.roa (raw, json)
Hash identifier:          SHAD6JmnNweQo0WxxI+p07UIxdlOZ6+IdJQnGfgqq4U=
Subject key identifier:   E5:4E:51:60:5C:D5:B4:8E:D3:28:E9:8B:E4:D6:13:CD:11:64:28:14
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D96ED2539C22BAEF9B25A9D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dab4781f-ddfc-3c93-add4-f07b0ca20295.roa
Signing time:             Sat 16 Apr 2022 04:00:00 +0000
ROA not before:           Sat 16 Apr 2022 04:00:00 +0000
ROA not after:            Sat 21 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.15.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:96:ed:25:39:c2:2b:ae:f9:b2:5a:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 16 04:00:00 2022 GMT
            Not After : May 21 04:00:00 2022 GMT
        Subject: CN=f321929b-b727-474a-a2dd-3c31e634b350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dd:2a:66:ab:bd:d0:68:3f:29:95:5f:4c:63:
                    c5:d5:0c:46:48:e6:ae:70:41:af:bb:5d:7e:ad:c3:
                    51:e0:b1:46:17:cc:f6:61:25:05:c1:f9:74:37:94:
                    67:09:e9:68:4f:49:3f:e1:68:b3:71:c3:75:f3:5b:
                    14:ca:d4:b0:4f:a0:2b:73:5d:9d:15:b6:09:c6:91:
                    93:5a:82:38:bb:3d:c2:b1:cc:e4:5f:b7:c5:5c:31:
                    ed:49:16:08:83:db:58:bf:c6:0e:18:91:e4:97:27:
                    7d:36:19:2e:64:3e:e1:b8:36:74:bd:c4:90:a1:d4:
                    8f:b9:83:af:9f:43:13:b1:5b:a4:b3:36:20:92:55:
                    05:dc:2b:e5:d8:5b:25:5f:2e:f1:f5:a6:60:1a:7f:
                    03:94:62:7d:54:13:47:62:36:7f:4e:43:86:4f:1f:
                    ae:01:00:6f:1e:3a:6c:8b:78:eb:f1:07:74:79:22:
                    c5:e4:d5:ea:fa:cc:16:19:f3:53:36:0d:11:39:0b:
                    64:80:3d:66:7d:9c:8e:ea:68:6b:dd:9b:8a:78:de:
                    6f:94:ee:e3:de:4d:82:02:4b:dc:70:5f:92:b0:29:
                    64:44:09:69:0b:07:a0:e6:5e:82:16:de:2f:84:c4:
                    39:33:d2:f0:d2:94:c5:8d:8d:ed:1c:50:30:e1:b9:
                    ab:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4E:51:60:5C:D5:B4:8E:D3:28:E9:8B:E4:D6:13:CD:11:64:28:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dab4781f-ddfc-3c93-add4-f07b0ca20295.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.15.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:30:c3:1c:8f:2e:e6:94:03:dd:d4:a1:ed:64:32:9e:45:4c:
         a9:c4:75:f7:86:34:dd:34:35:ba:0c:a5:ea:fd:cf:2c:e0:59:
         45:76:18:14:c2:3a:81:a2:c2:f5:3e:e3:dd:cf:2c:67:18:bc:
         3b:0d:a2:09:03:8c:23:6b:5b:a9:10:b6:51:15:2f:22:bb:d4:
         ee:85:df:98:70:d1:0b:78:96:3c:31:57:ce:af:f6:8b:a4:5c:
         0e:f7:b2:b1:b8:f1:f1:12:84:4d:ba:4f:85:d3:be:a1:19:fe:
         59:74:57:57:9d:06:63:2c:18:4f:0c:e3:c7:d7:f3:e7:98:b0:
         5f:9b:dc:ae:44:e6:83:54:ff:17:c7:de:39:ba:1e:a2:1f:f4:
         0f:51:c5:a9:c6:6a:89:09:c8:b9:a3:52:4f:3d:56:7a:97:bc:
         df:a9:03:b9:c9:0c:cd:a8:b3:62:2c:c4:78:07:a9:47:02:59:
         4a:1b:03:2a:e1:ca:ba:3e:18:f3:f4:94:86:f9:7e:65:25:34:
         e3:f0:e9:cb:57:12:53:cf:6d:4a:b5:e4:93:34:c1:4d:5c:d1:
         d8:48:f1:66:da:9d:ca:64:a0:51:6f:51:e8:72:f9:17:75:76:
         5d:aa:21:62:d4:8b:ca:da:a1:fd:c8:81:f8:22:74:56:cc:f8:
         ec:d5:32:ca
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2W7SU5wiuu+bJanQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDQxNjA0MDAwMFoXDTIyMDUyMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZjMyMTkyOWItYjcyNy00NzRhLWEyZGQtM2MzMWU2MzRiMzUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN0qZqu90Gg/KZVfTGPF1QxGSOaucEGvu11+
rcNR4LFGF8z2YSUFwfl0N5RnCeloT0k/4WizccN181sUytSwT6Arc12dFbYJxpGT
WoI4uz3CsczkX7fFXDHtSRYIg9tYv8YOGJHklyd9NhkuZD7huDZ0vcSQodSPuYOv
n0MTsVukszYgklUF3Cvl2FslXy7x9aZgGn8DlGJ9VBNHYjZ/TkOGTx+uAQBvHjps
i3jr8Qd0eSLF5NXq+swWGfNTNg0ROQtkgD1mfZyO6mhr3ZuKeN5vlO7j3k2CAkvc
cF+SsClkRAlpCweg5l6CFt4vhMQ5M9Lw0pTFjY3tHFAw4bmr6QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOVOUWBc1bSO0yjpi+TWE80RZCgUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZGFiNDc4MWYtZGRmYy0z
YzkzLWFkZDQtZjA3YjBjYTIwMjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEA8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEALzDDHI8u5pQD3dSh7WQynkVMqcR194Y03TQ1ugyl6v3PLOBZRXYYFMI6
gaLC9T7j3c8sZxi8Ow2iCQOMI2tbqRC2URUvIrvU7oXfmHDRC3iWPDFXzq/2i6Rc
Dveysbjx8RKETbpPhdO+oRn+WXRXV50GYywYTwzjx9fz55iwX5vcrkTmg1T/F8fe
Oboeoh/0D1HFqcZqiQnIuaNSTz1Wepe836kDuckMzaizYizEeAepRwJZShsDKuHK
uj4Y8/SUhvl+ZSU04/Dpy1cSU89tSrXkkzTBTVzR2EjxZtqdymSgUW9R6HL5F3V2
XaohYtSLytqh/ciB+CJ0Vsz47NUyyg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:34 2025 by rpki-client