Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/07dcc218-4913-3a6d-af69-df1726c66df1.roa
File:                     07dcc218-4913-3a6d-af69-df1726c66df1.roa (raw, json)
Hash identifier:          n1vQeG8IClaa8sX/fv2P3/Rtn/3nhMsnE1Ax/UoIQUU=
Subject key identifier:   77:55:4C:E4:C2:80:5F:D8:DF:AF:1A:07:E9:0B:02:F7:1B:EA:72:4B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858408FACFD3EC62A3566D18B8CC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/07dcc218-4913-3a6d-af69-df1726c66df1.roa
Signing time:             Thu 12 Jan 2023 12:00:00 +0000
ROA not before:           Thu 12 Jan 2023 12:00:00 +0000
ROA not after:            Fri 17 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        130.176.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:8f:ac:fd:3e:c6:2a:35:66:d1:8b:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 12 12:00:00 2023 GMT
            Not After : Feb 17 05:00:00 2023 GMT
        Subject: CN=477cc873-2cfc-46c1-8919-daa7cbebf9f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ad:ac:50:2d:31:77:73:97:67:60:40:71:ea:
                    af:8c:b6:08:a0:45:ee:14:b3:fc:01:f0:65:58:fb:
                    89:3b:92:1a:6b:2b:ac:db:9c:bd:4d:7f:01:49:36:
                    24:0e:c9:b1:8c:85:34:a4:f9:f3:b3:34:74:60:95:
                    4e:63:31:2c:d7:9f:aa:30:a3:6f:ef:83:9d:c3:7d:
                    8e:9b:b3:2a:bc:94:0e:f3:63:67:11:9a:2b:c3:44:
                    c7:54:1b:e7:b8:c6:bf:3b:e3:48:5d:3d:b7:da:0c:
                    48:81:57:7b:0d:27:31:73:9a:f5:45:47:12:a0:3f:
                    2d:d6:89:1d:05:0e:2a:07:72:e2:1a:b0:ca:64:8b:
                    2e:3b:df:bf:14:34:87:c8:11:2b:e2:4e:c8:4d:f8:
                    d5:eb:90:6c:e0:cb:f9:39:da:7f:51:3d:00:d5:d8:
                    a5:c4:40:7c:1e:4f:6d:13:f5:72:dd:c4:21:ad:0f:
                    85:f4:ec:fa:ea:4d:03:6c:39:5b:88:4e:66:9c:25:
                    e5:2a:87:76:63:94:67:74:eb:60:89:76:35:2b:32:
                    ed:25:b4:6c:09:12:b7:30:49:d4:30:82:74:39:93:
                    da:6a:19:a9:89:ec:7d:fb:2c:cf:b9:ec:3d:77:f7:
                    fd:c2:76:80:0d:52:79:40:8e:e2:de:77:e0:d8:3d:
                    b5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:55:4C:E4:C2:80:5F:D8:DF:AF:1A:07:E9:0B:02:F7:1B:EA:72:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/07dcc218-4913-3a6d-af69-df1726c66df1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:a8:ab:7e:8e:5c:1b:a0:38:c3:e0:95:4b:c7:18:68:eb:80:
         3a:66:dd:b9:8d:37:31:26:d9:2f:e2:07:03:a0:b9:09:e0:4c:
         41:40:5b:78:06:f6:ea:1d:fe:dc:dd:2f:a9:8e:8e:f2:1f:ea:
         28:26:90:7d:f3:a9:60:fe:99:da:4b:cb:cb:e9:0a:9b:34:ae:
         b8:92:f5:7e:da:8b:26:06:b4:37:57:d0:ba:db:b2:83:5a:f7:
         dd:6e:e1:60:a7:f8:32:10:f1:30:81:f5:ca:a3:a1:25:ff:55:
         b0:02:21:97:a7:b4:b6:4b:6b:3a:a3:fd:96:4d:52:ab:91:b9:
         74:41:a8:fe:84:69:67:2e:69:35:c6:ae:93:d3:42:56:5d:c8:
         6a:23:5f:ab:39:36:d3:b5:1f:eb:ac:ac:ff:ba:44:c5:95:cd:
         3c:bb:bc:a2:41:dc:fd:1f:bb:56:ba:68:1d:ab:e2:e4:68:cc:
         b8:cb:46:36:d5:af:b6:ba:a9:19:95:ce:fb:58:e0:69:dd:d5:
         0f:05:02:c6:ad:9e:b0:13:e2:b8:96:f0:a9:4a:c2:6d:7a:71:
         49:59:21:3a:d0:ae:28:2a:64:1a:18:c3:f5:14:86:f1:1d:52:
         b6:0c:cc:17:c4:f8:8a:ce:17:bd:07:73:f5:5b:db:7c:62:9f:
         5e:eb:76:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:43 2025 by rpki-client