Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f4e77350-fc05-3388-ab69-fd45d8f1f6ca.roa
File:                     f4e77350-fc05-3388-ab69-fd45d8f1f6ca.roa (raw, json)
Hash identifier:          up5oQpz6fNkEUIIvotA6MZDK/UxxZaqRhekq3YqNBLA=
Subject key identifier:   1D:5A:DB:6B:64:0F:2B:0D:CD:BF:99:EF:7E:E0:9B:69:84:3F:53:99
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858401D632F24E222F6291B690080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f4e77350-fc05-3388-ab69-fd45d8f1f6ca.roa
Signing time:             Fri 02 Dec 2022 12:00:00 +0000
ROA not before:           Fri 02 Dec 2022 12:00:00 +0000
ROA not after:            Sat 07 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        76.223.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1d:63:2f:24:e2:22:f6:29:1b:69:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  2 12:00:00 2022 GMT
            Not After : Jan  7 05:00:00 2023 GMT
        Subject: CN=fded30f1-a430-4369-a746-0b161ad6e646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7f:1b:05:d3:46:a4:bd:8d:60:70:1f:27:56:
                    bc:e1:93:29:bc:5b:66:09:4c:2e:93:d9:8c:b3:57:
                    b2:c4:10:dc:76:03:fb:05:bf:96:45:a9:b9:f2:29:
                    4b:5f:4f:12:7d:0f:a2:ac:05:22:90:bc:4f:fb:e7:
                    80:9e:ab:5d:3b:61:2a:09:8e:5d:ea:6a:08:8b:fc:
                    03:c8:99:51:da:cb:b9:b5:0e:fb:cd:c8:d8:4b:78:
                    b6:e4:00:ce:db:6e:d0:34:82:f3:bd:ed:73:55:c6:
                    71:27:79:44:5d:e5:1f:6b:26:1f:72:9d:da:a4:a7:
                    55:18:23:a7:3a:85:45:94:c2:2c:2a:95:20:ad:52:
                    2a:b8:da:bd:4c:a1:ce:03:a7:c0:f1:4d:30:25:3c:
                    ae:c3:6d:d0:bf:51:bb:77:41:a4:d5:6e:47:0f:f2:
                    b3:be:18:7b:74:f5:57:fb:bf:70:82:0d:0b:95:dd:
                    07:4e:de:19:23:c2:d4:a8:55:27:47:2e:de:50:e3:
                    f5:b2:16:65:dc:69:57:86:ce:af:82:13:b8:92:94:
                    35:25:26:4d:5a:54:01:ae:1b:ae:39:ac:2f:24:f7:
                    fd:49:38:a4:23:11:43:eb:90:a5:c6:bb:fd:ab:0e:
                    cc:d0:29:e9:7a:4f:84:59:07:98:e9:5a:de:f7:f1:
                    ab:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5A:DB:6B:64:0F:2B:0D:CD:BF:99:EF:7E:E0:9B:69:84:3F:53:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f4e77350-fc05-3388-ab69-fd45d8f1f6ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:5d:11:a6:96:bf:ab:23:5b:28:02:ec:56:f4:58:4d:73:00:
         1c:36:27:73:de:56:c0:1a:ed:b7:fa:da:92:a0:85:8d:67:61:
         36:ff:41:72:a1:2e:20:5f:2d:54:1d:14:ea:fd:6c:7e:7c:26:
         39:64:5e:e7:35:05:39:3d:bf:10:39:5e:42:f9:3e:a4:a8:4a:
         5d:71:99:a1:ff:af:4c:0e:4b:e6:79:69:d9:4c:6e:39:1d:09:
         bb:ce:21:48:62:31:0f:3d:47:62:a7:43:4a:70:fe:f2:41:5d:
         c5:dc:49:3e:e1:a6:a8:6c:52:1c:72:df:af:8f:80:51:26:95:
         d1:a7:f2:15:34:ea:5f:7d:ce:13:73:d4:ab:cc:08:09:45:ca:
         dc:fc:8f:28:a6:65:dc:c5:fa:b1:02:fa:6e:8c:d0:e6:6b:fb:
         94:00:51:b5:cd:8d:cd:b7:3c:21:92:18:e8:14:c2:0c:44:2f:
         95:85:73:04:b8:ad:fd:0a:8f:71:9b:3f:63:d8:e3:18:17:5b:
         c0:bf:be:64:b3:ae:f8:5e:50:aa:85:39:91:88:52:08:1f:6e:
         42:7c:57:06:03:31:7d:1e:3e:8e:1e:ea:9c:ff:2c:de:f6:5e:
         34:f1:71:8c:14:1d:18:b6:32:e4:95:ba:02:eb:70:3d:70:c5:
         a0:d1:7d:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEAdYy8k4iL2KRtpAIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwMjEyMDAwMFoXDTIzMDEwNzA1MDAwMFowLzEtMCsGA1UEAxMk
ZmRlZDMwZjEtYTQzMC00MzY5LWE3NDYtMGIxNjFhZDZlNjQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr38bBdNGpL2NYHAfJ1a84ZMpvFtmCUwuk9mM
s1eyxBDcdgP7Bb+WRam58ilLX08SfQ+irAUikLxP++eAnqtdO2EqCY5d6moIi/wD
yJlR2su5tQ77zcjYS3i25ADO227QNILzve1zVcZxJ3lEXeUfayYfcp3apKdVGCOn
OoVFlMIsKpUgrVIquNq9TKHOA6fA8U0wJTyuw23Qv1G7d0Gk1W5HD/Kzvhh7dPVX
+79wgg0Lld0HTt4ZI8LUqFUnRy7eUOP1shZl3GlXhs6vghO4kpQ1JSZNWlQBrhuu
OawvJPf9STikIxFD65Clxrv9qw7M0Cnpek+EWQeY6Vre9/Gr3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB1a22tkDysNzb+Z737gm2mEP1OZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjRlNzczNTAtZmMwNS0z
Mzg4LWFiNjktZmQ0NWQ4ZjFmNmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHTN8AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGNdEaaWv6sjWygC7Fb0WE1zABw2J3PeVsAa7bf62pKghY1nYTb/QXKh
LiBfLVQdFOr9bH58JjlkXuc1BTk9vxA5XkL5PqSoSl1xmaH/r0wOS+Z5adlMbjkd
CbvOIUhiMQ89R2KnQ0pw/vJBXcXcST7hpqhsUhxy36+PgFEmldGn8hU06l99zhNz
1KvMCAlFytz8jyimZdzF+rEC+m6M0OZr+5QAUbXNjc23PCGSGOgUwgxEL5WFcwS4
rf0Kj3GbP2PY4xgXW8C/vmSzrvheUKqFOZGIUggfbkJ8VwYDMX0ePo4e6pz/LN72
XjTxcYwUHRi2MuSVugLrcD1wxaDRfeM=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:33 2025 by rpki-client