Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fd15947d-ea46-3452-a210-8734dcae1c1f.roa
File:                     fd15947d-ea46-3452-a210-8734dcae1c1f.roa (raw, json)
Hash identifier:          9Lty74WQIR+3NRsjdYQD4yP9D3ijBIiVbh7MkZuXxDs=
Subject key identifier:   80:45:B0:4B:78:B0:2F:AF:B7:DE:0E:DA:79:6C:E9:1D:BF:C0:DF:CB
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DB2C1AEC931C1AC21379155E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fd15947d-ea46-3452-a210-8734dcae1c1f.roa
Signing time:             Mon 25 Apr 2022 12:00:00 +0000
ROA not before:           Mon 25 Apr 2022 12:00:00 +0000
ROA not after:            Tue 31 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        16.190.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b2:c1:ae:c9:31:c1:ac:21:37:91:55:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 25 12:00:00 2022 GMT
            Not After : May 31 04:00:00 2022 GMT
        Subject: CN=dffe7620-8ff6-444d-94d8-597fc619a6ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8c:e4:f2:7f:9b:b8:63:47:79:d8:7c:7f:68:
                    66:52:d5:7c:76:04:0b:13:7f:df:64:d8:a1:4e:70:
                    73:ea:ba:0b:d6:28:9f:6f:8e:77:3f:e0:85:20:7d:
                    89:29:6d:d9:5d:a4:9f:54:fb:82:25:7b:0b:67:29:
                    ad:8c:4a:c1:cc:fb:99:0c:73:0d:a5:95:fc:f2:e1:
                    45:ee:a0:04:fc:0a:ae:97:9a:a7:a7:dd:f2:e1:b4:
                    f0:a7:86:04:d0:a9:7d:e2:ba:49:1f:e8:e4:32:15:
                    f8:f4:4d:67:94:d7:b9:1a:89:f4:e6:79:7e:e1:d0:
                    59:a6:33:75:51:c6:64:bc:28:01:5c:a6:79:aa:85:
                    31:a3:cd:e1:88:c7:a4:ec:6b:17:32:21:4f:94:11:
                    af:21:e0:84:16:50:21:a0:89:4a:1b:a7:b9:3a:f5:
                    ad:24:64:fa:13:cb:1d:cf:ae:bd:42:a1:a0:86:3d:
                    f3:f4:2c:78:ef:ba:5c:8b:8c:e3:24:bc:66:38:3e:
                    98:2a:0f:20:86:a3:ce:b9:f6:fc:83:9a:64:f4:d6:
                    9e:a8:8e:7a:53:47:ff:b9:30:28:ae:13:71:7f:ec:
                    e9:e1:cf:9a:92:19:b4:cc:08:75:f8:2e:bb:42:29:
                    9b:5a:56:43:bc:6e:f7:c7:64:81:44:30:ee:ad:8b:
                    de:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:45:B0:4B:78:B0:2F:AF:B7:DE:0E:DA:79:6C:E9:1D:BF:C0:DF:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fd15947d-ea46-3452-a210-8734dcae1c1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.190.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:7c:f0:28:9a:1d:c3:f0:a1:ea:60:8b:3b:6d:c3:b0:5b:82:
         bd:3c:1d:f8:69:89:52:6b:0b:55:69:83:37:40:fc:cc:89:76:
         e0:44:4e:4f:7c:7c:c5:f2:0e:df:49:6f:39:30:b7:52:4c:f3:
         ce:89:e2:ea:29:79:75:79:64:ec:ee:dd:22:29:1f:2d:5e:46:
         53:ba:78:41:3d:c5:e0:8b:25:70:98:a8:b9:9d:ba:57:7e:d2:
         6e:18:57:32:fc:e3:bb:e9:30:0c:d4:49:72:f6:aa:d5:30:98:
         e7:d2:a3:32:17:9a:76:03:ac:9f:19:11:b0:c1:df:24:e6:93:
         f2:58:9c:5d:ac:50:15:e4:df:04:42:8b:b0:c1:56:5c:ad:b6:
         61:0c:da:d2:a2:ad:9d:f6:83:49:10:17:f9:d9:f1:e2:7b:9d:
         7f:26:41:6e:24:44:e5:72:be:2b:d1:03:53:be:4d:1a:8e:1a:
         85:95:7c:e1:94:78:c1:90:ad:fa:72:3b:f7:7d:58:c6:5c:54:
         2a:22:7e:f4:31:b5:17:14:2c:bb:6c:18:7f:59:62:92:17:5a:
         18:d0:24:69:cb:3a:87:40:2f:10:b0:2b:c8:e3:03:23:8c:30:
         90:de:76:e7:8e:b1:7d:10:17:81:f3:7b:02:7c:35:a6:15:9c:
         1f:f6:78:8e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2ywa7JMcGsITeRVeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDQyNTEyMDAwMFoXDTIyMDUzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZGZmZTc2MjAtOGZmNi00NDRkLTk0ZDgtNTk3ZmM2MTlhNmFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApozk8n+buGNHedh8f2hmUtV8dgQLE3/fZNih
TnBz6roL1iifb453P+CFIH2JKW3ZXaSfVPuCJXsLZymtjErBzPuZDHMNpZX88uFF
7qAE/Aqul5qnp93y4bTwp4YE0Kl94rpJH+jkMhX49E1nlNe5Gon05nl+4dBZpjN1
UcZkvCgBXKZ5qoUxo83hiMek7GsXMiFPlBGvIeCEFlAhoIlKG6e5OvWtJGT6E8sd
z669QqGghj3z9Cx477pci4zjJLxmOD6YKg8ghqPOufb8g5pk9NaeqI56U0f/uTAo
rhNxf+zp4c+akhm0zAh1+C67QimbWlZDvG73x2SBRDDurYvenwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIBFsEt4sC+vt94O2nls6R2/wN/LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZmQxNTk0N2QtZWE0Ni0z
NDUyLWEyMTAtODczNGRjYWUxYzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEL4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAeHzwKJodw/Ch6mCLO23DsFuCvTwd+GmJUmsLVWmDN0D8zIl24EROT3x8
xfIO30lvOTC3Ukzzzoni6il5dXlk7O7dIikfLV5GU7p4QT3F4IslcJiouZ26V37S
bhhXMvzju+kwDNRJcvaq1TCY59KjMheadgOsnxkRsMHfJOaT8licXaxQFeTfBEKL
sMFWXK22YQza0qKtnfaDSRAX+dnx4nudfyZBbiRE5XK+K9EDU75NGo4ahZV84ZR4
wZCt+nI7931YxlxUKiJ+9DG1FxQsu2wYf1likhdaGNAkacs6h0AvELAryOMDI4ww
kN52546xfRAXgfN7Anw1phWcH/Z4jg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:16 2025 by rpki-client