Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e37ca2c5-a8b8-3b89-8068-85005e458722.roa
File:                     e37ca2c5-a8b8-3b89-8068-85005e458722.roa (raw, json)
Hash identifier:          F+V32GkS4wqTPHDFuCC6WjptKHdS4D+w7RBiG15t35U=
Subject key identifier:   25:28:6D:8D:5D:96:C0:D7:7B:44:01:9A:86:D9:E5:54:FF:21:49:D8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E6A6DE6D25ED8D3770EC48770
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e37ca2c5-a8b8-3b89-8068-85005e458722.roa
Signing time:             Wed 29 Jun 2022 15:27:08 +0000
ROA not before:           Wed 29 Jun 2022 15:27:08 +0000
ROA not after:            Thu 04 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.55.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6a:6d:e6:d2:5e:d8:d3:77:0e:c4:87:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 29 15:27:08 2022 GMT
            Not After : Aug  4 04:00:00 2022 GMT
        Subject: CN=4acf7876-daff-49d9-a42b-a9cf285ba88a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:92:be:16:f6:3e:81:1b:e1:6c:aa:b1:b7:bc:
                    f3:47:6f:82:a1:4a:64:98:cf:c1:da:f0:87:d5:e5:
                    d0:73:6f:2c:d7:f9:55:c9:e4:b4:24:2b:df:1c:0d:
                    fa:6e:58:b7:e7:f5:ce:36:a6:fc:19:e5:5b:c6:cf:
                    76:3e:9f:bd:bd:8d:0b:d2:c3:06:35:a2:2a:65:89:
                    76:c2:15:61:5e:f6:ff:7d:c9:fc:01:96:92:2d:d8:
                    9e:5b:04:03:42:e1:09:f3:12:af:b7:50:03:1f:b6:
                    c4:26:2a:91:5c:6c:10:a6:0e:c4:25:f1:9b:47:12:
                    96:ee:63:00:2c:ec:be:1f:8f:36:5b:7d:0e:70:e7:
                    c2:1f:9c:b9:c2:0a:48:80:47:75:40:37:5a:4e:72:
                    7f:14:d2:c1:fa:51:0c:0f:14:2e:d7:c1:5b:b8:a0:
                    a3:89:70:53:d2:91:ab:5d:c7:92:10:98:4b:3b:98:
                    47:2e:bd:d4:bf:d3:73:fe:66:3a:67:b8:32:f3:e6:
                    a9:4f:c2:2a:19:7a:10:3d:83:10:b5:ab:f4:85:34:
                    0d:28:ff:68:1c:18:05:3f:27:fa:5f:5a:c2:31:e9:
                    cc:ec:28:65:2e:58:37:5f:fe:ad:bf:59:9f:73:ea:
                    c8:e5:d7:8a:56:8a:86:46:52:02:5f:ba:86:b2:c6:
                    a3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:28:6D:8D:5D:96:C0:D7:7B:44:01:9A:86:D9:E5:54:FF:21:49:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e37ca2c5-a8b8-3b89-8068-85005e458722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:08:f4:27:0e:c6:e7:78:f2:f0:87:e7:78:70:29:eb:be:6b:
         10:0e:b4:20:70:3a:ac:f1:33:ea:dd:30:b5:6f:fb:41:b4:ca:
         06:30:05:ce:de:96:0a:74:f8:09:0b:0b:b9:08:43:34:4a:c4:
         53:5f:e3:8d:ce:70:0d:ab:f4:e0:28:72:c2:69:f5:7e:58:17:
         f1:37:28:eb:45:2e:e1:71:60:0e:2e:5e:d5:62:76:47:7e:12:
         d8:e0:b8:46:f9:30:52:9a:3f:1c:09:7b:84:65:32:ad:c6:2f:
         c9:87:99:16:29:40:d2:82:df:89:c6:a8:54:c3:30:30:03:bb:
         62:3f:df:e3:16:22:75:c9:40:43:f6:b6:cb:56:ec:cd:ad:6c:
         a1:3c:6a:fd:60:ee:4f:7b:b5:40:3e:58:27:29:8c:ec:2c:c8:
         a0:62:5f:c8:01:9f:69:74:b3:c1:6b:06:ad:51:f7:c4:69:39:
         de:9f:1f:cb:3e:34:f3:82:1f:42:1f:5c:4a:46:77:57:3b:88:
         9f:7e:59:46:d6:d7:3b:7f:ad:35:09:23:df:b7:25:70:fc:55:
         63:5c:5a:c4:6e:d4:bc:e3:02:2c:7d:8d:5e:ea:74:5d:b3:43:
         3f:87:be:b6:e7:16:04:ac:59:d7:3f:d3:1d:ba:98:fc:a8:9f:
         0f:15:7b:52
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5qbebSXtjTdw7Eh3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYyOTE1MjcwOFoXDTIyMDgwNDA0MDAwMFowLzEtMCsGA1UEAxMk
NGFjZjc4NzYtZGFmZi00OWQ5LWE0MmItYTljZjI4NWJhODhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpK+FvY+gRvhbKqxt7zzR2+CoUpkmM/B2vCH
1eXQc28s1/lVyeS0JCvfHA36bli35/XONqb8GeVbxs92Pp+9vY0L0sMGNaIqZYl2
whVhXvb/fcn8AZaSLdieWwQDQuEJ8xKvt1ADH7bEJiqRXGwQpg7EJfGbRxKW7mMA
LOy+H482W30OcOfCH5y5wgpIgEd1QDdaTnJ/FNLB+lEMDxQu18FbuKCjiXBT0pGr
XceSEJhLO5hHLr3Uv9Nz/mY6Z7gy8+apT8IqGXoQPYMQtav0hTQNKP9oHBgFPyf6
X1rCMenM7ChlLlg3X/6tv1mfc+rI5deKVoqGRlICX7qGssajAQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCUobY1dlsDXe0QBmobZ5VT/IUnYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZTM3Y2EyYzUtYThiOC0z
Yjg5LTgwNjgtODUwMDVlNDU4NzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEDcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEABgj0Jw7G53jy8IfneHAp675rEA60IHA6rPEz6t0wtW/7QbTKBjAFzt6W
CnT4CQsLuQhDNErEU1/jjc5wDav04Chywmn1flgX8Tco60Uu4XFgDi5e1WJ2R34S
2OC4RvkwUpo/HAl7hGUyrcYvyYeZFilA0oLficaoVMMwMAO7Yj/f4xYidclAQ/a2
y1bsza1soTxq/WDuT3u1QD5YJymM7CzIoGJfyAGfaXSzwWsGrVH3xGk53p8fyz40
84IfQh9cSkZ3VzuIn35ZRtbXO3+tNQkj37clcPxVY1xaxG7UvOMCLH2NXup0XbND
P4e+tucWBKxZ1z/THbqY/KifDxV7Ug==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:07 2025 by rpki-client