Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e5b33764-7984-3045-86f7-35fac8c38f9c.roa
File:                     e5b33764-7984-3045-86f7-35fac8c38f9c.roa (raw, json)
Hash identifier:          ZZhRmpMGjdl3pVzTB3EfUSj+nEuG4CoQ2jFu+oy5Kro=
Subject key identifier:   74:F0:0A:CC:4F:AF:B0:72:AA:9D:39:B6:A6:08:59:2A:4C:25:07:26
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858406DA6927EDB847D077295EB00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e5b33764-7984-3045-86f7-35fac8c38f9c.roa
Signing time:             Sat 31 Dec 2022 12:00:00 +0000
ROA not before:           Sat 31 Dec 2022 12:00:00 +0000
ROA not after:            Sun 05 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        104.153.112.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6d:a6:92:7e:db:84:7d:07:72:95:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 31 12:00:00 2022 GMT
            Not After : Feb  5 05:00:00 2023 GMT
        Subject: CN=bec759b7-38e4-4782-89d5-8e22e6fd5afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:15:41:c8:57:d3:af:c5:77:d4:3e:be:9c:e3:
                    de:fa:b9:f9:23:ef:84:dd:73:a1:75:6d:46:f8:24:
                    36:ad:4c:86:c1:ae:7c:5a:40:c2:70:f4:27:44:9a:
                    a6:fa:1e:f7:10:e5:a3:92:39:8f:2c:47:b3:fb:df:
                    61:28:e7:b9:7d:0b:1e:35:c0:c3:0c:0c:ce:91:1f:
                    38:cf:64:97:93:18:7f:c1:77:d7:d7:e2:eb:2e:a1:
                    1a:a5:03:68:11:1e:35:4a:7c:50:fd:48:7a:84:f2:
                    1a:f0:fc:1c:2b:8a:3e:3f:9d:5f:5e:1e:12:b4:0f:
                    25:06:81:21:e6:6b:a7:69:df:60:1e:db:60:97:cc:
                    a2:b1:55:bd:c2:4b:5d:02:9c:a8:7e:a8:d1:5e:fb:
                    dc:d5:e1:e4:54:ce:24:eb:bc:11:dd:12:92:28:05:
                    8b:04:9a:dc:58:63:58:0a:8d:79:a5:ab:be:83:bd:
                    79:d1:e9:aa:ae:6d:7a:1d:8e:1c:f0:2c:7d:44:fc:
                    4a:23:2f:44:a6:cc:fb:af:63:02:b9:e8:55:c5:8f:
                    b2:32:52:e3:99:af:e8:23:6b:15:61:e0:92:cd:57:
                    37:3c:67:84:a1:da:07:53:a1:e9:81:1a:a1:f6:d2:
                    54:49:97:c0:8c:b5:c4:5b:19:08:80:d3:85:6b:2c:
                    26:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F0:0A:CC:4F:AF:B0:72:AA:9D:39:B6:A6:08:59:2A:4C:25:07:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e5b33764-7984-3045-86f7-35fac8c38f9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:ba:9c:c7:40:27:fc:81:14:a3:31:ed:86:55:b2:26:6a:86:
         b0:d1:fd:b2:be:dc:da:30:cf:1e:b6:ee:ec:33:f3:ec:16:f0:
         6a:6a:03:35:2d:2b:6e:60:55:c0:a4:13:60:91:1c:75:86:d6:
         a8:fc:5e:19:49:d1:25:59:1a:87:35:da:20:1e:29:3d:6d:19:
         ed:2b:65:3e:2b:c0:4b:f0:7e:c6:b5:5c:cf:bb:01:85:9a:06:
         0b:66:a4:54:36:bf:56:c4:1a:09:e1:56:cc:6c:16:9d:36:22:
         4c:b4:12:0b:5a:7a:b5:7e:7f:c5:95:cb:b6:c6:bb:a3:af:3a:
         cc:61:b1:27:a3:b0:c8:ce:e2:df:f3:25:53:2b:7d:6b:37:f6:
         f3:b4:96:35:b8:89:86:52:16:c4:ce:1d:4f:70:92:aa:68:e7:
         ee:b6:36:d4:ea:a4:fe:b0:66:a4:22:26:8a:3d:ee:33:3a:d9:
         86:25:30:c2:48:9e:a1:b3:62:a7:c3:f4:1f:18:52:28:11:8f:
         00:d4:cd:19:ea:57:af:cb:14:af:95:ae:ff:06:a9:41:05:75:
         02:78:d7:cb:8a:f9:83:8b:fc:95:73:47:bc:87:f9:47:06:bc:
         45:93:8f:a2:78:be:76:32:9c:99:5a:b1:bf:13:d6:b2:de:58:
         b7:af:90:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBtppJ+24R9B3KV6wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIzMTEyMDAwMFoXDTIzMDIwNTA1MDAwMFowLzEtMCsGA1UEAxMk
YmVjNzU5YjctMzhlNC00NzgyLTg5ZDUtOGUyMmU2ZmQ1YWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihVByFfTr8V31D6+nOPe+rn5I++E3XOhdW1G
+CQ2rUyGwa58WkDCcPQnRJqm+h73EOWjkjmPLEez+99hKOe5fQseNcDDDAzOkR84
z2SXkxh/wXfX1+LrLqEapQNoER41SnxQ/Uh6hPIa8PwcK4o+P51fXh4StA8lBoEh
5munad9gHttgl8yisVW9wktdApyofqjRXvvc1eHkVM4k67wR3RKSKAWLBJrcWGNY
Co15pau+g7150emqrm16HY4c8Cx9RPxKIy9Epsz7r2MCuehVxY+yMlLjma/oI2sV
YeCSzVc3PGeEodoHU6HpgRqh9tJUSZfAjLXEWxkIgNOFaywmKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHTwCsxPr7Byqp05tqYIWSpMJQcmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZTViMzM3NjQtNzk4NC0z
MDQ1LTg2ZjctMzVmYWM4YzM4ZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaJlwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACS6nMdAJ/yBFKMx7YZVsiZqhrDR/bK+3Nowzx627uwz8+wW8GpqAzUt
K25gVcCkE2CRHHWG1qj8XhlJ0SVZGoc12iAeKT1tGe0rZT4rwEvwfsa1XM+7AYWa
BgtmpFQ2v1bEGgnhVsxsFp02Iky0EgtaerV+f8WVy7bGu6OvOsxhsSejsMjO4t/z
JVMrfWs39vO0ljW4iYZSFsTOHU9wkqpo5+62NtTqpP6wZqQiJoo97jM62YYlMMJI
nqGzYqfD9B8YUigRjwDUzRnqV6/LFK+Vrv8GqUEFdQJ418uK+YOL/JVzR7yH+UcG
vEWTj6J4vnYynJlasb8T1rLeWLevkE4=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:17:20 2025 by rpki-client