Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e6359370-e350-3e7b-9e6d-26e79c885cec.roa
File:                     e6359370-e350-3e7b-9e6d-26e79c885cec.roa (raw, json)
Hash identifier:          VqJE1B8Sau0WVijILwHfCQgMfnXcbFnTnofht9EVhOM=
Subject key identifier:   E4:03:FE:98:B0:A8:84:36:86:A7:3F:5D:B1:B0:14:48:89:83:0E:4B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CE607BDA1A555A1E55A9EB3BE
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e6359370-e350-3e7b-9e6d-26e79c885cec.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        54.21.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e6:07:bd:a1:a5:55:a1:e5:5a:9e:b3:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=8eaf3ade-e613-4a57-a539-8c1ee3ace6f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:79:35:cc:bb:f5:7e:7c:11:9b:1f:27:7e:25:
                    4f:e5:fa:85:a5:fe:24:ce:f4:23:7e:39:79:f7:47:
                    69:ab:03:e5:89:d2:c1:73:6e:8f:51:2d:a1:c3:51:
                    0c:83:5a:98:8b:67:2a:d4:84:d0:29:1f:26:dc:65:
                    1c:6e:ea:26:6c:b1:7e:54:df:e9:04:f1:a0:b1:8d:
                    01:ff:c6:6b:58:97:0c:69:c9:3e:7d:5d:10:1e:ac:
                    21:fa:11:e9:00:15:c7:90:ed:3b:c9:86:aa:d0:b3:
                    bc:2f:42:00:38:6b:fd:ca:6d:67:e4:0f:5c:54:72:
                    e7:a7:84:46:ca:a9:7c:3f:75:d9:89:3d:48:cb:10:
                    55:9e:26:1f:e1:0c:36:5a:4c:72:77:3d:53:54:09:
                    4e:80:ba:9c:a2:c7:93:28:66:cf:58:4b:ee:27:c7:
                    2a:6d:3d:a7:af:50:71:70:38:d8:79:a2:66:29:6c:
                    e1:ff:99:84:0a:36:c7:9d:5c:c0:4f:b3:f5:85:5b:
                    52:d1:94:e3:94:a3:c7:0e:2c:e4:fa:39:3e:4a:51:
                    26:7d:c8:f0:ff:31:b1:a3:af:a3:0c:f6:e4:4e:84:
                    8d:c0:e9:92:bc:7c:15:dc:82:a6:64:12:8d:b3:71:
                    0f:41:37:de:b1:bf:a8:5f:22:10:00:d7:eb:6d:f9:
                    2e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:03:FE:98:B0:A8:84:36:86:A7:3F:5D:B1:B0:14:48:89:83:0E:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e6359370-e350-3e7b-9e6d-26e79c885cec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.21.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:87:bb:44:6e:e0:e4:9e:27:2b:22:5b:aa:b4:98:f6:82:3a:
         94:59:3a:e5:91:1c:e3:5d:5c:65:49:07:eb:3b:fb:68:dc:f5:
         51:4b:bc:1d:e9:a7:98:11:7c:20:7b:a6:e7:8e:9c:06:33:69:
         f7:63:1a:34:4c:57:81:95:90:2a:ce:57:ae:54:71:9a:bb:4a:
         0f:fb:b2:7e:c9:1c:04:cc:fa:41:f7:4c:30:81:16:ac:e7:8d:
         8c:4a:22:eb:b5:b9:9c:2a:61:6f:59:07:e1:bf:c1:f4:0e:1b:
         16:61:2f:26:dd:ca:e1:88:72:52:8b:a8:0d:0f:36:54:49:a8:
         8c:e7:fb:8b:bd:75:5a:00:d6:20:8c:1d:db:b5:1f:b7:ac:bf:
         f9:ab:00:33:7a:f0:23:3f:59:ed:f1:99:99:ad:e6:52:52:25:
         f6:c6:f6:00:99:19:95:3b:be:ac:9c:b9:62:8e:d2:87:c3:67:
         f8:66:62:6f:3a:cb:62:71:d8:ac:5a:7d:86:47:5d:2d:85:19:
         72:e4:46:d0:03:a7:c3:1d:b2:4e:49:b4:d3:f4:4a:05:d2:17:
         c6:76:8a:47:18:ef:bc:42:d0:42:78:f1:0c:2b:4b:ec:ce:2d:
         de:4a:ea:75:78:18:d6:17:2f:a8:84:4f:4e:db:5e:89:e6:17:
         ff:4a:07:b8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzmB72hpVWh5Vqes74wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDIxMTA1MDAwMFoXDTIyMDMxODA0MDAwMFowLzEtMCsGA1UEAxMk
OGVhZjNhZGUtZTYxMy00YTU3LWE1MzktOGMxZWUzYWNlNmY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXk1zLv1fnwRmx8nfiVP5fqFpf4kzvQjfjl5
90dpqwPlidLBc26PUS2hw1EMg1qYi2cq1ITQKR8m3GUcbuombLF+VN/pBPGgsY0B
/8ZrWJcMack+fV0QHqwh+hHpABXHkO07yYaq0LO8L0IAOGv9ym1n5A9cVHLnp4RG
yql8P3XZiT1IyxBVniYf4Qw2Wkxydz1TVAlOgLqcoseTKGbPWEvuJ8cqbT2nr1Bx
cDjYeaJmKWzh/5mECjbHnVzAT7P1hVtS0ZTjlKPHDizk+jk+SlEmfcjw/zGxo6+j
DPbkToSNwOmSvHwV3IKmZBKNs3EPQTfesb+oXyIQANfrbfku7QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOQD/piwqIQ2hqc/XbGwFEiJgw5LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZTYzNTkzNzAtZTM1MC0z
ZTdiLTllNmQtMjZlNzljODg1Y2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANhUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAV4e7RG7g5J4nKyJbqrSY9oI6lFk65ZEc411cZUkH6zv7aNz1UUu8Hemn
mBF8IHum546cBjNp92MaNExXgZWQKs5XrlRxmrtKD/uyfskcBMz6QfdMMIEWrOeN
jEoi67W5nCphb1kH4b/B9A4bFmEvJt3K4YhyUouoDQ82VEmojOf7i711WgDWIIwd
27Uft6y/+asAM3rwIz9Z7fGZma3mUlIl9sb2AJkZlTu+rJy5Yo7Sh8Nn+GZibzrL
YnHYrFp9hkddLYUZcuRG0AOnwx2yTkm00/RKBdIXxnaKRxjvvELQQnjxDCtL7M4t
3krqdXgY1hcvqIRPTtteieYX/0oHuA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:12 2025 by rpki-client