Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f617d5b4-fe37-3a2f-b962-8d8681d944bf.roa
File:                     f617d5b4-fe37-3a2f-b962-8d8681d944bf.roa (raw, json)
Hash identifier:          XK1gQT26J6h46w3hm/N2w8rqHKjLPDnhpyyhlMRclkE=
Subject key identifier:   C0:39:15:7B:83:15:3B:82:6A:FA:19:47:43:DE:0D:B8:4F:78:18:EA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF865CD86DEFE17E4DF9E1D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f617d5b4-fe37-3a2f-b962-8d8681d944bf.roa
Signing time:             Sat 19 Nov 2022 12:00:00 +0000
ROA not before:           Sat 19 Nov 2022 12:00:00 +0000
ROA not after:            Sun 25 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        16.206.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f8:65:cd:86:de:fe:17:e4:df:9e:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 19 12:00:00 2022 GMT
            Not After : Dec 25 05:00:00 2022 GMT
        Subject: CN=bc870b69-f305-4d2d-a331-e464d4fc2f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:10:78:52:9a:fe:7b:4b:ba:5a:d3:e0:ad:96:
                    f6:77:71:b2:1d:c8:d1:9b:f1:1e:7f:7c:2f:22:67:
                    34:1e:33:60:38:b2:27:57:ae:dd:68:49:34:e6:38:
                    e1:31:bd:f1:7c:59:21:9f:b8:41:26:7b:f5:80:fa:
                    02:ad:7f:df:ea:1b:ac:2b:e3:eb:90:20:06:fb:de:
                    f6:7c:59:98:51:57:9a:83:3a:33:d5:b1:23:a7:ed:
                    fd:10:71:18:1d:2d:cd:66:09:4b:50:1c:4d:72:42:
                    b8:8b:53:7c:13:a1:31:c6:bf:20:cf:3d:ab:2b:97:
                    a5:18:4e:16:e8:d4:18:12:64:b3:93:fb:5d:e8:91:
                    37:5b:6c:86:1c:ef:2f:35:ea:52:64:6e:29:19:f4:
                    11:5e:5e:ef:42:be:39:e5:a3:6f:56:2d:2d:20:a3:
                    94:4b:2a:80:0a:68:91:ad:c2:6c:67:35:fa:f3:27:
                    d9:55:22:f1:26:8e:f8:1f:a7:8d:48:f1:bd:de:90:
                    09:6e:5b:fe:09:21:2e:6a:aa:ac:fa:d6:48:26:25:
                    c0:f1:33:bc:16:a8:20:e4:4e:b8:22:58:11:fe:56:
                    4a:ef:ae:bf:16:25:b2:24:a6:c7:ad:8a:44:f9:a1:
                    a4:ae:e0:05:a4:29:0c:42:d3:15:89:fa:75:cc:a5:
                    8b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:39:15:7B:83:15:3B:82:6A:FA:19:47:43:DE:0D:B8:4F:78:18:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f617d5b4-fe37-3a2f-b962-8d8681d944bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.206.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:02:66:b4:b8:ff:09:37:ef:fd:ca:e7:2f:51:e6:12:c8:bf:
         69:8c:a7:a7:0c:87:76:13:a7:39:c2:ce:0b:0a:08:28:d4:25:
         20:01:2d:5f:aa:32:4a:dd:1b:6c:46:79:77:38:4c:14:e8:0c:
         8c:23:e0:c1:d4:f4:16:98:57:a3:54:63:91:14:6b:ce:10:55:
         a3:a6:6e:17:93:42:fd:c4:2f:ef:ca:2e:95:ac:1c:99:6d:a2:
         78:4b:c3:34:3e:89:09:ad:f1:e2:c8:a5:8c:c4:56:3f:ae:82:
         7c:3b:c0:49:9e:36:76:ef:4d:83:ce:37:99:5e:25:98:a6:9e:
         6a:ba:06:c5:ab:ec:35:e8:ec:bd:88:9f:da:54:a9:b1:26:23:
         37:8f:4c:ce:37:03:15:80:60:aa:c0:c1:73:5b:83:c7:d1:b5:
         49:82:50:42:30:ad:e8:42:b5:bb:22:a7:10:85:3c:be:d7:9d:
         4f:c1:b1:c9:51:4d:0a:75:e0:22:9f:e8:9b:ff:0d:46:24:60:
         18:f6:d0:ef:37:33:84:68:a3:07:7d:08:8f:4a:01:95:b3:74:
         b9:06:bb:42:68:7d:40:20:62:2d:e6:d3:76:a1:4d:e6:a6:99:
         22:55:c2:43:77:49:47:bc:6f:e2:3a:a3:31:c6:61:43:c0:97:
         e0:b8:c0:79
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/4Zc2G3v4X5N+eHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTExOTEyMDAwMFoXDTIyMTIyNTA1MDAwMFowLzEtMCsGA1UEAxMk
YmM4NzBiNjktZjMwNS00ZDJkLWEzMzEtZTQ2NGQ0ZmMyZjI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhB4Upr+e0u6WtPgrZb2d3GyHcjRm/Eef3wv
Imc0HjNgOLInV67daEk05jjhMb3xfFkhn7hBJnv1gPoCrX/f6husK+PrkCAG+972
fFmYUVeagzoz1bEjp+39EHEYHS3NZglLUBxNckK4i1N8E6Exxr8gzz2rK5elGE4W
6NQYEmSzk/td6JE3W2yGHO8vNepSZG4pGfQRXl7vQr455aNvVi0tIKOUSyqACmiR
rcJsZzX68yfZVSLxJo74H6eNSPG93pAJblv+CSEuaqqs+tZIJiXA8TO8Fqgg5E64
IlgR/lZK766/FiWyJKbHrYpE+aGkruAFpCkMQtMVifp1zKWLqwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMA5FXuDFTuCavoZR0PeDbhPeBjqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjYxN2Q1YjQtZmUzNy0z
YTJmLWI5NjItOGQ4NjgxZDk0NGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEM4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAKgJmtLj/CTfv/crnL1HmEsi/aYynpwyHdhOnOcLOCwoIKNQlIAEtX6oy
St0bbEZ5dzhMFOgMjCPgwdT0FphXo1RjkRRrzhBVo6ZuF5NC/cQv78oulawcmW2i
eEvDND6JCa3x4siljMRWP66CfDvASZ42du9Ng843mV4lmKaearoGxavsNejsvYif
2lSpsSYjN49MzjcDFYBgqsDBc1uDx9G1SYJQQjCt6EK1uyKnEIU8vtedT8GxyVFN
CnXgIp/om/8NRiRgGPbQ7zczhGijB30Ij0oBlbN0uQa7Qmh9QCBiLebTdqFN5qaZ
IlXCQ3dJR7xv4jqjMcZhQ8CX4LjAeQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:35 2025 by rpki-client