Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/034e3675-1e46-3cdb-a866-bd98fd30322f.roa
File:                     034e3675-1e46-3cdb-a866-bd98fd30322f.roa (raw, json)
Hash identifier:          F8mkVd9rAScVNNb9Q0xBcc2deGR0UrBxRDcHtbl8tIs=
Subject key identifier:   6D:DE:29:2A:E4:52:0D:80:38:0D:1A:30:31:3F:B2:92:68:80:D1:86
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CA4297A634477BC82D8D42480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/034e3675-1e46-3cdb-a866-bd98fd30322f.roa
Signing time:             Wed 19 Jan 2022 05:00:00 +0000
ROA not before:           Wed 19 Jan 2022 05:00:00 +0000
ROA not after:            Wed 23 Feb 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        204.45.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:a4:29:7a:63:44:77:bc:82:d8:d4:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 19 05:00:00 2022 GMT
            Not After : Feb 23 05:00:00 2022 GMT
        Subject: CN=290a0a9e-dbad-4c94-b2cd-1fc6f3716c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ac:bb:8b:3e:26:6e:d4:0b:44:03:49:a6:4f:
                    a9:e7:92:f1:a4:cd:16:7f:21:0b:20:e4:3d:10:23:
                    fe:a9:f7:69:90:61:35:b6:74:4f:d9:90:22:5c:53:
                    f5:4b:b5:f2:16:93:fa:36:19:57:f6:ab:86:fd:ac:
                    28:99:31:75:4d:28:d1:c3:61:fa:ad:40:10:8e:b5:
                    4a:72:fa:31:1c:e9:c7:87:a1:ca:5d:19:a7:80:53:
                    88:7a:d2:35:7c:3d:26:d0:10:87:70:91:1d:75:e2:
                    2b:2b:78:2b:af:77:54:45:ff:cd:d6:7e:03:c6:cf:
                    c7:e5:26:ef:53:95:c5:f3:ad:18:1d:42:bf:77:89:
                    eb:22:cb:c8:6d:04:b3:f2:53:f1:c1:ca:cc:e6:9c:
                    ee:27:da:4d:81:a0:2b:54:fe:2a:14:7b:e2:55:46:
                    a3:e2:21:bc:d3:d3:a3:83:f6:49:52:ed:e8:70:9e:
                    6a:a1:86:e3:13:7f:cc:a9:8d:00:ab:95:b8:24:60:
                    a0:e9:25:de:ff:99:a3:8f:de:ea:df:2f:f1:5e:18:
                    ee:a4:a4:4b:f0:85:84:1e:1c:30:f4:03:55:19:8a:
                    7b:9d:cc:eb:b8:93:fd:77:fb:ae:31:2e:36:7e:6d:
                    a4:70:3d:83:1d:8f:7e:90:ae:95:00:92:74:88:69:
                    06:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:DE:29:2A:E4:52:0D:80:38:0D:1A:30:31:3F:B2:92:68:80:D1:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/034e3675-1e46-3cdb-a866-bd98fd30322f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.45.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:ed:3d:39:f5:93:7b:f5:11:12:b8:03:3a:d4:aa:5e:16:5d:
         2a:60:96:ca:66:2d:9e:35:03:ea:dc:7c:ef:4a:bf:05:6a:a5:
         07:64:22:21:b4:7f:7f:94:ec:54:69:dd:45:ff:c2:97:77:8f:
         ad:86:18:4a:83:7a:b4:5f:86:33:d7:fe:3d:70:8b:58:94:8e:
         86:8d:f2:8a:ce:b5:b3:5c:40:c2:37:61:aa:2e:c2:89:ac:3d:
         3d:f9:ca:a0:fa:a1:77:19:f8:68:56:c5:d4:c8:76:8d:14:43:
         4c:3f:35:af:99:07:7e:6a:de:33:9c:b4:af:c5:24:e5:55:3e:
         3f:2b:99:18:d5:43:47:4f:f0:7b:1b:78:1c:6a:5e:e0:8e:9e:
         34:04:c3:7f:f2:b9:fd:95:f3:2b:81:84:ee:44:3b:26:61:25:
         99:ea:69:bc:eb:1d:93:8f:54:bc:75:6d:6a:11:d2:de:10:61:
         62:fa:1b:5a:85:8a:c9:74:6a:32:ed:4a:62:18:50:60:21:e9:
         bf:eb:c6:e1:76:a3:03:74:4c:d4:9b:c3:51:87:03:bf:0b:39:
         a6:b7:7d:ff:fc:6d:2a:da:0e:90:15:20:ae:fd:c8:70:68:5e:
         07:ed:85:2d:cd:46:c9:ec:5f:1d:41:21:48:06:72:78:06:aa:
         c3:59:91:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:44 2025 by rpki-client