Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f3f5a627-37d8-3306-8029-39ad6d9a0936.roa
File:                     f3f5a627-37d8-3306-8029-39ad6d9a0936.roa (raw, json)
Hash identifier:          OGwfgtpU3+AHfqsarRMHHoM9ZGDZssT+kV+lu77VwZ0=
Subject key identifier:   33:95:58:7F:66:A1:54:B3:91:1F:FC:2F:20:0C:AC:30:96:9E:E9:A6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FC2AF672E8EB8826376CDB4C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f3f5a627-37d8-3306-8029-39ad6d9a0936.roa
Signing time:             Mon 31 Oct 2022 12:00:00 +0000
ROA not before:           Mon 31 Oct 2022 12:00:00 +0000
ROA not after:            Tue 06 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        162.208.123.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c2:af:67:2e:8e:b8:82:63:76:cd:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 31 12:00:00 2022 GMT
            Not After : Dec  6 05:00:00 2022 GMT
        Subject: CN=1412576e-56e3-47ab-85c4-8d6143caee58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ba:20:6d:72:c0:5c:92:c9:1e:71:f2:5b:25:
                    3c:f5:cb:9d:52:39:43:5a:84:57:9d:e1:c6:2c:63:
                    7f:18:56:b2:05:7e:c1:ca:48:10:88:cc:b9:3a:44:
                    2a:d9:84:b3:db:d4:b7:e0:98:f3:58:04:75:02:bf:
                    4b:c4:a8:4e:b2:ad:21:02:26:07:3c:0b:45:10:e3:
                    f6:dc:e8:af:68:de:43:a6:df:39:99:d7:9a:24:5b:
                    24:5f:79:0c:87:ba:59:61:f7:04:ad:16:e4:29:46:
                    75:1f:3f:0f:7f:ad:cb:cc:12:4d:d9:66:c4:6c:76:
                    32:c0:21:79:20:29:4d:dd:b1:24:6f:7e:bc:9a:8e:
                    31:78:09:64:6c:2f:8c:c2:7a:d6:f6:b4:15:36:54:
                    80:6a:6a:d8:45:7b:2d:29:17:fc:d6:52:e9:fa:ad:
                    17:bb:01:32:c1:5b:7b:59:2a:94:42:28:c6:32:68:
                    a8:73:12:70:c9:ea:e1:ec:a0:26:f8:95:c7:f1:d5:
                    03:d4:39:70:17:06:52:a2:11:e6:1b:48:29:f6:e2:
                    07:1e:d3:2e:7e:77:fd:d3:42:f1:0c:d0:89:82:b5:
                    ee:0a:97:33:38:71:6e:21:eb:ae:2e:d3:a6:21:0f:
                    01:13:27:df:6c:5e:6d:15:f7:87:17:bb:1e:67:c1:
                    3d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:95:58:7F:66:A1:54:B3:91:1F:FC:2F:20:0C:AC:30:96:9E:E9:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f3f5a627-37d8-3306-8029-39ad6d9a0936.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:cb:9c:61:e2:49:e2:43:5e:ab:1a:c1:2f:cb:7c:b1:d6:ff:
         34:30:f3:c7:6a:1e:1e:86:1c:a7:83:f8:b7:96:8a:61:82:f8:
         6f:7c:40:1a:c0:60:15:3b:d6:96:a4:82:32:dc:d5:28:8d:75:
         61:19:19:12:41:98:a6:15:2d:66:5b:dd:85:51:17:00:d0:6b:
         a4:73:41:96:24:52:e4:0e:16:fb:cb:f4:db:14:2a:74:be:64:
         71:c4:02:9e:6e:10:3a:68:a5:78:8a:5c:4d:07:34:f3:e1:6b:
         56:a0:92:50:41:9d:03:8c:82:b5:90:94:54:6f:df:e9:5f:51:
         fc:4a:19:c9:79:dd:c4:0e:d4:94:14:62:d8:4e:d0:95:1f:9c:
         c2:09:be:82:29:46:68:e9:fa:21:2e:51:bf:2a:d7:f2:9f:87:
         23:cd:57:54:6c:98:43:7d:8a:98:07:e7:36:d6:79:e9:5e:ff:
         c4:35:14:99:be:eb:c1:89:2c:de:73:59:f6:c6:3f:22:16:1a:
         17:62:a7:ef:e4:59:4c:05:9c:b0:74:f7:92:22:a0:f2:4d:10:
         38:3d:24:69:1a:0d:80:d0:96:6c:23:49:16:ed:60:71:99:ad:
         37:c1:75:41:4d:7e:fe:a9:ab:c7:dd:7e:d1:ae:fc:14:d6:34:
         b4:d0:2b:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD/Cr2cujriCY3bNtMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAzMTEyMDAwMFoXDTIyMTIwNjA1MDAwMFowLzEtMCsGA1UEAxMk
MTQxMjU3NmUtNTZlMy00N2FiLTg1YzQtOGQ2MTQzY2FlZTU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbogbXLAXJLJHnHyWyU89cudUjlDWoRXneHG
LGN/GFayBX7BykgQiMy5OkQq2YSz29S34JjzWAR1Ar9LxKhOsq0hAiYHPAtFEOP2
3OivaN5Dpt85mdeaJFskX3kMh7pZYfcErRbkKUZ1Hz8Pf63LzBJN2WbEbHYywCF5
IClN3bEkb368mo4xeAlkbC+MwnrW9rQVNlSAamrYRXstKRf81lLp+q0XuwEywVt7
WSqUQijGMmiocxJwyerh7KAm+JXH8dUD1DlwFwZSohHmG0gp9uIHHtMufnf900Lx
DNCJgrXuCpczOHFuIeuuLtOmIQ8BEyffbF5tFfeHF7seZ8E92wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDOVWH9moVSzkR/8LyAMrDCWnummMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjNmNWE2MjctMzdkOC0z
MzA2LTgwMjktMzlhZDZkOWEwOTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotB7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGvLnGHiSeJDXqsawS/LfLHW/zQw88dqHh6GHKeD+LeWimGC+G98QBrA
YBU71pakgjLc1SiNdWEZGRJBmKYVLWZb3YVRFwDQa6RzQZYkUuQOFvvL9NsUKnS+
ZHHEAp5uEDpopXiKXE0HNPPha1agklBBnQOMgrWQlFRv3+lfUfxKGcl53cQO1JQU
YthO0JUfnMIJvoIpRmjp+iEuUb8q1/KfhyPNV1RsmEN9ipgH5zbWeele/8Q1FJm+
68GJLN5zWfbGPyIWGhdip+/kWUwFnLB095IioPJNEDg9JGkaDYDQlmwjSRbtYHGZ
rTfBdUFNfv6pq8fdftGu/BTWNLTQK4A=
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:56:02 2025 by rpki-client