Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/01b544f6-3062-3eda-8d96-9322f78ccbeb.roa
File:                     01b544f6-3062-3eda-8d96-9322f78ccbeb.roa (raw, json)
Hash identifier:          aV5Vh1hdUPpllwyTN5ftUkVqxcP2XoLrF27Wh33w3DA=
Subject key identifier:   D5:47:00:10:8D:B2:71:04:AA:5F:CE:23:3A:98:55:00:F4:54:F8:12
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E622436386E8FCE2A46554380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/01b544f6-3062-3eda-8d96-9322f78ccbeb.roa
Signing time:             Sun 26 Jun 2022 12:00:00 +0000
ROA not before:           Sun 26 Jun 2022 12:00:00 +0000
ROA not after:            Mon 01 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        173.83.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:62:24:36:38:6e:8f:ce:2a:46:55:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 26 12:00:00 2022 GMT
            Not After : Aug  1 04:00:00 2022 GMT
        Subject: CN=cfcf583f-ee6c-4a4d-bde3-0ed560245dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e0:4f:53:d8:6b:83:e1:6a:7a:01:36:c2:ee:
                    40:00:7c:7b:3d:c9:9f:b8:40:67:b6:41:32:9e:50:
                    73:12:82:e3:fe:c2:d7:03:9c:5d:ee:7a:81:24:11:
                    93:c9:75:0f:e0:fa:d5:30:62:c3:ea:0e:c2:08:9a:
                    f2:15:e6:a9:7e:9a:a9:be:f3:f5:9b:3d:82:61:b2:
                    0c:d1:f5:bc:f5:97:70:e1:a1:7e:ce:ce:65:8e:e1:
                    a0:ae:8b:bb:2b:02:00:7c:12:86:d3:1c:29:23:8f:
                    cb:49:25:b7:35:1e:85:34:50:6e:b8:a4:e7:04:ad:
                    ee:e0:bf:93:4e:b4:f7:3f:25:61:fc:f4:55:76:a2:
                    44:ad:ff:4c:13:a0:e9:dd:1a:46:3b:fb:75:44:93:
                    e3:61:81:61:27:3d:9d:f3:c6:61:47:00:3c:4f:71:
                    b3:6f:48:4f:c7:bb:a6:f7:b7:23:46:57:be:5e:92:
                    4a:d3:b6:1f:19:83:8c:fe:bc:c7:b6:74:d4:aa:b7:
                    d7:df:fa:1d:1b:ba:01:3b:13:4c:88:24:2c:2e:89:
                    a0:29:27:a7:2c:0c:64:63:fb:cc:c7:96:f6:83:18:
                    67:ef:a1:2a:32:60:79:9a:59:0e:96:8c:2b:8d:8a:
                    ef:1c:93:7f:e0:84:d9:1d:d5:d5:de:69:f0:4b:e0:
                    d2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:47:00:10:8D:B2:71:04:AA:5F:CE:23:3A:98:55:00:F4:54:F8:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/01b544f6-3062-3eda-8d96-9322f78ccbeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.83.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:6b:1d:f9:63:e0:87:59:4b:eb:97:83:8f:9d:47:1f:75:35:
         96:b5:30:13:98:84:3c:c3:4b:c5:4b:00:18:2f:cd:e9:ba:0b:
         80:05:d1:2f:10:f9:62:cc:80:21:ec:bf:c9:94:58:55:ad:64:
         67:e9:ef:65:4a:1f:a6:66:e0:bd:c5:87:09:82:2b:cf:6d:06:
         5b:c6:46:53:71:60:59:d8:bb:e5:0c:98:79:95:cf:c7:d4:7d:
         db:5d:36:28:4e:43:20:73:df:bd:04:dc:08:e4:f7:9f:73:5d:
         c2:5f:13:12:6c:c4:a5:06:6b:47:b7:9e:92:b9:c8:4e:08:74:
         b9:09:a5:c6:3b:60:a8:07:89:17:ee:23:5f:51:d6:49:94:8b:
         08:3b:1b:3a:5b:37:dc:92:94:67:7b:94:7d:f1:60:20:7f:6a:
         92:70:13:44:de:5b:b7:40:22:1d:11:28:ff:4e:12:d4:4b:13:
         41:0e:8b:49:f1:43:f8:56:35:87:88:3f:33:f7:0d:38:d9:46:
         73:9f:9c:81:67:f2:4e:a1:a7:84:9c:2d:b7:fd:7e:1b:31:a3:
         cb:57:5d:85:10:72:a9:26:22:2d:0d:b4:fa:67:d9:e7:21:56:
         6d:0d:b5:5f:23:c1:4e:d4:f5:3a:48:d6:1a:66:ac:29:41:34:
         52:ba:2a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:25 2025 by rpki-client