Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de8e622a-d592-35d4-bed6-d86eea518568.roa
File:                     de8e622a-d592-35d4-bed6-d86eea518568.roa (raw, json)
Hash identifier:          kONWhWFmhH2tRiPFj+TlkaydwAu4LBwzgYGyRqvOTf4=
Subject key identifier:   3D:EE:7A:B8:B0:70:23:34:D0:A1:16:3F:06:99:D0:4F:96:7B:BF:D5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CA41ABE5AF472106DE3CB1D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de8e622a-d592-35d4-bed6-d86eea518568.roa
Signing time:             Wed 19 Jan 2022 05:00:00 +0000
ROA not before:           Wed 19 Jan 2022 05:00:00 +0000
ROA not after:            Wed 23 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        128.81.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:a4:1a:be:5a:f4:72:10:6d:e3:cb:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 19 05:00:00 2022 GMT
            Not After : Feb 23 05:00:00 2022 GMT
        Subject: CN=297e871b-ce2c-465b-a6c9-40a0aed94440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c4:95:82:a9:ea:8a:25:ed:3d:3c:74:f6:cf:
                    70:11:f7:dc:5e:9c:6e:0d:ae:91:ba:14:6d:7e:be:
                    06:06:f6:f5:af:22:8d:5f:e1:10:54:ca:fb:51:b6:
                    5b:ac:7f:d4:20:17:dc:e3:42:b2:d3:0b:80:56:a0:
                    59:f2:35:5c:46:2a:f8:1d:53:6a:82:7a:ea:d4:25:
                    22:30:f8:e7:02:7e:af:8f:ac:cd:e7:c2:8c:7d:e1:
                    01:34:86:0e:9d:34:d7:d1:28:a4:f1:be:8b:cd:35:
                    b3:73:5b:2a:d7:0e:f9:17:99:5f:e9:06:81:6b:2b:
                    db:e6:ac:29:87:4d:09:36:d6:5e:e8:aa:7f:ab:59:
                    31:db:c0:0b:0d:2c:d3:63:fe:6d:38:a5:b2:3f:dd:
                    e5:24:51:0f:99:fb:6d:e6:e6:13:e9:33:b0:bf:6b:
                    ac:2b:d6:34:9f:15:80:2f:ed:a8:88:0e:f8:3b:55:
                    63:1d:d8:c1:8f:49:ce:17:47:0f:d2:4b:d1:5a:1a:
                    a4:2a:6d:6e:12:79:f6:89:2b:1c:2a:d8:04:42:a1:
                    a1:8c:68:00:b0:8b:1d:34:bf:2b:89:2c:b2:b7:04:
                    d8:d9:bf:ed:e4:ac:35:1c:84:f3:99:f0:ea:3f:35:
                    28:5c:11:33:44:55:db:07:8b:ae:4f:61:04:b6:ce:
                    ad:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EE:7A:B8:B0:70:23:34:D0:A1:16:3F:06:99:D0:4F:96:7B:BF:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de8e622a-d592-35d4-bed6-d86eea518568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.81.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:63:ea:ce:2d:12:3c:ec:ef:48:5b:52:9f:1f:70:e9:74:63:
         ca:29:d6:fd:5e:1d:bc:07:5e:ea:5b:56:28:7c:fe:2d:26:5a:
         98:c7:36:3f:01:de:4a:15:30:26:73:ac:82:2e:2f:05:9a:78:
         11:19:38:b3:7e:98:c6:a9:33:b7:38:e7:86:04:cf:9e:26:35:
         2e:66:56:66:d4:8e:b2:29:d1:20:7a:95:89:82:03:10:f3:2e:
         a5:ea:2c:45:a0:8c:70:46:6d:7e:19:75:91:16:c4:7d:d0:ce:
         c9:36:73:2a:ef:61:5f:5b:ec:7b:08:70:8b:8c:c0:e9:4f:bd:
         b3:0c:b1:3c:17:bb:16:5b:84:6c:b6:12:38:34:78:a6:13:94:
         35:d2:5a:eb:58:1e:23:75:f7:83:42:c2:24:16:de:d3:e5:1d:
         e9:82:17:53:11:60:3c:f9:c8:d2:21:ef:4c:c2:d4:23:03:72:
         03:da:76:6f:5a:7a:6a:57:ec:c6:ef:a5:3c:93:a5:d1:a5:10:
         86:cd:94:ab:e6:b2:9f:ea:4b:98:3b:d0:bc:af:ae:63:f5:53:
         ce:59:08:19:4f:46:0d:a3:e3:bc:30:90:56:64:dd:8e:dd:7e:
         98:f7:7d:ab:20:d9:c3:fd:2d:71:bd:35:4a:e8:6f:10:c6:d8:
         5f:da:d5:f5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDykGr5a9HIQbePLHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDExOTA1MDAwMFoXDTIyMDIyMzA1MDAwMFowLzEtMCsGA1UEAxMk
Mjk3ZTg3MWItY2UyYy00NjViLWE2YzktNDBhMGFlZDk0NDQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8SVgqnqiiXtPTx09s9wEffcXpxuDa6RuhRt
fr4GBvb1ryKNX+EQVMr7UbZbrH/UIBfc40Ky0wuAVqBZ8jVcRir4HVNqgnrq1CUi
MPjnAn6vj6zN58KMfeEBNIYOnTTX0Sik8b6LzTWzc1sq1w75F5lf6QaBayvb5qwp
h00JNtZe6Kp/q1kx28ALDSzTY/5tOKWyP93lJFEPmftt5uYT6TOwv2usK9Y0nxWA
L+2oiA74O1VjHdjBj0nOF0cP0kvRWhqkKm1uEnn2iSscKtgEQqGhjGgAsIsdNL8r
iSyytwTY2b/t5Kw1HITzmfDqPzUoXBEzRFXbB4uuT2EEts6txwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFD3ueriwcCM00KEWPwaZ0E+We7/VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZGU4ZTYyMmEtZDU5Mi0z
NWQ0LWJlZDYtZDg2ZWVhNTE4NTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgFEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPGPqzi0SPOzvSFtSnx9w6XRjyinW/V4dvAde6ltWKHz+LSZamMc2PwHe
ShUwJnOsgi4vBZp4ERk4s36YxqkztzjnhgTPniY1LmZWZtSOsinRIHqViYIDEPMu
peosRaCMcEZtfhl1kRbEfdDOyTZzKu9hX1vsewhwi4zA6U+9swyxPBe7FluEbLYS
ODR4phOUNdJa61geI3X3g0LCJBbe0+Ud6YIXUxFgPPnI0iHvTMLUIwNyA9p2b1p6
alfsxu+lPJOl0aUQhs2Uq+ayn+pLmDvQvK+uY/VTzlkIGU9GDaPjvDCQVmTdjt1+
mPd9qyDZw/0tcb01SuhvEMbYX9rV9Q==
-----END CERTIFICATE-----
Generated at Thu Apr 17 05:10:20 2025 by rpki-client