Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fbbdfe2f-3955-324c-a820-c48990a81a65.roa
File:                     fbbdfe2f-3955-324c-a820-c48990a81a65.roa (raw, json)
Hash identifier:          qCIZEflhJRqN7KLPa8PbRVXy8cJgfMiyG0IGgpD7cSY=
Subject key identifier:   5F:6D:1F:FC:D9:A1:AC:12:3C:7F:01:14:4A:51:13:14:E7:BB:17:5E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DD9517EDF0C0CBDE9E6710400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fbbdfe2f-3955-324c-a820-c48990a81a65.roa
Signing time:             Sun 08 May 2022 12:00:00 +0000
ROA not before:           Sun 08 May 2022 12:00:00 +0000
ROA not after:            Mon 13 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        40.180.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d9:51:7e:df:0c:0c:bd:e9:e6:71:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  8 12:00:00 2022 GMT
            Not After : Jun 13 04:00:00 2022 GMT
        Subject: CN=a9a729a5-c144-4214-89f0-98879ff25ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ce:3c:e4:7c:81:9e:f1:2c:31:c2:5a:59:cd:
                    15:74:35:14:53:f2:a5:0c:1c:ed:3a:ef:2c:3a:e0:
                    3c:e3:cc:92:f9:2f:80:f6:e0:7d:87:77:97:49:10:
                    35:dc:c7:33:c0:8f:84:da:23:51:c3:a6:19:60:00:
                    87:ca:5a:43:62:08:d3:0e:8e:c9:32:9c:93:e0:85:
                    52:fe:55:7b:5c:8a:b5:70:c0:7a:56:fa:45:e8:1a:
                    14:d9:7f:5a:87:06:45:62:a3:7e:68:31:a5:b9:04:
                    be:56:28:c4:cc:26:28:99:d7:30:cf:33:e1:93:5f:
                    08:8a:4e:f2:f3:c5:c4:12:2d:d8:6c:36:3a:28:79:
                    de:a3:64:e0:0c:92:47:76:03:db:ea:23:83:83:a5:
                    f4:94:a9:19:61:1c:6c:a3:92:55:3f:b3:09:36:b9:
                    b9:9a:1b:3b:4e:ac:32:96:11:46:c2:65:ef:81:a8:
                    fe:1a:13:f2:15:d0:00:35:98:eb:42:69:e6:1d:55:
                    64:e4:49:06:04:7e:ea:26:cb:c3:89:bd:87:b4:d7:
                    f1:03:21:5a:ab:c7:73:1d:ad:dd:fb:d7:9c:07:84:
                    a0:3a:6c:fc:21:de:9b:05:58:ad:03:bf:9b:72:d4:
                    72:6f:63:5a:5e:fe:ef:1e:40:8c:82:b9:f4:89:0d:
                    d4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:6D:1F:FC:D9:A1:AC:12:3C:7F:01:14:4A:51:13:14:E7:BB:17:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fbbdfe2f-3955-324c-a820-c48990a81a65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.180.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:24:4f:40:8a:c2:58:ab:49:48:66:d7:d9:74:0f:c2:bb:78:
         4b:05:ed:eb:a0:ae:ce:16:27:9a:01:d3:9c:cd:af:11:da:53:
         0b:37:2a:90:b7:2e:8d:2f:e6:a4:67:e2:a9:36:1d:7a:7b:49:
         ab:c2:3f:1d:77:e6:d3:3a:ff:f9:9b:5f:60:91:3f:3a:83:ed:
         e1:9b:c3:c6:8a:c0:b1:58:9f:84:57:ff:87:0a:3c:de:dd:8a:
         71:46:23:5b:30:c6:d0:30:53:d1:bd:9a:cd:cc:2b:bc:0d:d1:
         f3:9b:98:b2:8e:99:5f:04:20:d4:9d:3e:40:76:aa:bf:3f:df:
         21:ad:dc:5c:6d:56:e0:f3:ee:20:98:4c:0f:aa:4b:4b:28:b4:
         95:9a:d8:91:85:34:24:00:27:2a:0e:ad:4c:95:b6:cf:d7:22:
         63:da:4e:62:e2:eb:47:78:ea:ab:bc:74:bf:6e:ca:37:2d:40:
         d7:e7:7e:d0:6a:c0:04:41:49:00:90:4c:e1:f6:02:9d:7e:3f:
         e3:e8:5c:b0:a3:39:1d:7d:c2:37:79:d6:73:01:d4:68:09:de:
         4b:bc:d4:c5:c4:49:72:77:84:31:37:20:f3:9d:7d:67:15:af:
         9e:be:7a:e2:1d:b7:8b:61:7d:ea:32:08:0d:f7:7f:13:c6:25:
         a7:fa:3c:4e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3ZUX7fDAy96eZxBAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDUwODEyMDAwMFoXDTIyMDYxMzA0MDAwMFowLzEtMCsGA1UEAxMk
YTlhNzI5YTUtYzE0NC00MjE0LTg5ZjAtOTg4NzlmZjI1YWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM485HyBnvEsMcJaWc0VdDUUU/KlDBztOu8s
OuA848yS+S+A9uB9h3eXSRA13MczwI+E2iNRw6YZYACHylpDYgjTDo7JMpyT4IVS
/lV7XIq1cMB6VvpF6BoU2X9ahwZFYqN+aDGluQS+VijEzCYomdcwzzPhk18Iik7y
88XEEi3YbDY6KHneo2TgDJJHdgPb6iODg6X0lKkZYRxso5JVP7MJNrm5mhs7Tqwy
lhFGwmXvgaj+GhPyFdAANZjrQmnmHVVk5EkGBH7qJsvDib2HtNfxAyFaq8dzHa3d
+9ecB4SgOmz8Id6bBVitA7+bctRyb2NaXv7vHkCMgrn0iQ3U7QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFF9tH/zZoawSPH8BFEpRExTnuxdeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZmJiZGZlMmYtMzk1NS0z
MjRjLWE4MjAtYzQ4OTkwYTgxYTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKLQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAXyRPQIrCWKtJSGbX2XQPwrt4SwXt66CuzhYnmgHTnM2vEdpTCzcqkLcu
jS/mpGfiqTYdentJq8I/HXfm0zr/+ZtfYJE/OoPt4ZvDxorAsVifhFf/hwo83t2K
cUYjWzDG0DBT0b2azcwrvA3R85uYso6ZXwQg1J0+QHaqvz/fIa3cXG1W4PPuIJhM
D6pLSyi0lZrYkYU0JAAnKg6tTJW2z9ciY9pOYuLrR3jqq7x0v27KNy1A1+d+0GrA
BEFJAJBM4fYCnX4/4+hcsKM5HX3CN3nWcwHUaAneS7zUxcRJcneEMTcg8519ZxWv
nr564h23i2F96jIIDfd/E8Ylp/o8Tg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:08 2025 by rpki-client