Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fb68fdce-4dfd-3eb7-a8e6-82f3a45d5a34.roa
File:                     fb68fdce-4dfd-3eb7-a8e6-82f3a45d5a34.roa (raw, json)
Hash identifier:          pj2sP+6N2o0Eai6I2t9Z52WWtfCS7nGjoz3HDfvXTQw=
Subject key identifier:   CC:A1:F6:4C:0C:2E:F8:C8:CD:7F:66:19:76:F2:D2:8C:E3:5C:B4:96
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D3D6AF30D33EE0AD550E2E1C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fb68fdce-4dfd-3eb7-a8e6-82f3a45d5a34.roa
Signing time:             Tue 15 Mar 2022 04:00:00 +0000
ROA not before:           Tue 15 Mar 2022 04:00:00 +0000
ROA not after:            Tue 19 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.176.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:3d:6a:f3:0d:33:ee:0a:d5:50:e2:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 15 04:00:00 2022 GMT
            Not After : Apr 19 04:00:00 2022 GMT
        Subject: CN=d3639c30-dfe8-477e-9cca-63c0786ad0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:36:e3:30:78:ce:3a:1a:56:a7:5a:74:08:58:
                    21:bc:54:b7:6e:37:09:aa:7d:7b:a3:06:2d:33:7c:
                    5b:e8:cc:fd:f8:45:2d:d7:47:7a:f7:18:d1:c4:28:
                    12:0d:83:1e:7b:c9:f1:50:a8:84:f2:d9:da:2c:65:
                    bc:f0:27:66:34:00:47:a6:2d:41:c7:29:97:2f:a5:
                    de:be:2c:68:9c:20:5b:a6:2e:47:1f:c1:26:7c:2c:
                    0d:89:8a:b0:6d:f1:23:12:31:61:81:cd:a6:40:81:
                    18:af:46:dd:47:d5:22:95:b3:b5:27:b5:ae:76:13:
                    b4:a6:75:09:4c:58:73:79:88:7d:01:1c:bc:4f:b2:
                    68:ba:31:8c:3a:95:30:d3:8a:b4:a4:cd:3c:8f:76:
                    83:11:04:42:7b:68:f5:91:61:76:2f:cf:35:22:16:
                    f3:57:72:19:43:8e:01:ff:5a:bf:a9:f6:46:a8:dc:
                    7b:57:ad:8a:c4:fe:0e:04:1c:52:c4:1c:4d:85:15:
                    13:eb:ce:31:25:73:71:9f:5c:ee:14:e5:ee:01:74:
                    fc:7d:3e:ed:98:4a:57:99:64:52:26:67:29:bc:f1:
                    e7:b7:05:e8:c7:83:2d:d6:7c:ec:de:5f:e9:17:4e:
                    45:d0:0b:9f:d1:3e:47:5b:c3:ee:87:e1:a2:3b:54:
                    f0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A1:F6:4C:0C:2E:F8:C8:CD:7F:66:19:76:F2:D2:8C:E3:5C:B4:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fb68fdce-4dfd-3eb7-a8e6-82f3a45d5a34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.176.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:14:b2:71:6a:c9:4a:80:6b:38:e1:d1:38:20:94:9a:98:8e:
         65:e6:c9:0f:00:52:56:d6:c2:38:3c:29:98:05:34:7c:2b:80:
         bc:bf:08:62:a7:52:04:38:bc:e0:bd:d8:02:91:68:b7:3d:70:
         cf:52:a4:4a:c5:df:cd:6c:b0:92:bf:2e:1d:3d:ab:4b:bf:f0:
         57:95:53:66:94:36:fe:85:67:77:42:35:68:2b:29:2b:42:e0:
         f7:5b:e0:c7:fc:d4:60:e7:1d:b7:d2:13:67:cb:eb:74:b9:85:
         99:c0:3f:09:2e:65:cf:25:fc:ff:b7:01:07:cb:05:ef:ec:ce:
         13:ab:c4:fb:5b:4b:d4:bb:f2:b6:fc:3b:5c:29:f4:40:02:e4:
         62:f0:05:60:a0:c8:74:ad:72:dc:90:e5:e2:83:63:0c:f5:6c:
         dd:6b:53:1b:c9:ba:87:c2:16:67:41:d1:dc:b9:96:3a:25:ba:
         b3:77:ad:b5:f8:62:e4:c4:ca:be:4e:1a:c2:9b:f7:55:0c:cb:
         c9:ba:53:0a:60:1b:c1:d7:6a:2a:a3:10:cb:40:68:0a:3e:d7:
         b6:f2:fe:f8:41:b3:83:ba:c5:06:4c:b0:67:3f:c8:19:fa:ff:
         c1:2c:ef:1e:c5:38:f0:70:5e:69:fa:36:03:87:3b:a0:61:c3:
         da:f7:ef:0a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD09avMNM+4K1VDi4cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMxNTA0MDAwMFoXDTIyMDQxOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZDM2MzljMzAtZGZlOC00NzdlLTljY2EtNjNjMDc4NmFkMGQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDbjMHjOOhpWp1p0CFghvFS3bjcJqn17owYt
M3xb6Mz9+EUt10d69xjRxCgSDYMee8nxUKiE8tnaLGW88CdmNABHpi1BxymXL6Xe
vixonCBbpi5HH8EmfCwNiYqwbfEjEjFhgc2mQIEYr0bdR9UilbO1J7WudhO0pnUJ
TFhzeYh9ARy8T7JoujGMOpUw04q0pM08j3aDEQRCe2j1kWF2L881IhbzV3IZQ44B
/1q/qfZGqNx7V62KxP4OBBxSxBxNhRUT684xJXNxn1zuFOXuAXT8fT7tmEpXmWRS
JmcpvPHntwXox4Mt1nzs3l/pF05F0Auf0T5HW8Puh+GiO1TwgwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMyh9kwMLvjIzX9mGXby0ozjXLSWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZmI2OGZkY2UtNGRmZC0z
ZWI3LWE4ZTYtODJmM2E0NWQ1YTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAELAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAkBSycWrJSoBrOOHROCCUmpiOZebJDwBSVtbCODwpmAU0fCuAvL8IYqdS
BDi84L3YApFotz1wz1KkSsXfzWywkr8uHT2rS7/wV5VTZpQ2/oVnd0I1aCspK0Lg
91vgx/zUYOcdt9ITZ8vrdLmFmcA/CS5lzyX8/7cBB8sF7+zOE6vE+1tL1Lvytvw7
XCn0QALkYvAFYKDIdK1y3JDl4oNjDPVs3WtTG8m6h8IWZ0HR3LmWOiW6s3ettfhi
5MTKvk4awpv3VQzLybpTCmAbwddqKqMQy0BoCj7XtvL++EGzg7rFBkywZz/IGfr/
wSzvHsU48HBeafo2A4c7oGHD2vfvCg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:38:02 2025 by rpki-client