Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/02baf2db-f177-3528-9147-fe4911f80a7b.roa
File:                     02baf2db-f177-3528-9147-fe4911f80a7b.roa (raw, json)
Hash identifier:          eQ4wj+A7W/Dj0bqF7gAwEDRxzwRipqAyhW3O+G18OJI=
Subject key identifier:   DA:CB:CE:14:D9:42:42:1F:C9:D9:AC:BE:3A:D7:E5:CD:71:E4:17:3D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858404C0119586A7B1BD99434CF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/02baf2db-f177-3528-9147-fe4911f80a7b.roa
Signing time:             Mon 19 Dec 2022 16:54:08 +0000
ROA not before:           Mon 19 Dec 2022 16:54:08 +0000
ROA not after:            Tue 24 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        63.176.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:4c:01:19:58:6a:7b:1b:d9:94:34:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 19 16:54:08 2022 GMT
            Not After : Jan 24 05:00:00 2023 GMT
        Subject: CN=e5b88003-bce2-495e-8066-86d953341df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a7:c5:17:87:99:7c:fd:93:f5:1a:3b:c1:7d:
                    64:22:2c:e5:42:c0:8e:ec:01:92:c3:b8:28:13:6d:
                    7b:b7:76:28:bc:b1:f0:64:10:6d:02:4c:78:ee:87:
                    b9:0d:a1:2b:83:b0:10:8b:88:17:6e:b7:80:05:68:
                    09:0b:88:6e:7f:d9:bf:90:cc:f5:0b:b6:44:4d:09:
                    26:81:19:3a:2f:eb:46:fc:9a:e9:7c:2e:a0:4d:10:
                    cc:12:09:5c:17:b3:f0:2f:5d:91:db:06:5e:43:02:
                    42:23:6d:53:06:b8:a8:30:66:b9:1d:83:f7:d7:e0:
                    c2:c2:41:28:33:56:11:7b:53:65:58:8c:8d:1b:6f:
                    33:ba:96:ca:34:31:52:84:06:ec:b3:79:20:ad:9f:
                    22:70:3c:b3:83:96:6b:eb:04:88:ac:96:aa:91:62:
                    b3:c3:56:89:fd:88:84:dc:b2:d9:a9:d2:10:6c:ac:
                    d1:af:58:d9:bc:c7:08:29:65:e2:23:0d:ed:5a:50:
                    ba:16:b4:9b:85:07:d6:a9:42:38:cf:ff:e2:54:de:
                    f5:d5:8b:ca:22:de:23:5e:8a:5d:14:4d:f9:2d:d1:
                    90:d0:0e:c0:b8:51:7b:58:b0:68:29:ef:27:c9:d1:
                    6b:f0:91:19:39:8b:04:a9:2f:23:70:9d:06:20:0b:
                    e3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CB:CE:14:D9:42:42:1F:C9:D9:AC:BE:3A:D7:E5:CD:71:E4:17:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/02baf2db-f177-3528-9147-fe4911f80a7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.176.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:f0:fc:1a:c2:1b:62:25:94:40:bb:7e:a7:1f:30:ba:01:10:
         23:ef:fb:2d:bf:4e:39:2c:e5:98:57:0e:06:51:a9:54:ea:db:
         15:73:f9:64:0d:57:fa:cb:81:32:15:cd:9a:c3:c5:f0:7b:4f:
         a9:2f:c1:cd:3b:5c:95:8a:f0:d9:6e:5b:97:b6:54:a9:cf:55:
         4b:45:8c:d3:25:8e:11:57:49:86:0f:2a:4c:ed:42:73:84:27:
         28:5d:7a:ba:3e:d2:7a:22:2f:19:eb:7d:02:f0:ff:cd:fc:18:
         25:2b:62:e0:9c:8f:fd:ac:0b:3c:d6:36:0b:99:fe:46:18:27:
         55:e8:55:99:b5:af:0b:4c:8f:f3:9d:10:e5:c0:76:60:59:e0:
         61:83:4e:c8:fb:80:33:f4:64:b9:ca:60:01:af:22:a6:d7:0c:
         d9:6e:7f:af:76:09:4f:00:97:de:7e:96:27:69:7c:72:6b:09:
         bc:dc:4f:d1:7f:03:c0:dd:b7:e9:0f:a4:1a:c2:fa:bf:ac:7a:
         b5:71:1c:e4:54:05:30:88:bc:aa:52:d8:3b:00:f0:a9:00:7d:
         45:79:4f:46:1c:cb:a3:1b:91:92:4e:d1:f5:a7:e1:76:47:d3:
         58:6f:87:3c:06:0a:bd:cf:58:cd:74:48:6c:f9:15:0d:5f:42:
         de:07:ae:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:13:31 2025 by rpki-client