Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dfbc05a2-b4e0-3e4a-9b44-02af247770aa.roa
File:                     dfbc05a2-b4e0-3e4a-9b44-02af247770aa.roa (raw, json)
Hash identifier:          hZg76YngMRtmRz54b8IXAm5OSYOpnrO3b9i/HcC7CFM=
Subject key identifier:   42:42:7D:1D:F4:56:A6:D1:42:15:64:AB:A5:B7:6A:2A:3E:0E:AB:C8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FB54EE92A72CA3CCD181B8F70
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dfbc05a2-b4e0-3e4a-9b44-02af247770aa.roa
Signing time:             Wed 26 Oct 2022 12:00:00 +0000
ROA not before:           Wed 26 Oct 2022 12:00:00 +0000
ROA not after:            Thu 01 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        16.113.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b5:4e:e9:2a:72:ca:3c:cd:18:1b:8f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 26 12:00:00 2022 GMT
            Not After : Dec  1 05:00:00 2022 GMT
        Subject: CN=3f556a64-3992-430e-960c-51ce519ff7a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b6:fa:53:8a:c0:e2:a3:c5:fe:7d:37:4a:32:
                    dd:cd:76:c3:3c:1d:44:a5:52:33:87:a9:af:64:00:
                    66:8e:25:5a:41:72:74:f5:57:e4:87:2a:eb:2b:c1:
                    b2:68:8d:9f:87:28:1e:6a:58:eb:d8:c1:b5:fe:81:
                    66:86:3f:b7:c2:fa:89:6b:cc:7b:27:6c:c3:9b:c5:
                    45:60:32:29:90:74:a0:6c:39:62:64:81:3e:06:b7:
                    a5:da:84:25:cd:a1:a7:d3:0b:5c:f4:83:92:c6:2e:
                    12:68:ba:e6:7c:f8:e8:4d:96:ff:d7:2d:31:31:56:
                    f4:be:b0:c3:b2:e4:d6:94:04:0e:41:40:aa:4c:3a:
                    f7:01:25:9d:df:8d:62:a9:88:e3:4e:f4:bd:d9:22:
                    0c:2c:2f:3d:e4:37:bb:05:d4:16:8f:38:af:82:32:
                    5e:16:99:17:90:e2:71:42:25:e1:69:a8:49:a9:8a:
                    5e:92:4a:34:04:0b:cf:cd:31:e2:0b:b4:ae:88:e1:
                    f8:4c:de:b5:cd:22:6b:25:db:21:d0:d9:a5:f7:19:
                    c9:45:ad:f4:35:e2:a7:7f:c5:78:06:6f:e0:85:60:
                    db:d8:61:f0:25:a9:17:f3:af:44:84:65:b2:75:c0:
                    8b:92:78:b9:2d:03:24:ee:9f:28:8b:1c:5b:77:59:
                    da:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:42:7D:1D:F4:56:A6:D1:42:15:64:AB:A5:B7:6A:2A:3E:0E:AB:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dfbc05a2-b4e0-3e4a-9b44-02af247770aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.113.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:9f:a0:f8:4a:ab:da:e6:c3:1a:ee:4f:89:d7:eb:44:3d:d7:
         cf:92:09:1e:e3:37:00:45:a1:b3:8b:64:09:29:cb:cc:24:80:
         c9:b4:d7:10:f3:69:6d:f5:ad:2b:ed:c2:f4:92:91:95:86:e9:
         45:cc:1e:05:11:7a:1a:5e:b5:db:c2:f8:eb:87:33:83:88:d1:
         dd:95:09:44:67:bb:d8:51:2c:ea:88:63:4a:61:02:fb:b8:b4:
         60:b4:53:fa:a4:ce:72:47:ad:96:cc:fc:c2:1a:a7:f1:8f:ce:
         9b:9b:9b:50:ad:47:68:74:52:d3:bb:64:68:e1:93:0b:89:68:
         56:ce:7e:6b:77:b0:25:c5:51:28:cc:7e:48:58:97:a0:66:79:
         f3:5f:78:54:b4:cd:1d:3f:a5:94:0e:11:84:5e:09:53:14:79:
         01:1e:d7:22:6a:04:10:bd:fc:72:9b:68:50:a9:27:46:d8:53:
         88:24:a8:45:b0:96:98:95:ef:6b:6f:a1:e2:c1:d3:f5:57:5e:
         dc:78:92:ec:bd:62:25:f9:d4:91:38:07:48:88:06:7d:3d:3b:
         bd:e7:87:02:05:89:99:6a:cb:9d:99:7f:30:df:44:55:58:b9:
         52:a5:cb:bc:e3:89:cd:28:17:70:d3:d9:b9:3b:65:b0:43:ca:
         48:59:5a:0d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+1Tukqcso8zRgbj3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAyNjEyMDAwMFoXDTIyMTIwMTA1MDAwMFowLzEtMCsGA1UEAxMk
M2Y1NTZhNjQtMzk5Mi00MzBlLTk2MGMtNTFjZTUxOWZmN2E3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrb6U4rA4qPF/n03SjLdzXbDPB1EpVIzh6mv
ZABmjiVaQXJ09VfkhyrrK8GyaI2fhygealjr2MG1/oFmhj+3wvqJa8x7J2zDm8VF
YDIpkHSgbDliZIE+Brel2oQlzaGn0wtc9IOSxi4SaLrmfPjoTZb/1y0xMVb0vrDD
suTWlAQOQUCqTDr3ASWd341iqYjjTvS92SIMLC895De7BdQWjzivgjJeFpkXkOJx
QiXhaahJqYpekko0BAvPzTHiC7SuiOH4TN61zSJrJdsh0Nml9xnJRa30NeKnf8V4
Bm/ghWDb2GHwJakX869EhGWydcCLkni5LQMk7p8oixxbd1naYwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEJCfR30VqbRQhVkq6W3aio+DqvIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZGZiYzA1YTItYjRlMC0z
ZTRhLTliNDQtMDJhZjI0Nzc3MGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEHEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAtZ+g+Eqr2ubDGu5PidfrRD3Xz5IJHuM3AEWhs4tkCSnLzCSAybTXEPNp
bfWtK+3C9JKRlYbpRcweBRF6Gl6128L464czg4jR3ZUJRGe72FEs6ohjSmEC+7i0
YLRT+qTOcketlsz8whqn8Y/Om5ubUK1HaHRS07tkaOGTC4loVs5+a3ewJcVRKMx+
SFiXoGZ58194VLTNHT+llA4RhF4JUxR5AR7XImoEEL38cptoUKknRthTiCSoRbCW
mJXva2+h4sHT9Vde3HiS7L1iJfnUkTgHSIgGfT07veeHAgWJmWrLnZl/MN9EVVi5
UqXLvOOJzSgXcNPZuTtlsEPKSFlaDQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:12:45 2025 by rpki-client