Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fa5c9d50-6f02-3fd6-bdc1-8603f4f14146.roa
File:                     fa5c9d50-6f02-3fd6-bdc1-8603f4f14146.roa (raw, json)
Hash identifier:          ksexHmkAUvjDt1qumwI+J3bX+Jtt/+t52nN8h7pcdZQ=
Subject key identifier:   83:99:22:12:78:40:E2:3D:B3:74:B4:8B:B6:2D:88:63:03:49:85:ED
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EEA44B871608E725F324FA580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fa5c9d50-6f02-3fd6-bdc1-8603f4f14146.roa
Signing time:             Sun 14 Aug 2022 12:00:00 +0000
ROA not before:           Sun 14 Aug 2022 12:00:00 +0000
ROA not after:            Mon 19 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        192.43.176.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:ea:44:b8:71:60:8e:72:5f:32:4f:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 14 12:00:00 2022 GMT
            Not After : Sep 19 04:00:00 2022 GMT
        Subject: CN=ed3ae72d-f666-4735-a431-aff99f05a7e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:04:da:5a:28:17:ac:b6:14:79:32:c0:61:c0:
                    b9:5f:d3:b1:79:9d:13:bb:a0:80:9e:b9:06:39:df:
                    df:ea:34:2f:5a:4a:b9:9b:b1:28:05:62:25:ab:f2:
                    3b:db:ff:49:68:a9:39:93:1e:98:4a:f1:37:68:7e:
                    93:aa:9b:bc:35:f3:8a:df:6f:3a:14:15:f6:73:d5:
                    b6:41:e5:35:c9:52:35:7a:8b:86:2b:40:1d:5a:69:
                    90:bb:10:9a:d6:4f:29:83:ab:a5:50:b8:c1:6f:13:
                    a1:48:d1:96:e8:e4:a5:84:ae:39:9e:d1:7e:fa:2f:
                    9a:d5:32:92:6b:2c:97:a8:06:d9:1b:7b:e8:ef:85:
                    55:3a:bc:ed:23:f8:32:05:4a:ea:99:06:bf:ce:72:
                    2d:0f:52:3b:4b:8c:ce:22:31:13:16:12:59:b8:7e:
                    ae:5c:ec:ce:b4:66:2b:22:08:8a:7d:60:d6:bf:1a:
                    ad:43:bf:af:a9:d4:44:aa:cf:dd:5a:fa:59:47:8a:
                    04:c3:b6:cd:2c:06:ad:9b:5a:db:17:83:0a:81:a9:
                    5b:2e:86:82:d5:06:79:60:90:a2:a7:43:01:0a:f0:
                    1e:b8:9b:61:01:58:5e:3c:f6:29:af:28:d7:87:29:
                    42:92:4f:ae:e6:82:47:c2:72:40:06:cb:e8:5c:ca:
                    66:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:99:22:12:78:40:E2:3D:B3:74:B4:8B:B6:2D:88:63:03:49:85:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fa5c9d50-6f02-3fd6-bdc1-8603f4f14146.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:39:e8:8b:6c:1f:58:08:2f:bf:24:09:be:32:31:04:ea:5c:
         11:e7:41:7a:54:56:f0:fd:ef:ce:a0:c7:04:90:1c:cf:9d:06:
         84:be:67:52:65:f0:20:e7:f0:8c:02:a9:1b:3a:b0:94:d7:2d:
         24:a4:7d:94:3a:d0:75:1a:b7:c8:07:15:7f:0a:bf:c9:aa:9a:
         f7:9e:78:e6:cc:63:3b:87:6d:5e:e0:97:ee:0b:be:5b:63:fc:
         42:54:a4:25:55:63:9e:8b:2c:07:3c:bd:3d:22:d7:de:3d:30:
         0f:29:59:ee:f4:0d:ab:b1:d2:cc:10:ad:e9:a6:5a:f1:ae:7f:
         bd:4f:3a:06:39:32:7d:dc:af:80:e8:fd:79:0a:cc:ca:76:74:
         17:2d:e4:6f:91:5c:59:be:03:33:b9:86:26:e7:37:25:f4:0a:
         f1:7a:eb:b2:2d:2e:25:05:ca:f9:fa:f8:ea:61:78:ef:f1:1e:
         74:6a:9c:ca:8f:39:8d:a4:df:37:91:aa:e3:ca:7d:fe:41:bc:
         78:c1:f6:39:36:9f:88:bd:f3:56:40:67:22:f1:7b:15:e4:8b:
         a4:e6:7c:92:05:30:fe:11:e1:79:99:ad:59:f9:8c:53:10:49:
         56:e7:12:71:3b:db:ac:85:6f:6b:68:22:ce:52:eb:6b:e6:1c:
         7d:bb:07:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD7qRLhxYI5yXzJPpYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDgxNDEyMDAwMFoXDTIyMDkxOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZWQzYWU3MmQtZjY2Ni00NzM1LWE0MzEtYWZmOTlmMDVhN2U2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQTaWigXrLYUeTLAYcC5X9OxeZ0Tu6CAnrkG
Od/f6jQvWkq5m7EoBWIlq/I72/9JaKk5kx6YSvE3aH6Tqpu8NfOK3286FBX2c9W2
QeU1yVI1eouGK0AdWmmQuxCa1k8pg6ulULjBbxOhSNGW6OSlhK45ntF++i+a1TKS
ayyXqAbZG3vo74VVOrztI/gyBUrqmQa/znItD1I7S4zOIjETFhJZuH6uXOzOtGYr
IgiKfWDWvxqtQ7+vqdREqs/dWvpZR4oEw7bNLAatm1rbF4MKgalbLoaC1QZ5YJCi
p0MBCvAeuJthAVhePPYpryjXhylCkk+u5oJHwnJABsvoXMpmyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIOZIhJ4QOI9s3S0i7YtiGMDSYXtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZmE1YzlkNTAtNmYwMi0z
ZmQ2LWJkYzEtODYwM2Y0ZjE0MTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwCuwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJc56ItsH1gIL78kCb4yMQTqXBHnQXpUVvD9786gxwSQHM+dBoS+Z1Jl
8CDn8IwCqRs6sJTXLSSkfZQ60HUat8gHFX8Kv8mqmveeeObMYzuHbV7gl+4Lvltj
/EJUpCVVY56LLAc8vT0i1949MA8pWe70Daux0swQremmWvGuf71POgY5Mn3cr4Do
/XkKzMp2dBct5G+RXFm+AzO5hibnNyX0CvF667ItLiUFyvn6+OpheO/xHnRqnMqP
OY2k3zeRquPKff5BvHjB9jk2n4i981ZAZyLxexXki6TmfJIFMP4R4XmZrVn5jFMQ
SVbnEnE726yFb2toIs5S62vmHH27BwE=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:33 2025 by rpki-client