Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f04e06a6-f572-3b81-a33b-64e006df1b72.roa
File:                     f04e06a6-f572-3b81-a33b-64e006df1b72.roa (raw, json)
Hash identifier:          d2qTViwpATlLTowqXQ5AkRtzJc9YvjDTO34JjORONrE=
Subject key identifier:   88:C7:8B:A0:28:49:FD:9E:7C:95:CF:0E:89:D9:58:66:65:8F:62:67
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FAACF5C5ACBAAA1FB160C0080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f04e06a6-f572-3b81-a33b-64e006df1b72.roa
Signing time:             Sat 22 Oct 2022 12:00:00 +0000
ROA not before:           Sat 22 Oct 2022 12:00:00 +0000
ROA not after:            Sun 27 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        104.200.224.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:aa:cf:5c:5a:cb:aa:a1:fb:16:0c:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 22 12:00:00 2022 GMT
            Not After : Nov 27 05:00:00 2022 GMT
        Subject: CN=148bb821-a095-4968-95d2-33219e49d2a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:51:04:20:8d:68:f3:de:2e:7d:19:88:32:87:
                    7b:dd:3c:d9:56:bc:b6:67:93:ee:c5:cb:32:99:1a:
                    21:3b:5c:d9:90:f3:bc:99:f7:5d:90:ef:1a:6a:e4:
                    60:4e:2e:ca:f5:af:85:8c:cf:20:76:83:97:03:96:
                    cf:47:39:11:23:49:72:f6:f3:7c:ca:74:f3:f5:26:
                    5c:4e:ad:80:83:9a:5b:89:b0:ba:a1:be:0a:24:06:
                    c5:0e:85:30:24:99:72:55:4b:26:d1:d9:d9:73:2f:
                    f6:74:39:a8:5f:a8:eb:e2:df:ae:b9:b1:1c:f0:79:
                    f5:de:36:11:21:54:68:59:64:a3:71:33:cc:d7:58:
                    30:9b:1b:ef:ce:7e:c2:9a:90:10:e8:bb:16:45:58:
                    ab:49:56:14:da:11:15:9d:51:90:13:70:bc:1d:af:
                    57:33:ec:d0:4a:03:d7:c8:a7:35:07:41:27:96:64:
                    00:fa:df:95:b6:dc:37:fc:49:4e:49:71:ce:ad:c6:
                    1f:69:6a:de:e3:b7:38:6c:78:e3:45:32:20:cb:2d:
                    d2:78:3e:e2:b6:7d:62:28:f3:35:54:52:9d:09:9c:
                    15:4a:c8:52:0a:74:e4:c8:06:5e:6b:45:fe:0a:99:
                    ef:cd:54:ed:14:3f:41:1e:09:20:a6:60:6d:27:0d:
                    c4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C7:8B:A0:28:49:FD:9E:7C:95:CF:0E:89:D9:58:66:65:8F:62:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f04e06a6-f572-3b81-a33b-64e006df1b72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.200.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:be:d9:df:b4:cb:74:14:01:4c:3a:95:3f:97:8b:b6:26:96:
         08:f6:47:9a:e4:76:e1:0a:50:ff:22:ad:32:1e:f9:22:c5:f7:
         9c:ac:aa:5a:fe:27:3a:23:7d:8f:32:09:91:20:2f:bb:f0:65:
         d0:67:21:d4:95:ca:06:62:08:26:e4:6c:4a:5e:03:72:9b:d7:
         22:13:f5:5c:aa:cc:17:d8:4d:a8:0f:e2:45:24:9b:78:c0:89:
         9f:c6:f3:c9:32:e0:82:7d:0d:39:c3:14:6b:94:3b:8b:49:d6:
         51:e1:5f:39:a4:d6:78:58:0b:4b:9f:3e:79:33:a0:2c:7d:84:
         d6:e9:e6:7d:0a:2e:35:8c:6c:3e:bc:e9:6a:93:c4:d5:d1:15:
         73:ee:16:40:91:88:c6:55:82:4f:91:1b:44:d6:c7:3e:38:6e:
         a9:93:89:05:f7:aa:27:89:37:e3:9b:a9:4a:89:d4:02:4d:96:
         03:c2:9f:f6:00:33:f4:1b:00:67:07:72:82:ed:02:a2:d4:b5:
         f4:c3:16:24:d1:31:8b:1a:ef:6d:66:aa:a9:ef:74:d0:a8:ff:
         2c:52:11:c3:33:8d:a0:c0:fd:82:d5:88:ac:ea:69:cb:64:da:
         e3:a7:e1:b8:3e:ca:c0:73:0a:db:9b:97:b6:48:df:09:b8:2b:
         c3:42:1b:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD+qz1xay6qh+xYMAIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAyMjEyMDAwMFoXDTIyMTEyNzA1MDAwMFowLzEtMCsGA1UEAxMk
MTQ4YmI4MjEtYTA5NS00OTY4LTk1ZDItMzMyMTllNDlkMmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lEEII1o894ufRmIMod73TzZVry2Z5Puxcsy
mRohO1zZkPO8mfddkO8aauRgTi7K9a+FjM8gdoOXA5bPRzkRI0ly9vN8ynTz9SZc
Tq2Ag5pbibC6ob4KJAbFDoUwJJlyVUsm0dnZcy/2dDmoX6jr4t+uubEc8Hn13jYR
IVRoWWSjcTPM11gwmxvvzn7CmpAQ6LsWRVirSVYU2hEVnVGQE3C8Ha9XM+zQSgPX
yKc1B0EnlmQA+t+Vttw3/ElOSXHOrcYfaWre47c4bHjjRTIgyy3SeD7itn1iKPM1
VFKdCZwVSshSCnTkyAZea0X+CpnvzVTtFD9BHgkgpmBtJw3EBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIjHi6AoSf2efJXPDonZWGZlj2JnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjA0ZTA2YTYtZjU3Mi0z
YjgxLWEzM2ItNjRlMDA2ZGYxYjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMjgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIy+2d+0y3QUAUw6lT+Xi7Ymlgj2R5rkduEKUP8irTIe+SLF95ysqlr+
JzojfY8yCZEgL7vwZdBnIdSVygZiCCbkbEpeA3Kb1yIT9VyqzBfYTagP4kUkm3jA
iZ/G88ky4IJ9DTnDFGuUO4tJ1lHhXzmk1nhYC0ufPnkzoCx9hNbp5n0KLjWMbD68
6WqTxNXRFXPuFkCRiMZVgk+RG0TWxz44bqmTiQX3qieJN+ObqUqJ1AJNlgPCn/YA
M/QbAGcHcoLtAqLUtfTDFiTRMYsa721mqqnvdNCo/yxSEcMzjaDA/YLViKzqactk
2uOn4bg+ysBzCtubl7ZI3wm4K8NCG/s=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:58 2025 by rpki-client