Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f30d2a3e-a114-31d0-bd98-8e817ada470c.roa
File:                     f30d2a3e-a114-31d0-bd98-8e817ada470c.roa (raw, json)
Hash identifier:          8O+m4E2mi8nAS0CsvIj9qZMURC2+hLbcs0aVDUvu8PE=
Subject key identifier:   03:46:15:08:49:49:A5:C7:F8:4E:8C:B8:A1:9E:11:91:54:D8:71:E7
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858405FD66339FAD6CDA84FC74300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f30d2a3e-a114-31d0-bd98-8e817ada470c.roa
Signing time:             Mon 26 Dec 2022 12:00:00 +0000
ROA not before:           Mon 26 Dec 2022 12:00:00 +0000
ROA not after:            Tue 31 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        151.148.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:5f:d6:63:39:fa:d6:cd:a8:4f:c7:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 26 12:00:00 2022 GMT
            Not After : Jan 31 05:00:00 2023 GMT
        Subject: CN=b7d4ec1d-25f4-4e55-b855-3b1cc5a6c783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9f:42:16:d1:24:d0:90:e3:1f:68:64:40:c3:
                    82:62:f3:11:78:e7:71:c3:80:ab:c6:24:8a:ca:7d:
                    7d:83:4b:4b:d1:8f:2c:04:a4:48:b3:81:84:e7:8f:
                    78:8f:55:ab:7d:e9:92:3a:49:99:61:71:4e:e7:92:
                    55:dc:ce:38:bf:42:da:b3:38:f1:a6:a0:44:44:c6:
                    27:7f:d9:86:1a:5d:94:bf:97:f3:0e:26:2e:20:09:
                    0f:d7:6e:1d:a5:7e:02:74:e6:74:a4:c6:b9:26:2a:
                    26:2a:ce:cc:9a:8d:ee:6a:c5:f8:98:79:37:ba:db:
                    38:ed:b6:78:bf:f1:01:0e:0f:43:77:f6:bc:9a:3e:
                    14:5a:69:3f:d8:78:5f:63:87:6c:e7:f7:1f:a4:88:
                    6a:ed:87:4b:15:00:63:8c:99:e9:2c:56:eb:35:f4:
                    ec:11:96:b1:86:e6:df:7b:b0:43:f6:93:c4:4c:f3:
                    7b:1a:b5:03:58:2e:15:ec:19:b0:bf:c9:de:86:47:
                    e5:36:95:73:45:66:04:38:08:d9:31:3c:e0:3e:ec:
                    7d:77:ae:59:f4:6d:bf:24:90:76:e8:d1:fc:d4:0b:
                    61:e2:8c:16:14:3c:59:46:9d:26:99:e0:9a:7c:fd:
                    99:30:e6:d7:8e:2a:4d:a7:d6:ec:a8:7c:43:f9:cf:
                    a2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:46:15:08:49:49:A5:C7:F8:4E:8C:B8:A1:9E:11:91:54:D8:71:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f30d2a3e-a114-31d0-bd98-8e817ada470c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.148.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:22:aa:ed:6f:64:7a:c5:ef:bb:18:f3:72:00:0e:ba:47:6f:
         87:d9:69:f1:77:41:6a:26:ea:d6:5e:bc:1a:9c:b8:42:15:ae:
         6f:38:0b:09:63:fb:e0:6e:df:e5:ea:62:f7:6d:4e:7a:f8:d2:
         f2:e8:c6:7f:2f:c9:d2:37:b0:50:8d:0c:48:67:58:3d:62:bb:
         a3:29:3f:b3:b9:39:3d:47:02:3c:ce:50:00:dd:18:4c:66:a3:
         fd:46:a8:0f:7d:a2:f7:6e:ad:98:18:ad:13:f4:b3:b0:fd:54:
         74:a5:53:57:51:9a:f6:a6:9d:3e:89:d6:0a:3c:12:97:a1:6b:
         e9:f1:e3:24:bc:4d:a3:50:72:e7:54:b0:18:31:3d:13:f2:5f:
         93:54:b4:41:62:7f:8d:3d:d5:93:94:5d:01:0d:fd:f7:9b:95:
         17:92:91:47:89:35:e7:14:e0:53:6a:03:8a:7e:bb:1a:36:62:
         13:e4:87:c7:9a:b7:a2:25:1c:13:73:b2:ad:ec:1e:2c:48:ba:
         ac:fe:a1:78:04:ec:bb:b8:f3:2f:f5:e6:3c:91:1d:a8:b2:89:
         3f:cc:c0:8f:65:51:20:15:31:01:28:9e:88:80:2d:d5:2a:38:
         d3:af:0a:24:8c:1e:84:db:66:e0:71:a5:8c:eb:bf:93:a3:70:
         69:c9:70:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBf1mM5+tbNqE/HQwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIyNjEyMDAwMFoXDTIzMDEzMTA1MDAwMFowLzEtMCsGA1UEAxMk
YjdkNGVjMWQtMjVmNC00ZTU1LWI4NTUtM2IxY2M1YTZjNzgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ9CFtEk0JDjH2hkQMOCYvMReOdxw4CrxiSK
yn19g0tL0Y8sBKRIs4GE5494j1WrfemSOkmZYXFO55JV3M44v0LaszjxpqBERMYn
f9mGGl2Uv5fzDiYuIAkP124dpX4CdOZ0pMa5JiomKs7Mmo3uasX4mHk3uts47bZ4
v/EBDg9Dd/a8mj4UWmk/2HhfY4ds5/cfpIhq7YdLFQBjjJnpLFbrNfTsEZaxhubf
e7BD9pPETPN7GrUDWC4V7Bmwv8nehkflNpVzRWYEOAjZMTzgPux9d65Z9G2/JJB2
6NH81Ath4owWFDxZRp0mmeCafP2ZMObXjipNp9bsqHxD+c+ivQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFANGFQhJSaXH+E6MuKGeEZFU2HHnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjMwZDJhM2UtYTExNC0z
MWQwLWJkOTgtOGU4MTdhZGE0NzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHl5SAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABYiqu1vZHrF77sY83IADrpHb4fZafF3QWom6tZevBqcuEIVrm84Cwlj
++Bu3+XqYvdtTnr40vLoxn8vydI3sFCNDEhnWD1iu6MpP7O5OT1HAjzOUADdGExm
o/1GqA99ovdurZgYrRP0s7D9VHSlU1dRmvamnT6J1go8Epeha+nx4yS8TaNQcudU
sBgxPRPyX5NUtEFif4091ZOUXQEN/feblReSkUeJNecU4FNqA4p+uxo2YhPkh8ea
t6IlHBNzsq3sHixIuqz+oXgE7Lu48y/15jyRHaiyiT/MwI9lUSAVMQEonoiALdUq
ONOvCiSMHoTbZuBxpYzrv5OjcGnJcE8=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:25 2025 by rpki-client