Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f3b9c0fa-f1c0-3918-9063-85a17d449eb3.roa
File:                     f3b9c0fa-f1c0-3918-9063-85a17d449eb3.roa (raw, json)
Hash identifier:          AJyR4VFaDsLZvvOLnaE8NFtycKfZcU2m4ar2cPmeOZ4=
Subject key identifier:   61:F5:F3:42:D5:0F:8A:C2:D1:A7:3B:F4:A8:48:E3:A3:75:21:A1:B2
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DF9041D5D1942DEA5E484C7C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f3b9c0fa-f1c0-3918-9063-85a17d449eb3.roa
Signing time:             Fri 20 May 2022 12:00:00 +0000
ROA not before:           Fri 20 May 2022 12:00:00 +0000
ROA not after:            Sat 25 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        96.0.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f9:04:1d:5d:19:42:de:a5:e4:84:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 20 12:00:00 2022 GMT
            Not After : Jun 25 04:00:00 2022 GMT
        Subject: CN=308f2b17-a03e-45f7-b420-615872404fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ac:44:8c:13:79:11:6a:35:55:cf:fa:31:7b:
                    11:41:b9:c7:e1:a9:51:cc:d2:69:da:87:44:7d:95:
                    8b:40:c7:be:7b:3b:d4:3e:d3:d7:ab:8c:ea:e8:29:
                    9c:38:97:27:28:fa:c6:e5:10:01:d8:a1:71:1f:6c:
                    32:04:aa:a3:83:e8:7f:32:35:97:27:36:6a:f1:5c:
                    c6:27:80:ea:19:35:5d:19:02:99:2a:11:2c:5a:29:
                    f0:25:c4:55:88:29:53:7a:97:a9:ad:24:36:5f:07:
                    de:87:78:d8:aa:af:ea:a3:11:c8:39:90:22:32:f7:
                    4f:79:3c:81:10:8e:b9:97:ae:de:ae:08:71:59:54:
                    94:cb:d8:88:1d:80:04:b3:c9:cd:10:d1:a1:ce:43:
                    27:3e:53:3b:03:c9:82:3d:bd:a0:7a:1f:f5:0c:35:
                    39:e1:9a:85:cc:2a:b8:8f:9f:bb:e7:a0:55:d0:b5:
                    58:68:9f:18:c1:15:f3:61:4e:d8:a2:e6:ad:64:ff:
                    51:73:41:56:55:32:6f:01:d4:00:3b:e8:7f:10:c9:
                    f0:51:2b:e3:2d:d9:90:59:fa:b9:31:3a:97:8f:bd:
                    63:e9:0a:7f:c9:4e:e5:6d:6a:d9:d6:2c:af:f6:e9:
                    95:03:7e:23:aa:88:5a:a1:cb:61:a3:54:c4:3a:7b:
                    fe:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F5:F3:42:D5:0F:8A:C2:D1:A7:3B:F4:A8:48:E3:A3:75:21:A1:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f3b9c0fa-f1c0-3918-9063-85a17d449eb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.0.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:53:14:a4:25:85:09:95:b8:8a:b0:d8:ef:9a:ec:96:06:17:
         4a:e4:1f:20:85:aa:02:81:b8:71:08:82:8a:69:cb:ed:3e:c8:
         c4:03:2d:3b:6b:43:2b:62:9f:b6:29:bc:e1:05:cb:e1:5c:35:
         6b:9e:df:57:1f:93:74:e0:cb:65:bc:a5:a0:fb:a6:e3:8c:8e:
         2b:f3:8c:3a:d5:f5:fe:a6:7b:c2:da:2b:18:0a:51:c8:05:06:
         73:4b:26:8d:cd:d2:08:12:0c:dc:73:ef:04:e9:50:95:59:f4:
         81:e1:99:ee:36:a4:93:2a:7b:02:62:11:83:2f:b1:44:d8:36:
         95:fc:24:d6:cb:24:66:c0:72:cb:dd:ab:bd:45:3a:52:12:c6:
         aa:b4:cf:91:16:13:c6:eb:9c:c3:48:90:2d:2e:02:d9:d3:07:
         17:22:a2:04:0d:e6:fd:2f:b7:c4:ba:a9:6e:d3:12:66:d4:c2:
         d1:a3:f8:18:98:4c:53:72:e8:60:05:e3:74:71:ba:b7:cd:97:
         a9:c6:96:08:d8:73:70:31:a3:93:dd:81:66:33:77:da:44:74:
         47:0b:25:27:4a:27:59:65:8e:a9:ee:65:09:16:a9:7b:fa:3f:
         fe:a8:aa:34:28:76:49:91:1c:c6:24:08:66:4c:be:b9:0e:29:
         48:a8:61:07
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD35BB1dGULepeSEx8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDUyMDEyMDAwMFoXDTIyMDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
MzA4ZjJiMTctYTAzZS00NWY3LWI0MjAtNjE1ODcyNDA0ZmMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqxEjBN5EWo1Vc/6MXsRQbnH4alRzNJp2odE
fZWLQMe+ezvUPtPXq4zq6CmcOJcnKPrG5RAB2KFxH2wyBKqjg+h/MjWXJzZq8VzG
J4DqGTVdGQKZKhEsWinwJcRViClTepeprSQ2Xwfeh3jYqq/qoxHIOZAiMvdPeTyB
EI65l67erghxWVSUy9iIHYAEs8nNENGhzkMnPlM7A8mCPb2geh/1DDU54ZqFzCq4
j5+756BV0LVYaJ8YwRXzYU7YouatZP9Rc0FWVTJvAdQAO+h/EMnwUSvjLdmQWfq5
MTqXj71j6Qp/yU7lbWrZ1iyv9umVA34jqohaoctho1TEOnv+mQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGH180LVD4rC0ac79KhI46N1IaGyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjNiOWMwZmEtZjFjMC0z
OTE4LTkwNjMtODVhMTdkNDQ5ZWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYAAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMlMUpCWFCZW4irDY75rslgYXSuQfIIWqAoG4cQiCimnL7T7IxAMtO2tD
K2Kftim84QXL4Vw1a57fVx+TdODLZbyloPum44yOK/OMOtX1/qZ7wtorGApRyAUG
c0smjc3SCBIM3HPvBOlQlVn0geGZ7jakkyp7AmIRgy+xRNg2lfwk1sskZsByy92r
vUU6UhLGqrTPkRYTxuucw0iQLS4C2dMHFyKiBA3m/S+3xLqpbtMSZtTC0aP4GJhM
U3LoYAXjdHG6t82XqcaWCNhzcDGjk92BZjN32kR0RwslJ0onWWWOqe5lCRape/o/
/qiqNCh2SZEcxiQIZky+uQ4pSKhhBw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 14:36:48 2025 by rpki-client