Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/06817382-ba24-35d1-bd45-0dd388ae507b.roa
File:                     06817382-ba24-35d1-bd45-0dd388ae507b.roa (raw, json)
Hash identifier:          Ih2sbfXqDxoqX4rEzfI43Zr9kU9C1eRkQhj/I3AUoqk=
Subject key identifier:   D4:78:E9:10:31:BC:32:E7:7A:A1:2A:6C:20:41:0A:B4:3C:E7:DA:B6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D336AACF619966BC74932B510
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/06817382-ba24-35d1-bd45-0dd388ae507b.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        184.32.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:6a:ac:f6:19:96:6b:c7:49:32:b5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=b34a621d-aaca-4fc3-b08a-b0290f367a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:22:12:a6:6b:65:b4:fb:d0:9a:e3:23:87:1c:
                    17:fd:a8:77:a9:76:32:32:10:c1:56:75:f8:02:00:
                    df:6d:83:57:48:6a:14:95:18:a0:42:6a:be:d0:83:
                    1f:8f:0f:5d:19:c3:96:4d:82:28:5d:c3:94:c0:39:
                    de:a2:99:61:d2:f0:14:8e:95:a7:c5:a9:48:9d:dc:
                    26:63:c7:41:46:4a:b7:16:ed:47:af:2c:c6:77:e0:
                    dc:15:fc:9d:0a:10:6a:92:46:a1:58:17:94:fd:8e:
                    2e:9a:84:2e:43:89:eb:99:c6:3e:f0:21:c7:9b:97:
                    86:25:7e:26:70:f9:b5:cc:94:48:49:91:20:6c:0d:
                    46:13:56:b3:f9:03:04:e4:8b:1c:4e:80:b1:db:79:
                    53:7c:60:94:ab:ad:cb:b6:04:d4:81:3e:0c:49:e9:
                    46:5c:73:e4:fb:df:ad:3d:17:20:38:ee:4d:f2:03:
                    08:b9:35:cd:44:d5:af:73:22:2c:d6:f8:89:41:b7:
                    e8:76:5a:91:36:27:5e:45:ea:33:f6:0d:d2:1e:96:
                    21:77:56:a8:5d:b8:9a:02:b4:b0:9f:f1:49:d0:1f:
                    fc:3d:83:87:d6:ef:03:3b:f2:de:84:a5:a0:c4:47:
                    0a:e4:03:3d:3f:1f:e6:c8:cd:bf:3a:f7:ef:1c:3c:
                    83:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:78:E9:10:31:BC:32:E7:7A:A1:2A:6C:20:41:0A:B4:3C:E7:DA:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/06817382-ba24-35d1-bd45-0dd388ae507b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.32.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:23:39:51:b4:e4:fe:0f:cf:aa:86:0f:83:76:17:a9:27:ac:
         19:c2:e0:4d:b6:4b:9f:37:41:1c:09:7b:9f:ba:d6:c1:4f:27:
         1f:e4:43:96:a5:55:4b:7a:87:a2:2b:82:a0:e9:5a:85:e4:23:
         6e:a4:38:92:03:c1:6c:fa:a5:c0:95:99:5a:dd:f9:58:a9:b8:
         f0:4f:85:83:fb:ce:fc:06:8c:53:7d:cc:43:dc:06:18:9b:4c:
         91:d5:68:96:5e:bd:52:a9:19:dd:03:52:f8:06:d5:30:b2:77:
         c3:1b:01:7f:60:3f:d6:ca:49:4a:59:9d:10:05:90:91:9d:45:
         49:bd:e3:37:c2:a6:05:bd:7e:92:05:b3:ad:98:7d:9b:e1:b0:
         03:7e:11:9e:38:25:fe:38:67:04:e8:a9:24:8f:5c:86:a8:5e:
         e6:0f:de:06:ec:11:6e:11:99:77:f5:8e:c4:e5:49:3c:29:ef:
         8e:4e:8b:66:9e:32:a4:0a:3c:55:e6:3b:e5:e4:2c:17:9e:26:
         4a:15:3f:22:6d:e4:bd:84:5b:ab:02:b3:63:c6:d3:6e:7e:39:
         89:f3:9c:db:6b:7b:6f:2d:4a:57:81:1e:87:b2:9e:43:c2:35:
         86:b0:f8:fe:e9:24:13:a2:c5:80:8d:33:33:e4:52:0a:4b:ea:
         01:c7:0d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:04 2025 by rpki-client