Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/05733f1e-319e-3477-ad4f-07471825c1e1.roa
File:                     05733f1e-319e-3477-ad4f-07471825c1e1.roa (raw, json)
Hash identifier:          1ylJsyy5s1ZZbaSh5bO5bT1y/OCI3ZsPQ8j0E27+YlY=
Subject key identifier:   D7:80:1F:75:82:4E:06:E8:BF:89:AB:8C:3F:AC:2D:29:75:C1:E6:F9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E46CE587EA3A6554A8A574440
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/05733f1e-319e-3477-ad4f-07471825c1e1.roa
Signing time:             Fri 17 Jun 2022 12:00:00 +0000
ROA not before:           Fri 17 Jun 2022 12:00:00 +0000
ROA not after:            Sat 23 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        172.103.40.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:46:ce:58:7e:a3:a6:55:4a:8a:57:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 17 12:00:00 2022 GMT
            Not After : Jul 23 04:00:00 2022 GMT
        Subject: CN=21b64aa0-6dfc-4482-a8a8-6820727d7304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fc:82:46:e8:9d:0f:2a:bb:cc:fd:65:9c:8e:
                    b6:50:f9:2c:df:f2:86:c9:fc:7a:58:48:ca:5b:e7:
                    f8:c3:28:6c:21:63:67:08:b8:e2:e5:ab:77:7b:dc:
                    ee:91:3d:61:a1:72:d0:4e:2e:c1:d0:16:58:14:76:
                    19:36:ba:b0:46:51:bd:81:e5:9f:22:0a:23:23:e4:
                    02:a3:74:9a:51:6b:40:e4:e9:37:3c:73:3e:72:cf:
                    ff:27:1f:e0:91:42:11:e9:89:09:48:7a:5e:c2:b4:
                    d0:89:03:84:47:2e:c9:4f:1c:d6:29:7a:5c:c3:8e:
                    88:70:6f:6a:4e:a6:80:97:d5:f0:50:bf:d2:13:53:
                    6b:95:36:b9:e3:7a:07:32:71:24:43:07:e7:b2:cf:
                    2a:f4:97:c5:e5:08:47:e8:85:a9:d3:02:f4:79:b7:
                    e6:a4:c5:64:7b:61:2f:70:1c:6d:7d:da:77:81:13:
                    00:b5:80:73:9d:c0:14:f4:fd:5c:b9:2f:45:8c:69:
                    54:80:24:35:01:1e:21:88:21:39:41:29:d3:4e:a7:
                    7e:08:d6:4d:78:d1:ce:44:93:91:ef:76:21:e5:f2:
                    1e:78:6f:a5:6c:73:b3:b4:34:58:0a:db:96:96:c7:
                    9d:71:57:6e:39:8a:00:d7:c4:e7:e0:16:02:41:71:
                    35:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:80:1F:75:82:4E:06:E8:BF:89:AB:8C:3F:AC:2D:29:75:C1:E6:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/05733f1e-319e-3477-ad4f-07471825c1e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.103.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:00:b5:d1:29:17:9e:ad:2b:74:12:bb:ca:e7:99:00:25:28:
         19:16:28:94:63:8e:ff:6d:61:d7:25:8d:9f:5e:ba:2d:64:ca:
         2c:83:70:80:61:71:2d:5c:30:79:15:14:b4:b0:01:aa:37:e9:
         1b:ab:db:9b:94:dc:13:53:52:b2:27:47:9d:05:b7:f5:5f:4d:
         16:3f:25:29:1a:25:2f:0c:f0:3d:03:61:3d:df:13:fb:f9:3d:
         bc:77:c9:74:6d:60:9f:d0:bb:5c:fe:48:0e:ab:fc:29:e2:74:
         92:4c:7b:f7:8a:c6:02:f2:ea:55:13:59:07:22:4c:eb:d9:7b:
         7f:7b:45:fb:6d:ad:b0:72:4a:74:0c:cf:5a:5b:97:36:44:d0:
         ba:80:56:d2:54:57:50:fe:23:27:d9:b4:8b:0f:b7:9f:1f:8b:
         0a:a5:77:ca:dc:48:ee:81:9a:95:9f:63:1c:f2:e6:08:e1:8e:
         21:f4:cc:40:24:04:8e:8e:14:b2:8f:91:2e:a9:ad:5f:b4:95:
         8b:8e:f2:47:32:8a:b8:76:04:d8:eb:a9:fa:d6:0f:2e:49:e8:
         08:d3:73:5b:6f:6a:4d:87:92:b2:79:b8:d5:7d:a0:e6:c4:1e:
         f2:81:e2:88:7f:8a:0e:31:be:ed:f4:81:44:f4:d7:8b:eb:1b:
         27:fa:11:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:22:53 2025 by rpki-client