Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ea8ef929-8de6-3b7a-944b-7600ee3fb57b.roa
File:                     ea8ef929-8de6-3b7a-944b-7600ee3fb57b.roa (raw, json)
Hash identifier:          SYHuAlZUqFSa1vZF1rEvXuXFDYqU4bLxCgNvKAezzJg=
Subject key identifier:   B0:B6:24:9B:B2:D8:7D:99:0B:8B:D3:EC:63:1A:65:B9:5A:CE:C4:D8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C783158890105B2E6A3443080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ea8ef929-8de6-3b7a-944b-7600ee3fb57b.roa
Signing time:             Mon 03 Jan 2022 05:00:00 +0000
ROA not before:           Mon 03 Jan 2022 05:00:00 +0000
ROA not after:            Mon 07 Feb 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        153.12.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:78:31:58:89:01:05:b2:e6:a3:44:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  3 05:00:00 2022 GMT
            Not After : Feb  7 05:00:00 2022 GMT
        Subject: CN=b8206b27-764a-42b7-9a68-03a6ea2b4812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a6:3c:a7:67:2c:ca:c4:df:7b:cf:2f:ac:71:
                    ce:e3:a5:2a:d3:ca:36:b4:d7:6a:db:73:c0:7a:db:
                    c3:ac:90:6e:45:3e:f2:89:20:3a:3c:e6:69:15:71:
                    de:7e:e2:0c:5e:0c:81:b2:83:da:ac:92:1f:99:a1:
                    18:77:7d:3f:2c:cd:a5:09:b9:f2:ed:fb:12:7b:3d:
                    b2:e2:e5:ae:9d:60:3a:e6:98:ca:34:45:cd:dc:e8:
                    9e:05:cf:c8:15:9f:d8:d5:5b:f6:84:df:f0:42:4a:
                    51:92:46:03:93:c1:eb:bc:51:21:cb:b8:f6:8d:af:
                    09:1c:0e:56:ab:2f:2d:e0:b4:b5:50:a9:78:69:12:
                    97:8b:bc:bf:e3:a4:12:c9:48:66:07:d9:ec:f0:7c:
                    b4:17:76:55:6b:6c:e7:ac:6b:0c:e1:c7:b8:dc:70:
                    92:da:59:57:e9:44:3f:1a:70:02:19:0d:60:bb:6e:
                    1f:e7:cd:5d:46:ac:62:e1:de:63:bc:0f:16:31:96:
                    55:e0:dc:cb:62:6f:58:95:57:a3:ea:1a:e5:99:02:
                    75:b3:0e:8d:f2:3e:5c:0d:f6:aa:da:1c:29:ac:29:
                    17:ae:c0:ce:e5:12:82:9d:54:a8:aa:75:47:be:27:
                    1d:d2:f4:f5:97:86:7b:e0:6e:64:7e:36:e5:53:92:
                    ef:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B6:24:9B:B2:D8:7D:99:0B:8B:D3:EC:63:1A:65:B9:5A:CE:C4:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ea8ef929-8de6-3b7a-944b-7600ee3fb57b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.12.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:37:2b:cb:a1:8e:b8:a9:75:9f:63:cd:56:ff:e5:1c:53:30:
         d0:d1:b3:d1:dc:2f:4d:9a:e8:34:e1:e8:56:37:57:3f:1b:1e:
         96:89:85:93:7e:fe:a6:95:7e:9c:e5:00:99:b7:c3:9c:5e:43:
         75:47:4e:b7:97:65:15:30:99:4d:e3:dc:15:84:df:b8:c7:92:
         9b:7c:84:a7:04:40:2b:95:90:62:27:42:21:b9:17:0a:78:bf:
         3d:b6:5d:b9:d5:b3:b4:82:98:02:94:cc:5c:98:93:19:53:83:
         77:a0:ed:db:32:d4:3b:d1:fd:0c:53:d5:ac:30:2b:81:f0:cd:
         3f:28:10:1c:db:77:e7:86:54:39:40:78:29:32:04:46:12:70:
         da:ee:23:db:89:3a:3b:05:f6:33:d2:5c:2f:97:0c:bd:97:f3:
         c6:21:87:48:70:77:75:5e:95:2c:56:86:32:8a:ae:8c:07:7f:
         9d:51:9e:bd:55:09:9a:e1:af:ed:2e:14:5b:dd:eb:50:d1:3a:
         fd:8d:96:d1:1d:6c:db:28:f8:4a:23:7a:35:5e:6d:b2:df:0a:
         13:4b:78:cb:23:9f:64:e7:5c:86:8d:c6:c3:67:29:20:b5:5c:
         df:d8:6c:6f:4e:7b:1b:10:c0:75:22:e0:40:15:2c:82:cc:bb:
         be:01:3c:cc
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDx4MViJAQWy5qNEMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDEwMzA1MDAwMFoXDTIyMDIwNzA1MDAwMFowLzEtMCsGA1UEAxMk
YjgyMDZiMjctNzY0YS00MmI3LTlhNjgtMDNhNmVhMmI0ODEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KY8p2csysTfe88vrHHO46Uq08o2tNdq23PA
etvDrJBuRT7yiSA6POZpFXHefuIMXgyBsoParJIfmaEYd30/LM2lCbny7fsSez2y
4uWunWA65pjKNEXN3OieBc/IFZ/Y1Vv2hN/wQkpRkkYDk8HrvFEhy7j2ja8JHA5W
qy8t4LS1UKl4aRKXi7y/46QSyUhmB9ns8Hy0F3ZVa2znrGsM4ce43HCS2llX6UQ/
GnACGQ1gu24f581dRqxi4d5jvA8WMZZV4NzLYm9YlVej6hrlmQJ1sw6N8j5cDfaq
2hwprCkXrsDO5RKCnVSoqnVHvicd0vT1l4Z74G5kfjblU5LvuQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLC2JJuy2H2ZC4vT7GMaZblazsTYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZWE4ZWY5MjktOGRlNi0z
YjdhLTk0NGItNzYwMGVlM2ZiNTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmQwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAJjcry6GOuKl1n2PNVv/lHFMw0NGz0dwvTZroNOHoVjdXPxselomFk37+
ppV+nOUAmbfDnF5DdUdOt5dlFTCZTePcFYTfuMeSm3yEpwRAK5WQYidCIbkXCni/
PbZdudWztIKYApTMXJiTGVODd6Dt2zLUO9H9DFPVrDArgfDNPygQHNt354ZUOUB4
KTIERhJw2u4j24k6OwX2M9JcL5cMvZfzxiGHSHB3dV6VLFaGMoqujAd/nVGevVUJ
muGv7S4UW93rUNE6/Y2W0R1s2yj4SiN6NV5tst8KE0t4yyOfZOdcho3Gw2cpILVc
39hsb057GxDAdSLgQBUsgsy7vgE8zA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:04:57 2025 by rpki-client