Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/05e40df3-c566-3030-be16-84c56e0ddb1b.roa
File:                     05e40df3-c566-3030-be16-84c56e0ddb1b.roa (raw, json)
Hash identifier:          VFDyxrmGOkGuXNimYChB7YTqJMszYbrL5WTsj4cc2ts=
Subject key identifier:   E6:63:9F:8B:E4:96:92:4D:E5:24:E1:4E:42:D1:0A:D7:3A:77:49:B3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EC7BFC3B285835D021DE93A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/05e40df3-c566-3030-be16-84c56e0ddb1b.roa
Signing time:             Tue 02 Aug 2022 12:00:00 +0000
ROA not before:           Tue 02 Aug 2022 12:00:00 +0000
ROA not after:            Wed 07 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        204.45.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:c7:bf:c3:b2:85:83:5d:02:1d:e9:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug  2 12:00:00 2022 GMT
            Not After : Sep  7 04:00:00 2022 GMT
        Subject: CN=ba634a9e-e850-4ff3-b164-0c4885396833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4b:15:e6:be:36:fa:08:93:69:c9:69:32:42:
                    9d:9a:d9:4c:80:7e:2a:a1:5d:2d:b1:c1:ea:af:b1:
                    2b:4a:50:e6:d4:c9:a1:40:43:dc:e0:98:cc:3f:21:
                    ca:4d:f8:bc:56:a9:36:f8:40:41:d6:40:16:22:48:
                    72:0c:c1:db:10:37:95:8e:f9:80:ec:f2:35:b0:dc:
                    ed:3d:f8:ae:87:89:a2:27:96:a3:a3:28:a0:01:ae:
                    84:39:71:8c:80:87:e4:c0:88:e0:c9:e8:ea:b2:cb:
                    e6:5d:c7:62:c5:63:df:a4:b4:02:93:45:95:d2:d1:
                    0e:23:db:75:9d:9e:20:b6:90:0a:45:0c:0a:ed:50:
                    b3:55:b9:c0:32:c1:79:73:da:50:2d:a7:b0:c7:b3:
                    d2:2d:7f:31:22:e1:d7:f0:f5:2e:a5:48:9d:c2:68:
                    bb:4a:2a:72:7c:bc:4d:5f:b2:07:cc:ce:82:9f:56:
                    8b:b9:87:e9:1c:ee:e6:b1:d2:a7:04:ee:1f:45:f3:
                    d5:63:84:d8:12:af:2d:b2:64:f3:a3:eb:ad:5f:c4:
                    21:88:1e:25:a5:e3:04:04:f6:df:cd:fa:1e:1b:5c:
                    dd:b0:0d:ed:fd:31:f3:a9:11:83:95:1b:61:93:a2:
                    9a:eb:fb:6d:0b:6f:3c:28:8c:24:6a:26:31:79:17:
                    10:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:63:9F:8B:E4:96:92:4D:E5:24:E1:4E:42:D1:0A:D7:3A:77:49:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/05e40df3-c566-3030-be16-84c56e0ddb1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.45.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:40:99:61:8a:71:27:a0:df:c7:f6:9a:a2:99:51:46:fc:fc:
         51:55:b3:d8:2a:39:7d:47:73:bc:d4:aa:df:fd:7e:0c:63:3e:
         e2:1e:40:5e:f9:20:43:e8:67:8d:ee:19:63:cb:06:84:42:41:
         10:ec:16:fa:89:92:0e:0c:ba:53:a4:b6:c4:8d:6b:b1:7d:28:
         7e:bf:43:30:f8:89:74:48:f0:08:9f:16:f6:1d:41:50:61:51:
         12:17:d2:d7:37:e0:e3:e5:09:73:2c:fa:3a:31:ae:ae:0e:bc:
         8d:01:02:54:7d:a1:54:b2:b7:3c:7e:a7:d0:72:b5:cb:93:62:
         b0:bd:c4:17:52:db:8c:a6:de:cd:7a:b7:e2:11:75:9a:97:ec:
         8a:92:15:69:eb:e3:e5:d9:35:eb:79:e7:f3:92:30:01:2b:50:
         d3:13:53:e8:bd:17:ac:77:83:bc:a4:21:3a:73:ec:20:e9:53:
         0b:46:df:d4:db:9e:ed:6d:69:ea:8f:13:10:63:c1:ba:82:79:
         36:ed:47:70:d4:77:88:e1:62:85:46:ff:df:b2:7c:97:42:59:
         89:8f:5d:75:83:30:db:a9:34:dc:d8:71:b8:fd:7c:1e:a9:b3:
         e3:44:7b:d0:ca:54:41:4e:dc:73:e2:84:1a:f3:43:a8:85:2b:
         5e:0c:94:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:04:30 2025 by rpki-client