Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ea81713c-86e2-3a72-9bc7-269a1511d72e.roa
File:                     ea81713c-86e2-3a72-9bc7-269a1511d72e.roa (raw, json)
Hash identifier:          4W4UBUWXMO9oq4YhOiKxQGN1S4DQZnIhZQZ4PYNfibU=
Subject key identifier:   14:94:50:69:57:80:04:0C:2F:D8:7E:1A:78:D7:9E:E5:0A:E7:DD:61
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D512A77A721C9CE4202D5FB60
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ea81713c-86e2-3a72-9bc7-269a1511d72e.roa
Signing time:             Tue 22 Mar 2022 04:00:00 +0000
ROA not before:           Tue 22 Mar 2022 04:00:00 +0000
ROA not after:            Tue 26 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        162.208.123.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:51:2a:77:a7:21:c9:ce:42:02:d5:fb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 22 04:00:00 2022 GMT
            Not After : Apr 26 04:00:00 2022 GMT
        Subject: CN=805bb08d-0109-41d1-b805-2e5f093ec660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9d:53:c7:59:92:64:96:88:13:4e:d7:c6:7d:
                    e9:24:45:9a:27:7b:76:bf:9e:a0:d2:10:15:a2:23:
                    40:5d:a0:de:0d:7a:c9:45:2c:c1:33:45:24:7d:f9:
                    5d:e3:f4:2e:2c:53:0e:ab:1b:0b:82:65:4e:bc:25:
                    7e:c2:5d:4c:99:0e:ce:cd:ed:98:a8:cb:fc:6d:97:
                    22:d5:23:02:9d:c0:6c:f9:79:7b:06:d6:0c:b4:13:
                    e7:ae:49:0e:c2:32:f1:95:38:47:4b:1c:07:3d:96:
                    16:9a:45:37:13:c0:87:17:2a:62:a3:85:28:ca:e6:
                    4a:9b:00:d5:0b:ab:f9:46:0f:77:3c:e2:e4:1c:c1:
                    26:08:54:11:c3:83:a4:ec:60:bb:93:c5:a6:34:a1:
                    11:d7:20:08:38:06:20:66:21:e6:f9:f3:8e:a0:93:
                    0a:f4:47:9a:52:dc:55:ca:f6:c1:a2:11:6d:87:cc:
                    e9:6f:e9:72:3b:30:33:cf:63:52:17:54:4b:be:15:
                    cf:4d:b6:0b:f2:12:99:58:db:89:60:22:27:76:d1:
                    d9:78:81:be:1b:26:c4:67:df:4c:b1:03:d3:c1:94:
                    f5:49:bf:c5:ab:dc:41:54:bd:6c:c5:85:88:48:e5:
                    50:14:0a:98:75:7b:c3:0c:8b:6d:91:7e:73:97:7e:
                    7b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:94:50:69:57:80:04:0C:2F:D8:7E:1A:78:D7:9E:E5:0A:E7:DD:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ea81713c-86e2-3a72-9bc7-269a1511d72e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:e4:f2:77:4f:a0:3b:aa:3e:8d:6b:bb:bb:9c:4d:e1:ae:9a:
         7f:44:4a:91:99:86:2d:21:bb:14:d7:06:2e:3f:77:24:2a:b7:
         2e:17:fc:42:f8:66:ae:29:a4:ca:f2:7d:23:bc:bf:9d:1f:3f:
         2a:6c:b7:0c:9b:f4:62:24:35:d4:76:8c:0f:1b:75:1f:8f:2d:
         8b:33:91:a9:1e:55:dc:0e:57:2e:10:38:23:de:86:36:a4:c2:
         fa:60:d3:2e:7b:4d:c5:c8:82:00:3d:f6:db:1d:68:17:94:02:
         ed:d2:cc:75:37:07:f5:c9:64:bb:28:d8:14:eb:d3:f9:4f:e8:
         a8:17:ed:a6:fe:c4:3f:d3:1f:c3:e8:f5:7c:d3:39:f6:85:48:
         86:72:63:a5:83:6a:57:d9:63:1c:d4:e9:ca:11:2a:53:02:0a:
         ca:e8:66:68:1c:76:35:86:98:e8:5e:c3:82:42:06:d4:c5:2a:
         cc:2b:de:b7:95:4e:fb:a9:dd:0b:14:30:4d:e4:51:25:5d:ea:
         40:5d:17:bf:8d:c8:11:4d:42:9f:7c:61:f3:3b:be:26:65:30:
         da:16:74:35:5f:d4:6b:ad:20:2c:3d:72:90:0f:a5:c4:ed:64:
         3d:a1:1c:2d:4f:56:29:9b:3d:c9:b5:91:31:a1:f7:79:ee:63:
         36:6b:4a:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1RKnenIcnOQgLV+2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMyMjA0MDAwMFoXDTIyMDQyNjA0MDAwMFowLzEtMCsGA1UEAxMk
ODA1YmIwOGQtMDEwOS00MWQxLWI4MDUtMmU1ZjA5M2VjNjYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJ1Tx1mSZJaIE07Xxn3pJEWaJ3t2v56g0hAV
oiNAXaDeDXrJRSzBM0Ukffld4/QuLFMOqxsLgmVOvCV+wl1MmQ7Oze2YqMv8bZci
1SMCncBs+Xl7BtYMtBPnrkkOwjLxlThHSxwHPZYWmkU3E8CHFypio4UoyuZKmwDV
C6v5Rg93POLkHMEmCFQRw4Ok7GC7k8WmNKER1yAIOAYgZiHm+fOOoJMK9EeaUtxV
yvbBohFth8zpb+lyOzAzz2NSF1RLvhXPTbYL8hKZWNuJYCIndtHZeIG+GybEZ99M
sQPTwZT1Sb/Fq9xBVL1sxYWISOVQFAqYdXvDDIttkX5zl357cQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBSUUGlXgAQML9h+GnjXnuUK591hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZWE4MTcxM2MtODZlMi0z
YTcyLTliYzctMjY5YTE1MTFkNzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotB7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEfk8ndPoDuqPo1ru7ucTeGumn9ESpGZhi0huxTXBi4/dyQqty4X/EL4
Zq4ppMryfSO8v50fPypstwyb9GIkNdR2jA8bdR+PLYszkakeVdwOVy4QOCPehjak
wvpg0y57TcXIggA99tsdaBeUAu3SzHU3B/XJZLso2BTr0/lP6KgX7ab+xD/TH8Po
9XzTOfaFSIZyY6WDalfZYxzU6coRKlMCCsroZmgcdjWGmOhew4JCBtTFKswr3reV
Tvup3QsUME3kUSVd6kBdF7+NyBFNQp98YfM7viZlMNoWdDVf1GutICw9cpAPpcTt
ZD2hHC1PVimbPcm1kTGh93nuYzZrSsk=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:19 2025 by rpki-client