Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/efe15636-a12a-3830-8375-dc9d5e0c1283.roa
File:                     efe15636-a12a-3830-8375-dc9d5e0c1283.roa (raw, json)
Hash identifier:          qeT8vC3RV7ORi4FhOGybj9bYy27ZNJCPynE0TVooSDE=
Subject key identifier:   98:24:D9:C1:5F:8E:9C:69:BB:E6:DE:69:93:84:5B:28:AD:6F:5B:F8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E1E538E3EB36D316E08A76250
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/efe15636-a12a-3830-8375-dc9d5e0c1283.roa
Signing time:             Thu 02 Jun 2022 12:00:00 +0000
ROA not before:           Thu 02 Jun 2022 12:00:00 +0000
ROA not after:            Fri 08 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        107.20.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1e:53:8e:3e:b3:6d:31:6e:08:a7:62:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun  2 12:00:00 2022 GMT
            Not After : Jul  8 04:00:00 2022 GMT
        Subject: CN=24fb514f-9708-4c9c-8b8a-f22fa8b6a339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c0:ed:d9:94:61:e4:1c:99:4e:d5:b4:d3:ae:
                    1d:6f:52:a0:af:4e:80:65:97:43:18:5d:f6:bb:10:
                    51:89:b4:de:b1:0c:37:03:c7:f5:d5:ed:d0:02:d6:
                    cc:19:e2:d9:46:97:21:21:1b:ce:a5:fa:73:b8:2d:
                    81:93:15:d6:4b:6e:91:c5:84:71:58:c8:67:f1:4c:
                    a9:67:39:16:9f:58:a7:3c:62:c0:e6:80:76:7b:d5:
                    25:a0:86:99:18:2c:74:f3:f9:a7:e1:7b:36:25:90:
                    af:7a:d7:33:1d:08:5f:95:a4:8e:84:73:57:dd:52:
                    d9:f8:d3:06:1c:19:e3:1a:76:b2:06:1e:00:fa:3b:
                    13:16:d6:b1:11:86:17:fa:47:b7:da:75:9b:43:eb:
                    51:af:8a:0b:16:5a:f7:37:88:e6:79:45:95:1b:7b:
                    54:33:fe:c2:56:f5:e7:26:ac:29:b1:46:d2:60:f9:
                    49:b7:cd:2b:80:7d:d5:03:99:06:99:ea:6b:32:4d:
                    6d:59:0f:d4:76:d7:97:50:7f:e1:d0:01:8f:3e:1c:
                    64:74:1a:24:ea:23:07:3f:e5:47:56:fa:07:7a:e7:
                    b3:b5:ae:07:bb:b0:71:fd:47:71:c7:6d:d6:ca:6e:
                    ab:e4:a1:fa:c1:a7:e4:b2:eb:3a:58:7d:16:00:31:
                    55:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:24:D9:C1:5F:8E:9C:69:BB:E6:DE:69:93:84:5B:28:AD:6F:5B:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/efe15636-a12a-3830-8375-dc9d5e0c1283.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.20.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:b8:9c:59:8c:b9:6d:44:55:31:f7:a0:c0:aa:c5:8c:d7:ac:
         d3:37:3b:6a:82:e2:ba:a2:ca:d1:56:b6:16:19:3f:a1:af:c4:
         f5:35:f3:66:bc:9c:b5:b8:a5:9d:38:3f:d2:39:8d:f7:19:71:
         48:4f:2b:94:67:03:90:f0:4e:9f:02:f3:df:2b:32:e2:1e:7a:
         06:02:33:d4:c2:35:f6:1f:7a:ad:a4:1d:ae:0a:67:9d:5f:71:
         1f:c3:29:35:91:26:91:81:54:24:35:49:fd:47:1d:d5:c0:01:
         0b:8e:b5:31:f5:c3:db:eb:7f:73:db:9a:08:9f:d3:e4:d9:e0:
         82:e1:8c:c5:ca:a4:44:05:73:51:06:f8:7a:e9:62:cb:37:1d:
         eb:67:66:40:dd:47:a9:7e:25:37:8e:67:f3:0f:9e:bd:52:18:
         2e:23:27:9e:15:ad:59:af:2f:d5:ac:3f:0c:e2:93:ec:f8:ac:
         fa:21:18:3d:0b:ce:41:eb:80:d4:41:c4:c7:7e:40:2d:8e:af:
         a6:1b:9b:5f:16:07:1b:03:e6:98:91:0b:40:44:23:4f:95:42:
         72:f2:05:3c:36:3f:41:b0:ef:fc:dd:b7:41:d7:b3:04:ef:70:
         f1:68:95:f3:40:41:21:56:99:2e:5d:fd:4c:4c:8b:60:c4:ad:
         19:48:dd:3e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4eU44+s20xbginYlAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYwMjEyMDAwMFoXDTIyMDcwODA0MDAwMFowLzEtMCsGA1UEAxMk
MjRmYjUxNGYtOTcwOC00YzljLThiOGEtZjIyZmE4YjZhMzM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8Dt2ZRh5ByZTtW0064db1Kgr06AZZdDGF32
uxBRibTesQw3A8f11e3QAtbMGeLZRpchIRvOpfpzuC2BkxXWS26RxYRxWMhn8Uyp
ZzkWn1inPGLA5oB2e9UloIaZGCx08/mn4Xs2JZCvetczHQhflaSOhHNX3VLZ+NMG
HBnjGnayBh4A+jsTFtaxEYYX+ke32nWbQ+tRr4oLFlr3N4jmeUWVG3tUM/7CVvXn
JqwpsUbSYPlJt80rgH3VA5kGmeprMk1tWQ/UdteXUH/h0AGPPhxkdBok6iMHP+VH
VvoHeuezta4Hu7Bx/Udxx23Wym6r5KH6wafksus6WH0WADFVswIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJgk2cFfjpxpu+beaZOEWyitb1v4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZWZlMTU2MzYtYTEyYS0z
ODMwLTgzNzUtZGM5ZDVlMGMxMjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCaxQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACbicWYy5bURVMfegwKrFjNes0zc7aoLiuqLK0Va2Fhk/oa/E9TXzZryc
tbilnTg/0jmN9xlxSE8rlGcDkPBOnwLz3ysy4h56BgIz1MI19h96raQdrgpnnV9x
H8MpNZEmkYFUJDVJ/Ucd1cABC461MfXD2+t/c9uaCJ/T5NngguGMxcqkRAVzUQb4
euliyzcd62dmQN1HqX4lN45n8w+evVIYLiMnnhWtWa8v1aw/DOKT7Pis+iEYPQvO
QeuA1EHEx35ALY6vphubXxYHGwPmmJELQEQjT5VCcvIFPDY/QbDv/N23QdezBO9w
8WiV80BBIVaZLl39TEyLYMStGUjdPg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:48 2025 by rpki-client