Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1a68cfb-3a84-37d3-ae9b-8e00bd1c3d36.roa
File:                     f1a68cfb-3a84-37d3-ae9b-8e00bd1c3d36.roa (raw, json)
Hash identifier:          JDlqA0Zc38WfaeAhH+JqsVDc7AtKdhvoNbyGDjCmFOs=
Subject key identifier:   B6:91:DF:DD:D9:75:E4:AE:2C:B4:00:6A:4B:0F:23:C0:32:FC:03:62
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D7D21DE57D626235C0E418500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1a68cfb-3a84-37d3-ae9b-8e00bd1c3d36.roa
Signing time:             Wed 06 Apr 2022 04:00:00 +0000
ROA not before:           Wed 06 Apr 2022 04:00:00 +0000
ROA not after:            Wed 11 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        40.166.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:7d:21:de:57:d6:26:23:5c:0e:41:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr  6 04:00:00 2022 GMT
            Not After : May 11 04:00:00 2022 GMT
        Subject: CN=f763c145-49c6-4c12-84b2-219db8f700aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fd:d9:5c:9a:06:5c:e2:c1:54:26:b3:24:34:
                    04:65:0d:66:2a:34:90:ca:16:41:70:47:38:6d:27:
                    97:7a:ad:23:68:75:07:33:04:53:d8:ee:3e:15:5c:
                    73:87:02:ed:7f:53:8d:fa:8e:a1:22:6b:fc:4a:92:
                    12:f8:50:66:a4:fa:ef:78:b7:c4:26:57:30:19:92:
                    3f:cd:df:ac:e1:3e:fb:97:ff:2e:b3:a0:70:6d:b1:
                    d6:1e:7f:3d:79:c4:95:b7:98:fb:7c:62:a8:89:2a:
                    7b:df:2b:85:5f:6c:bd:01:4c:53:51:5f:3f:57:ba:
                    b8:3d:29:50:16:4a:6c:81:7c:42:75:55:98:28:90:
                    e4:ad:0f:02:10:f0:37:e7:f7:37:9b:a1:40:64:7b:
                    ea:89:04:0b:81:8c:fa:56:8d:a1:f9:85:4c:a7:67:
                    09:40:8f:bc:c8:d7:02:ba:8a:48:f4:76:94:4b:39:
                    d7:eb:cb:42:f2:c7:0d:8f:1e:80:f5:67:74:fe:38:
                    b9:30:90:89:81:6a:05:99:77:24:b5:e2:7f:dc:7f:
                    08:42:38:6d:c9:68:29:6d:9d:d4:ed:c3:7f:74:36:
                    b8:0f:94:bf:f7:9f:a0:ce:53:5d:59:34:e9:16:ed:
                    6f:fa:07:91:8a:19:5d:c3:b7:6b:b2:35:bf:49:5d:
                    15:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:91:DF:DD:D9:75:E4:AE:2C:B4:00:6A:4B:0F:23:C0:32:FC:03:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1a68cfb-3a84-37d3-ae9b-8e00bd1c3d36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.166.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:a6:11:7f:22:1b:60:fa:24:16:9d:65:cc:42:1f:88:3d:73:
         ab:fa:c6:00:30:2a:53:73:de:7d:c1:47:b1:ae:42:cc:01:4c:
         c6:6e:a1:cb:4c:45:a6:a4:bc:0f:67:57:b5:ca:71:4c:b5:db:
         af:31:66:d5:be:5a:b1:d6:c2:7b:3b:58:59:3a:03:af:d9:17:
         75:ac:ba:e8:02:10:50:dd:bd:62:0e:f5:84:15:db:2c:c7:99:
         22:36:30:66:90:60:fe:b4:e1:7f:e9:c6:5a:d1:b1:27:1e:51:
         df:2c:72:b8:49:87:b0:e8:a3:4a:0a:4d:8a:a4:94:dd:65:7f:
         bc:fa:44:53:f4:c9:7c:3d:cb:44:6e:4e:5a:dc:8f:7a:fd:6d:
         af:87:d6:7a:64:c7:4a:db:f2:21:26:e5:79:76:a1:61:78:89:
         f8:3f:ab:08:db:2f:6a:a9:56:b9:21:07:b7:28:b7:4d:58:d7:
         d5:6b:f6:b5:6a:b2:eb:53:7e:ea:e0:5f:92:af:2c:14:ee:68:
         d6:87:e0:43:89:f1:2b:1a:ac:f4:ea:41:16:8a:a7:36:4b:89:
         65:b0:a3:74:ac:6f:60:13:ea:27:de:62:8f:b6:78:b9:66:16:
         e0:bb:ea:0e:f0:af:46:2f:45:f9:b9:9b:85:1f:0e:e1:2d:13:
         d8:76:63:44
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD19Id5X1iYjXA5BhQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDQwNjA0MDAwMFoXDTIyMDUxMTA0MDAwMFowLzEtMCsGA1UEAxMk
Zjc2M2MxNDUtNDljNi00YzEyLTg0YjItMjE5ZGI4ZjcwMGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv3ZXJoGXOLBVCazJDQEZQ1mKjSQyhZBcEc4
bSeXeq0jaHUHMwRT2O4+FVxzhwLtf1ON+o6hImv8SpIS+FBmpPrveLfEJlcwGZI/
zd+s4T77l/8us6BwbbHWHn89ecSVt5j7fGKoiSp73yuFX2y9AUxTUV8/V7q4PSlQ
FkpsgXxCdVWYKJDkrQ8CEPA35/c3m6FAZHvqiQQLgYz6Vo2h+YVMp2cJQI+8yNcC
uopI9HaUSznX68tC8scNjx6A9Wd0/ji5MJCJgWoFmXckteJ/3H8IQjhtyWgpbZ3U
7cN/dDa4D5S/95+gzlNdWTTpFu1v+geRihldw7drsjW/SV0VpQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLaR393ZdeSuLLQAaksPI8Ay/ANiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjFhNjhjZmItM2E4NC0z
N2QzLWFlOWItOGUwMGJkMWMzZDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKKYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEASaYRfyIbYPokFp1lzEIfiD1zq/rGADAqU3PefcFHsa5CzAFMxm6hy0xF
pqS8D2dXtcpxTLXbrzFm1b5asdbCeztYWToDr9kXday66AIQUN29Yg71hBXbLMeZ
IjYwZpBg/rThf+nGWtGxJx5R3yxyuEmHsOijSgpNiqSU3WV/vPpEU/TJfD3LRG5O
WtyPev1tr4fWemTHStvyISbleXahYXiJ+D+rCNsvaqlWuSEHtyi3TVjX1Wv2tWqy
61N+6uBfkq8sFO5o1ofgQ4nxKxqs9OpBFoqnNkuJZbCjdKxvYBPqJ95ij7Z4uWYW
4LvqDvCvRi9F+bmbhR8O4S0T2HZjRA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 01:16:57 2025 by rpki-client