Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f5fc3eab-34d7-3142-9133-16a13ea304c4.roa
File:                     f5fc3eab-34d7-3142-9133-16a13ea304c4.roa (raw, json)
Hash identifier:          YFQug2YcIZLqyp8t+4NU+MaFrVnkHl3WuSWX35vmcJ0=
Subject key identifier:   E6:EC:28:6C:5A:FB:9A:30:3D:D3:CC:79:B7:49:41:D1:67:9B:59:EF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F5C348F16E226893F4847E400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f5fc3eab-34d7-3142-9133-16a13ea304c4.roa
Signing time:             Sat 24 Sep 2022 12:00:00 +0000
ROA not before:           Sat 24 Sep 2022 12:00:00 +0000
ROA not after:            Sun 30 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        104.200.224.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5c:34:8f:16:e2:26:89:3f:48:47:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 24 12:00:00 2022 GMT
            Not After : Oct 30 04:00:00 2022 GMT
        Subject: CN=dc525dff-9c9a-4163-9291-9cc0d19d7643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:73:bf:09:fb:2f:5f:fe:e1:7c:77:c2:a8:df:
                    b4:ba:d7:09:85:cb:b6:40:ee:3e:71:c6:90:ee:01:
                    8c:30:4e:8e:25:d4:a0:4e:6b:e0:83:8b:a6:40:6a:
                    d1:5b:88:a7:ef:a5:96:4f:cc:96:68:50:24:97:a6:
                    24:d7:63:9c:c9:b4:da:92:39:1c:a6:98:bb:f1:bd:
                    4d:c3:88:d1:8c:e1:6e:63:4d:44:c6:13:2b:97:40:
                    11:5b:b1:1f:34:52:f5:5a:4e:b4:ae:81:e4:aa:0b:
                    59:f9:aa:84:73:fb:ee:12:79:4c:dd:77:a9:23:81:
                    9a:41:71:f8:97:3a:7c:fb:1f:b9:9c:6a:88:05:2b:
                    a7:21:e8:62:90:b4:8f:b1:c2:ca:7f:b7:66:3e:e2:
                    74:80:d9:57:83:83:f5:9a:ff:a0:2d:8d:cc:5a:d2:
                    2a:94:25:39:a8:63:c3:58:07:f9:d3:6d:44:a1:df:
                    12:16:32:49:76:a9:3d:11:db:a1:02:66:d6:dd:28:
                    50:aa:8c:63:f4:d5:dc:06:58:e9:69:a9:b7:be:c5:
                    1d:a6:5f:2e:21:75:b5:fe:94:c9:e8:14:63:ca:aa:
                    20:05:c7:ab:45:2e:45:65:ad:1b:23:02:a8:1c:74:
                    46:37:aa:d5:a3:ad:a3:92:ce:03:58:68:b3:6c:b2:
                    cc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EC:28:6C:5A:FB:9A:30:3D:D3:CC:79:B7:49:41:D1:67:9B:59:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f5fc3eab-34d7-3142-9133-16a13ea304c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.200.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:ab:9f:a1:dd:5f:8b:4f:a0:aa:3c:41:ac:7f:3f:7c:9d:a0:
         f0:12:8c:07:d0:a6:6c:d0:fc:9b:0b:38:27:1f:a2:67:0f:30:
         a5:25:1e:cb:03:34:89:7e:da:91:ec:1b:92:12:e1:bf:d6:f9:
         8c:4d:fc:b9:a6:7a:bf:b7:20:89:2d:43:83:54:51:ab:8f:2f:
         a6:84:9f:d9:1c:1b:d6:83:8e:3d:fa:7e:f4:57:58:0b:0e:f3:
         3d:e1:f1:0b:65:a3:ae:20:59:00:1c:7c:df:fd:4d:81:01:69:
         aa:bd:6c:95:fd:ea:49:67:42:a9:d2:43:d1:29:94:1b:46:ef:
         65:4c:c9:2e:86:d5:08:35:5f:8f:73:36:57:f8:6b:66:36:c7:
         ca:d9:b6:d4:75:8a:ad:d3:e9:30:4e:a8:94:d7:dd:36:1c:b9:
         c9:a0:c2:e1:ee:92:80:66:17:b4:d2:5d:c9:95:a4:10:dc:01:
         64:5a:80:06:bf:4b:f0:a2:96:ed:54:11:d7:8a:ff:15:b1:49:
         99:12:77:0a:68:96:5e:38:4f:5b:41:72:b5:75:ee:a6:66:e7:
         a2:f5:5d:97:4f:a1:aa:a9:3e:a1:dc:a4:fb:be:07:a2:37:ff:
         64:b5:c4:9a:57:11:42:15:44:2e:88:d4:4c:65:07:f7:fb:3d:
         6f:a5:f7:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD9cNI8W4iaJP0hH5AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDkyNDEyMDAwMFoXDTIyMTAzMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZGM1MjVkZmYtOWM5YS00MTYzLTkyOTEtOWNjMGQxOWQ3NjQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XO/CfsvX/7hfHfCqN+0utcJhcu2QO4+ccaQ
7gGMME6OJdSgTmvgg4umQGrRW4in76WWT8yWaFAkl6Yk12OcybTakjkcppi78b1N
w4jRjOFuY01ExhMrl0ARW7EfNFL1Wk60roHkqgtZ+aqEc/vuEnlM3XepI4GaQXH4
lzp8+x+5nGqIBSunIehikLSPscLKf7dmPuJ0gNlXg4P1mv+gLY3MWtIqlCU5qGPD
WAf5021Eod8SFjJJdqk9EduhAmbW3ShQqoxj9NXcBljpaam3vsUdpl8uIXW1/pTJ
6BRjyqogBcerRS5FZa0bIwKoHHRGN6rVo62jks4DWGizbLLMWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFObsKGxa+5owPdPMebdJQdFnm1nvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjVmYzNlYWItMzRkNy0z
MTQyLTkxMzMtMTZhMTNlYTMwNGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMjgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI+rn6HdX4tPoKo8Qax/P3ydoPASjAfQpmzQ/JsLOCcfomcPMKUlHssD
NIl+2pHsG5IS4b/W+YxN/Lmmer+3IIktQ4NUUauPL6aEn9kcG9aDjj36fvRXWAsO
8z3h8Qtlo64gWQAcfN/9TYEBaaq9bJX96klnQqnSQ9EplBtG72VMyS6G1Qg1X49z
Nlf4a2Y2x8rZttR1iq3T6TBOqJTX3TYcucmgwuHukoBmF7TSXcmVpBDcAWRagAa/
S/Cilu1UEdeK/xWxSZkSdwpoll44T1tBcrV17qZm56L1XZdPoaqpPqHcpPu+B6I3
/2S1xJpXEUIVRC6I1ExlB/f7PW+l9+w=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:19:59 2025 by rpki-client