Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1d24214-f118-3d27-8bd1-ac0d69eace77.roa
File:                     f1d24214-f118-3d27-8bd1-ac0d69eace77.roa (raw, json)
Hash identifier:          NNJWSGAfX0ZGqeZeLD5eElpvJLhw99VoN2OkTkXHEgs=
Subject key identifier:   85:CD:AC:8C:B1:64:51:A7:A1:30:43:40:8F:4C:0B:64:75:6E:FA:25
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D15B8D262B414CBB164FC9A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1d24214-f118-3d27-8bd1-ac0d69eace77.roa
Signing time:             Mon 28 Feb 2022 05:00:00 +0000
ROA not before:           Mon 28 Feb 2022 05:00:00 +0000
ROA not after:            Mon 04 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        40.179.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:15:b8:d2:62:b4:14:cb:b1:64:fc:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 28 05:00:00 2022 GMT
            Not After : Apr  4 04:00:00 2022 GMT
        Subject: CN=e84e225d-53b6-4f9e-942d-9b24ceccd629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:82:3a:69:db:75:1b:23:db:5c:ad:bc:35:66:
                    87:df:f8:30:70:ec:8f:26:5b:9b:a2:db:08:39:61:
                    42:9c:6f:36:a4:d1:22:28:d0:8b:14:68:14:13:12:
                    13:be:e7:25:b4:85:ab:49:f3:de:51:cc:d0:34:1a:
                    75:e0:be:75:4f:bc:38:7e:37:08:50:81:fc:51:52:
                    6d:e7:47:cc:e1:d5:5c:f9:73:d4:d9:cb:7a:3a:c1:
                    a6:3b:97:8a:fb:73:1f:84:6e:91:09:66:10:cd:db:
                    62:89:83:f8:18:61:57:07:63:c6:f4:36:6e:91:bd:
                    a6:4d:d4:30:aa:56:00:49:66:23:c7:12:74:0a:89:
                    80:54:7a:83:23:8a:19:e3:e0:3b:b7:5c:50:65:38:
                    d3:50:75:84:96:b0:db:aa:19:aa:90:bc:df:c7:9a:
                    52:04:bc:72:93:d8:b3:20:e2:54:3d:48:56:8e:cb:
                    ec:56:09:94:b1:fb:f8:5e:64:36:7c:f1:10:ef:71:
                    8b:ef:cc:9e:5a:8a:f0:3c:be:5b:68:0b:68:a0:97:
                    e0:cc:4b:fc:33:5a:66:8f:c0:10:52:86:97:de:08:
                    fc:df:d1:17:27:90:23:2e:f9:11:cb:0b:92:f6:c0:
                    9f:a5:5e:b9:59:f3:64:de:5d:c3:9b:91:bf:35:f8:
                    5f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CD:AC:8C:B1:64:51:A7:A1:30:43:40:8F:4C:0B:64:75:6E:FA:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1d24214-f118-3d27-8bd1-ac0d69eace77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.179.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:81:85:64:fa:47:d7:5f:f3:5e:dd:e1:49:c6:6a:b2:16:0a:
         c7:cf:6d:aa:fb:47:c8:f0:e0:cf:16:f4:c6:59:88:8d:74:f5:
         b2:c5:94:48:9e:15:fc:bd:bd:2b:13:bb:be:9b:d3:bc:41:ea:
         45:1a:ae:03:87:73:88:69:4e:89:3f:89:9b:2a:6d:b4:98:1f:
         c3:f5:cd:b0:9a:3f:dc:7a:a5:8d:98:a3:01:2b:0a:df:61:56:
         bd:ef:92:76:62:6c:a9:00:e2:10:e0:b3:15:2d:75:f1:55:cc:
         39:9d:05:4b:02:c7:da:fe:40:48:65:21:4f:90:2d:9a:5c:63:
         71:99:29:f5:de:2b:6e:8f:66:74:d2:0a:60:ea:b3:4a:f9:a3:
         0c:1f:94:67:14:79:92:81:7b:4a:6e:ed:d7:6a:c8:06:47:6b:
         d5:cb:a9:cd:e4:c6:a6:3d:fe:98:15:37:06:21:52:6e:1f:d9:
         70:be:9f:bf:1d:b3:cf:4c:29:01:d6:df:70:b4:93:50:df:c8:
         73:80:06:b9:ee:47:03:01:a0:d7:1e:82:44:9a:2a:67:b3:88:
         29:98:a6:c6:7f:38:84:b5:91:17:15:33:66:5e:be:a5:e2:45:
         a4:d6:d9:8e:42:ad:be:5f:80:20:a2:c7:1e:fa:5b:4f:44:0f:
         45:44:15:0e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0VuNJitBTLsWT8moAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDIyODA1MDAwMFoXDTIyMDQwNDA0MDAwMFowLzEtMCsGA1UEAxMk
ZTg0ZTIyNWQtNTNiNi00ZjllLTk0MmQtOWIyNGNlY2NkNjI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkII6adt1GyPbXK28NWaH3/gwcOyPJlubotsI
OWFCnG82pNEiKNCLFGgUExITvucltIWrSfPeUczQNBp14L51T7w4fjcIUIH8UVJt
50fM4dVc+XPU2ct6OsGmO5eK+3MfhG6RCWYQzdtiiYP4GGFXB2PG9DZukb2mTdQw
qlYASWYjxxJ0ComAVHqDI4oZ4+A7t1xQZTjTUHWElrDbqhmqkLzfx5pSBLxyk9iz
IOJUPUhWjsvsVgmUsfv4XmQ2fPEQ73GL78yeWorwPL5baAtooJfgzEv8M1pmj8AQ
UoaX3gj839EXJ5AjLvkRywuS9sCfpV65WfNk3l3Dm5G/NfhfDwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIXNrIyxZFGnoTBDQI9MC2R1bvolMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjFkMjQyMTQtZjExOC0z
ZDI3LThiZDEtYWMwZDY5ZWFjZTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKLMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgIGFZPpH11/zXt3hScZqshYKx89tqvtHyPDgzxb0xlmIjXT1ssWUSJ4V
/L29KxO7vpvTvEHqRRquA4dziGlOiT+JmypttJgfw/XNsJo/3HqljZijASsK32FW
ve+SdmJsqQDiEOCzFS118VXMOZ0FSwLH2v5ASGUhT5AtmlxjcZkp9d4rbo9mdNIK
YOqzSvmjDB+UZxR5koF7Sm7t12rIBkdr1cupzeTGpj3+mBU3BiFSbh/ZcL6fvx2z
z0wpAdbfcLSTUN/Ic4AGue5HAwGg1x6CRJoqZ7OIKZimxn84hLWRFxUzZl6+peJF
pNbZjkKtvl+AIKLHHvpbT0QPRUQVDg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:18 2025 by rpki-client