Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0577a838-c2f6-390f-bd2d-f868b919ec59.roa
File:                     0577a838-c2f6-390f-bd2d-f868b919ec59.roa (raw, json)
Hash identifier:          KJuEKbHsCJq8+olxcPAH2eqxAuUH7fhebabt4HHNhCs=
Subject key identifier:   16:EF:38:B5:97:C5:AD:F8:89:9D:82:49:7D:D4:D2:55:44:2C:08:8C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C700CFC9313037E7F7838D8C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0577a838-c2f6-390f-bd2d-f868b919ec59.roa
Signing time:             Fri 31 Dec 2021 05:00:00 +0000
ROA not before:           Fri 31 Dec 2021 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        107.20.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:70:0c:fc:93:13:03:7e:7f:78:38:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 31 05:00:00 2021 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=71fcd6cb-cfd1-4f91-b521-8e312222507b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f6:ab:0d:03:98:de:23:5a:84:8f:80:25:8e:
                    cf:0c:7e:dc:27:56:a4:fc:d0:de:e5:b5:44:27:29:
                    47:f8:51:4c:e5:e3:2b:8a:19:56:9f:68:ac:76:10:
                    db:5c:89:dd:7f:1b:cf:30:fd:23:b5:ab:03:4a:2b:
                    c2:64:3a:3e:34:74:09:9c:4a:8b:38:83:16:93:bc:
                    7d:f7:60:2b:0f:53:ee:54:73:de:fa:1b:17:35:36:
                    bd:60:5a:6b:58:22:2d:8b:8e:f0:77:6c:73:a0:e4:
                    74:d3:77:fb:57:9d:c8:cd:16:bf:b1:dd:e0:3a:c8:
                    01:15:c6:3e:3c:b6:3d:c0:c7:65:3a:3a:fc:55:6f:
                    c5:90:06:17:88:5f:6e:d7:25:2f:dd:15:d7:49:cb:
                    94:d4:81:1d:9a:90:3d:7a:af:69:95:fd:d4:b6:57:
                    5f:9a:8e:f7:1c:01:47:42:62:74:9e:2a:66:4b:d2:
                    7a:61:ff:d4:be:92:e4:39:f9:4c:0a:aa:ea:78:79:
                    bb:1e:17:2e:c7:04:79:ed:1d:26:0d:98:6d:dc:06:
                    96:df:f6:1b:80:ee:6d:dd:93:38:56:f1:59:64:f2:
                    42:4c:10:c9:5a:fd:1b:b5:41:2c:e5:4d:64:55:03:
                    e7:17:43:7b:b6:14:52:9e:dd:c7:c7:c0:36:fa:3a:
                    26:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EF:38:B5:97:C5:AD:F8:89:9D:82:49:7D:D4:D2:55:44:2C:08:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0577a838-c2f6-390f-bd2d-f868b919ec59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.20.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:82:b5:00:a5:57:e2:4f:8b:4b:1a:a3:17:f5:22:ca:7e:61:
         0b:8a:d8:19:28:ba:cd:a3:fb:cf:7d:eb:ae:26:a7:68:54:9e:
         46:a5:f5:3f:d9:73:f0:dd:3c:a1:f9:4c:f2:a2:45:fc:19:12:
         d3:34:29:a8:5b:54:6b:39:2b:f3:42:e0:6c:cb:a4:42:89:85:
         7f:5c:54:f1:54:71:69:fa:80:86:4b:f0:93:64:c5:56:4e:b0:
         f0:8e:31:98:72:41:25:f9:53:df:96:64:c3:09:cc:50:4a:b8:
         67:a3:51:93:42:10:42:e8:d0:e1:3f:06:41:1d:df:98:2f:3a:
         27:32:dc:66:d9:aa:e6:38:c2:0f:7f:28:5e:ed:4b:c5:1c:73:
         9e:26:61:fd:f9:d7:73:8f:32:c5:62:28:bc:71:03:d8:78:03:
         2e:3e:e2:ac:9f:fa:12:ba:dd:41:0c:c0:ce:59:de:02:b9:57:
         7a:ee:e8:00:48:d1:4e:e7:37:66:c5:1d:86:50:7c:2d:70:89:
         fb:c5:8c:a7:81:bc:0a:ca:26:65:9a:1e:fd:70:74:92:f3:92:
         6d:0d:f1:6e:da:71:d9:41:51:96:86:89:c2:e8:69:8d:30:c8:
         1a:6b:90:1e:5b:79:6c:fb:a0:55:56:3b:c7:bb:b2:35:9a:e6:
         cd:0f:fb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:41 2025 by rpki-client