Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fd810822-237d-32c3-8f00-9309e6539b9d.roa
File:                     fd810822-237d-32c3-8f00-9309e6539b9d.roa (raw, json)
Hash identifier:          2LthkCHEW78+koSsth07XjBOC80XZn2JVXSjZS3a2KI=
Subject key identifier:   CB:6F:72:15:ED:17:44:43:A3:14:D2:EB:65:FD:06:98:99:A8:00:8F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858406B43E838836AB0CB18385400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fd810822-237d-32c3-8f00-9309e6539b9d.roa
Signing time:             Fri 30 Dec 2022 19:54:08 +0000
ROA not before:           Fri 30 Dec 2022 19:54:08 +0000
ROA not after:            Sat 04 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        96.0.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6b:43:e8:38:83:6a:b0:cb:18:38:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 30 19:54:08 2022 GMT
            Not After : Feb  4 05:00:00 2023 GMT
        Subject: CN=96601d58-c6be-4c8a-859a-254ec370e983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:09:dc:91:85:e8:b7:7c:1d:b8:a8:39:1c:eb:
                    6e:1f:73:72:58:14:f0:bc:92:a5:f3:fb:53:76:ee:
                    d1:0d:55:6f:3d:69:e4:be:7d:53:0f:b0:b7:59:e5:
                    e8:a5:36:01:f0:09:94:05:26:ed:7f:95:3f:f3:23:
                    7a:87:68:d4:d1:36:b5:c0:16:fc:26:9f:8a:b2:e5:
                    6c:27:46:6b:bc:9a:da:0d:a6:2b:a9:31:68:ea:0b:
                    ce:93:d5:68:fb:96:3c:4e:66:bd:71:bc:16:3e:8f:
                    e4:39:23:8d:c6:d9:cd:98:f5:22:bc:4f:c0:a9:13:
                    e7:bc:4a:bb:94:39:4f:38:f6:89:95:83:2b:09:7b:
                    09:3e:26:c8:47:71:0f:10:30:1a:87:3a:24:73:4f:
                    92:55:54:7f:c1:50:13:7e:77:6e:16:36:e6:14:de:
                    62:47:1a:a0:75:f9:1e:2e:cd:24:a1:67:1e:d8:93:
                    8b:f5:58:9d:ed:0a:6f:19:fb:5d:2b:d2:7c:21:d4:
                    80:6b:44:3a:33:88:ce:f2:e7:88:20:0b:80:4a:c2:
                    44:08:9e:6f:f7:6b:55:be:a6:96:0a:42:72:da:de:
                    db:b6:43:63:4a:ba:24:5b:75:59:2f:d2:55:71:65:
                    39:68:d8:a9:bb:09:08:74:4e:5c:60:3b:11:e7:31:
                    ad:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6F:72:15:ED:17:44:43:A3:14:D2:EB:65:FD:06:98:99:A8:00:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fd810822-237d-32c3-8f00-9309e6539b9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.0.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:00:40:95:6e:4a:f8:f3:1d:70:f5:a2:80:88:3d:95:ac:06:
         df:ea:bf:40:6b:a1:1d:db:af:73:c2:25:ef:ec:ac:a3:49:1d:
         bf:f1:95:0a:92:40:ce:2f:67:eb:d7:8f:47:fe:d4:cd:b8:61:
         6d:ba:7f:03:0b:2a:27:bb:a9:61:72:7d:8d:87:50:e1:2f:bb:
         2c:ba:6e:3e:d5:be:21:d7:8b:7d:de:21:a9:64:2f:58:51:b9:
         2f:ea:6c:05:f0:2d:00:22:cf:62:88:81:5e:99:9c:0d:c1:fe:
         cb:e6:89:4a:1f:de:6e:9d:ed:6d:76:6a:59:0d:67:cb:ec:dc:
         8b:23:38:63:d8:f5:aa:30:8d:f5:d9:74:84:0f:56:c7:78:0c:
         4f:7f:ef:57:ef:a8:e8:e4:bd:73:a4:f3:a8:93:fa:1a:52:5c:
         db:55:52:15:07:b5:6a:cc:09:b1:58:26:6f:af:4b:f2:32:80:
         07:2d:b9:46:cd:7c:33:64:ba:b1:7b:bb:99:ef:38:83:b3:29:
         6e:3e:47:8f:8b:5c:31:1c:c7:8a:0c:ff:2a:e9:27:57:5a:4c:
         43:20:a1:de:fc:10:f0:65:4b:3a:ee:b9:7c:9c:fc:9a:1c:17:
         64:b8:66:ee:5b:f4:39:4a:7f:4e:67:1d:ac:b0:9c:a7:a2:c0:
         e0:e3:da:05
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBrQ+g4g2qwyxg4VAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIzMDE5NTQwOFoXDTIzMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
OTY2MDFkNTgtYzZiZS00YzhhLTg1OWEtMjU0ZWMzNzBlOTgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygnckYXot3wduKg5HOtuH3NyWBTwvJKl8/tT
du7RDVVvPWnkvn1TD7C3WeXopTYB8AmUBSbtf5U/8yN6h2jU0Ta1wBb8Jp+KsuVs
J0ZrvJraDaYrqTFo6gvOk9Vo+5Y8Tma9cbwWPo/kOSONxtnNmPUivE/AqRPnvEq7
lDlPOPaJlYMrCXsJPibIR3EPEDAahzokc0+SVVR/wVATfnduFjbmFN5iRxqgdfke
Ls0koWce2JOL9Vid7QpvGftdK9J8IdSAa0Q6M4jO8ueIIAuASsJECJ5v92tVvqaW
CkJy2t7btkNjSrokW3VZL9JVcWU5aNipuwkIdE5cYDsR5zGt+QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMtvchXtF0RDoxTS62X9BpiZqACPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZmQ4MTA4MjItMjM3ZC0z
MmMzLThmMDAtOTMwOWU2NTM5YjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYAAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEABgBAlW5K+PMdcPWigIg9lawG3+q/QGuhHduvc8Il7+yso0kdv/GVCpJA
zi9n69ePR/7Uzbhhbbp/AwsqJ7upYXJ9jYdQ4S+7LLpuPtW+IdeLfd4hqWQvWFG5
L+psBfAtACLPYoiBXpmcDcH+y+aJSh/ebp3tbXZqWQ1ny+zciyM4Y9j1qjCN9dl0
hA9Wx3gMT3/vV++o6OS9c6TzqJP6GlJc21VSFQe1aswJsVgmb69L8jKABy25Rs18
M2S6sXu7me84g7Mpbj5Hj4tcMRzHigz/KuknV1pMQyCh3vwQ8GVLOu65fJz8mhwX
ZLhm7lv0OUp/TmcdrLCcp6LA4OPaBQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:53:33 2025 by rpki-client