Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/db379c74-337a-3beb-b5ed-39ebaaf39016.roa
File:                     db379c74-337a-3beb-b5ed-39ebaaf39016.roa (raw, json)
Hash identifier:          DSgrilvmhWNytfeRVSgKg7dmQM9pA4/us9boYomnxWA=
Subject key identifier:   A5:B2:4F:A3:A1:8D:58:F7:F7:96:36:93:39:78:2E:BD:E6:4C:EC:B5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D030E6C2C62098C81E1213780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/db379c74-337a-3beb-b5ed-39ebaaf39016.roa
Signing time:             Tue 22 Feb 2022 05:00:00 +0000
ROA not before:           Tue 22 Feb 2022 05:00:00 +0000
ROA not after:            Tue 29 Mar 2022 04:00:00 +0000
asID:                     54113
IP address blocks:        162.219.224.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:03:0e:6c:2c:62:09:8c:81:e1:21:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 22 05:00:00 2022 GMT
            Not After : Mar 29 04:00:00 2022 GMT
        Subject: CN=27772036-f4c1-4850-83b1-c4cab727b813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d9:aa:3c:21:ac:4d:9c:27:ad:9a:a7:19:65:
                    fc:bf:5f:b3:c7:eb:ef:e0:af:85:1f:a4:a9:fe:db:
                    24:b9:fa:c3:eb:d7:86:1c:d2:d2:39:79:10:7a:51:
                    9c:fc:62:63:00:ce:e6:67:70:5f:b3:cd:10:11:72:
                    e2:bb:9b:e0:ad:77:e2:20:16:91:da:11:76:70:7e:
                    82:fb:90:2d:d4:d1:bc:d6:ec:d9:23:54:70:cb:71:
                    08:30:89:3c:f9:e6:e5:bf:28:2e:68:f9:97:d8:83:
                    c8:0e:86:11:0f:09:2d:7c:96:21:b1:ac:f4:79:6c:
                    f7:4e:bd:9e:6a:10:e6:25:3a:ca:74:2b:28:5f:c9:
                    df:c7:e7:67:18:13:a6:cc:70:87:9c:26:c0:19:56:
                    de:9e:3b:f5:5e:31:ce:6d:6a:22:95:62:41:3a:64:
                    06:93:ea:a4:11:fb:70:fe:a2:54:a5:29:ac:a6:93:
                    34:cc:a3:9a:4a:ec:3b:bd:cd:90:fb:15:25:15:2e:
                    f8:32:a8:79:ea:d9:61:48:30:cf:a4:e8:c4:7c:53:
                    35:d0:41:b8:74:57:c4:3f:13:e1:7d:00:22:43:db:
                    a1:c9:83:de:7c:cb:2e:a0:18:66:50:e9:2e:a4:82:
                    82:14:e9:a2:6e:b0:36:9d:86:8d:55:39:de:8d:f9:
                    4c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B2:4F:A3:A1:8D:58:F7:F7:96:36:93:39:78:2E:BD:E6:4C:EC:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/db379c74-337a-3beb-b5ed-39ebaaf39016.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:96:47:ec:d5:b1:23:55:c5:9b:20:74:4e:11:7d:1d:ff:76:
         80:8e:92:db:42:e8:4b:00:4b:6e:3e:bd:3e:b0:a0:19:ff:94:
         44:4d:72:02:a5:b9:2a:99:7e:ed:a5:bb:ee:41:ac:12:1f:11:
         e9:47:5e:64:13:27:55:f7:69:42:b9:4b:02:45:ae:0c:fb:f5:
         a0:de:e1:fd:37:b8:10:0a:b0:64:7d:3c:a2:b7:ac:6c:f8:ed:
         60:f0:af:32:f4:d4:d8:c5:c7:42:af:61:71:10:9d:a9:52:c6:
         0b:b2:e5:ad:da:e3:6a:db:be:36:d7:a4:0f:80:20:fa:db:16:
         a3:1a:92:85:c7:52:f7:5d:5b:07:dd:fa:4a:5a:e3:ba:29:45:
         11:a4:54:1c:f5:2a:4b:f2:3b:ea:88:89:01:97:73:4d:c4:e2:
         5b:a1:6c:7d:58:05:fc:b0:4c:c3:b8:ec:53:d1:7e:da:7b:28:
         d7:df:66:3b:30:75:63:71:c7:74:16:ce:f3:2f:1f:9f:c0:1f:
         0e:e8:97:29:57:16:d0:9b:36:58:87:62:de:31:03:b3:cf:a1:
         a3:f7:61:72:1c:1d:f0:b4:72:10:c1:c9:6f:e8:be:ac:de:6a:
         78:b9:61:43:3d:49:15:87:13:0e:0f:36:ab:ca:30:8e:e6:45:
         99:de:0c:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD0DDmwsYgmMgeEhN4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDIyMjA1MDAwMFoXDTIyMDMyOTA0MDAwMFowLzEtMCsGA1UEAxMk
Mjc3NzIwMzYtZjRjMS00ODUwLTgzYjEtYzRjYWI3MjdiODEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9mqPCGsTZwnrZqnGWX8v1+zx+vv4K+FH6Sp
/tskufrD69eGHNLSOXkQelGc/GJjAM7mZ3Bfs80QEXLiu5vgrXfiIBaR2hF2cH6C
+5At1NG81uzZI1Rwy3EIMIk8+eblvyguaPmX2IPIDoYRDwktfJYhsaz0eWz3Tr2e
ahDmJTrKdCsoX8nfx+dnGBOmzHCHnCbAGVbenjv1XjHObWoilWJBOmQGk+qkEftw
/qJUpSmsppM0zKOaSuw7vc2Q+xUlFS74Mqh56tlhSDDPpOjEfFM10EG4dFfEPxPh
fQAiQ9uhyYPefMsuoBhmUOkupIKCFOmibrA2nYaNVTnejflMnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKWyT6OhjVj395Y2kzl4Lr3mTOy1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZGIzNzljNzQtMzM3YS0z
YmViLWI1ZWQtMzllYmFhZjM5MDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotvgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAyWR+zVsSNVxZsgdE4RfR3/doCOkttC6EsAS24+vT6woBn/lERNcgKl
uSqZfu2lu+5BrBIfEelHXmQTJ1X3aUK5SwJFrgz79aDe4f03uBAKsGR9PKK3rGz4
7WDwrzL01NjFx0KvYXEQnalSxguy5a3a42rbvjbXpA+AIPrbFqMakoXHUvddWwfd
+kpa47opRRGkVBz1KkvyO+qIiQGXc03E4luhbH1YBfywTMO47FPRftp7KNffZjsw
dWNxx3QWzvMvH5/AHw7olylXFtCbNliHYt4xA7PPoaP3YXIcHfC0chDByW/ovqze
ani5YUM9SRWHEw4PNqvKMI7mRZneDHA=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:14:06 2025 by rpki-client