Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/04efb882-bba4-3784-8a38-4e7f3d59fa1f.roa
File:                     04efb882-bba4-3784-8a38-4e7f3d59fa1f.roa (raw, json)
Hash identifier:          W1DXEAgDTGQE2D8xkSJ1CXTFp+3Gsvu6nMTHDv1gz0Y=
Subject key identifier:   AE:CC:49:7A:D1:7B:E0:1C:7B:6F:AF:FC:57:0C:70:9B:B5:DD:1F:90
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D15B8EBFF741F9D0821A6C400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/04efb882-bba4-3784-8a38-4e7f3d59fa1f.roa
Signing time:             Mon 28 Feb 2022 05:00:00 +0000
ROA not before:           Mon 28 Feb 2022 05:00:00 +0000
ROA not after:            Mon 04 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        40.180.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:15:b8:eb:ff:74:1f:9d:08:21:a6:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 28 05:00:00 2022 GMT
            Not After : Apr  4 04:00:00 2022 GMT
        Subject: CN=3dc0d754-905f-415d-a821-bfa3d933b062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:16:15:97:fe:54:17:88:a0:3d:88:43:e7:1b:
                    85:d9:86:c9:78:ed:27:df:79:de:05:e8:f1:3a:38:
                    46:1d:1f:0e:8a:3c:ef:89:a8:34:49:e4:cb:f2:89:
                    44:d4:92:cf:3d:89:2b:23:36:c1:8c:98:d4:23:44:
                    16:0b:d3:75:3b:30:10:2e:02:82:50:d4:1c:9d:62:
                    e3:7b:f1:a1:9a:8f:ef:32:7d:b1:bb:3f:d6:a6:01:
                    2e:63:83:35:c8:6b:8b:03:d5:d8:ae:12:ee:b3:2a:
                    cf:f0:db:8f:71:fc:d9:21:f1:77:32:b3:f1:ba:35:
                    68:72:e4:fd:f9:3b:4c:30:23:00:8f:b7:fc:75:b2:
                    42:3a:e6:af:67:5e:1c:10:85:5c:29:2d:14:59:1e:
                    ee:b6:09:0b:f7:48:96:f8:f7:19:9b:58:5a:80:07:
                    6c:4f:8c:48:04:fd:3a:bc:e6:72:fe:72:3e:e1:65:
                    b5:56:91:ac:c8:c9:c5:68:05:54:77:3a:27:01:ad:
                    96:08:9c:25:f3:09:a6:4f:9c:26:02:2b:02:d7:35:
                    44:52:d7:69:9d:0c:3d:de:7c:b3:2c:0e:cd:b2:55:
                    85:19:9d:1d:8f:05:d1:9c:0c:0a:0e:76:6d:4c:cf:
                    42:ab:11:42:f9:de:f7:cd:98:f2:d2:ab:ea:a1:9b:
                    a4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CC:49:7A:D1:7B:E0:1C:7B:6F:AF:FC:57:0C:70:9B:B5:DD:1F:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/04efb882-bba4-3784-8a38-4e7f3d59fa1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.180.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:53:fb:58:6a:30:7d:9d:dc:d6:94:85:a8:97:44:d8:52:b6:
         70:5f:8c:00:c5:27:94:51:b9:de:ef:ea:ae:2f:c6:9f:12:3d:
         71:f0:05:08:56:97:6e:7e:a3:69:2c:a3:49:2c:f5:6c:85:01:
         67:f9:0b:a2:c0:10:f6:1b:77:d5:50:f3:7b:8a:3f:19:23:b9:
         e1:6a:80:52:71:9f:76:22:64:1c:45:2e:da:5b:f0:46:01:20:
         15:58:96:59:8a:ab:dc:85:db:dc:2a:f4:9d:ee:22:77:f5:96:
         1d:c1:a2:b4:ab:8c:97:0a:0e:79:cc:a9:37:92:a0:d6:7f:2e:
         cc:86:a7:71:64:77:e0:42:e7:10:de:e3:8e:7b:79:29:27:d2:
         6f:d2:5a:19:86:fa:2b:d7:6b:26:c0:ca:99:ea:f1:0a:0a:ec:
         e8:44:03:84:96:88:f3:71:38:0a:47:fd:f4:cd:be:2b:c9:bd:
         ba:bc:cd:65:d0:f8:13:cd:b8:b5:2d:8a:a6:b4:5c:fb:6b:94:
         2b:4a:93:a3:4c:05:18:4c:bf:e4:52:ea:1c:c5:df:e1:60:3f:
         af:6f:44:dc:54:cf:9d:04:39:0c:b4:85:3f:e8:e9:f8:f4:98:
         45:73:69:95:61:e0:0e:98:49:b1:bc:e5:52:c4:27:cf:ae:1b:
         43:5a:48:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:05 2025 by rpki-client