Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a4ec8aa-cec9-33fe-b751-97ba6781650f.roa
File:                     0a4ec8aa-cec9-33fe-b751-97ba6781650f.roa (raw, json)
Hash identifier:          FQeC0MBpXbfPwu+UNUhAiA9Lmjsh0rFIZWbnB4KITog=
Subject key identifier:   F0:0B:CC:8A:64:56:45:96:2D:D5:34:35:5A:FC:CB:CC:13:C1:1F:AC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F14C89D25ADB6B3E2DED3D100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a4ec8aa-cec9-33fe-b751-97ba6781650f.roa
Signing time:             Tue 30 Aug 2022 20:45:07 +0000
ROA not before:           Tue 30 Aug 2022 20:45:07 +0000
ROA not after:            Tue 04 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        166.117.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:14:c8:9d:25:ad:b6:b3:e2:de:d3:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 30 20:45:07 2022 GMT
            Not After : Oct  4 04:00:00 2022 GMT
        Subject: CN=eceafab1-cc16-49b3-8cc2-3c57f91bf4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:13:a6:ed:41:c6:3d:aa:51:02:9e:a7:c4:a1:
                    a2:81:18:a1:d9:4e:e3:f6:76:63:64:9d:ec:50:e1:
                    14:9b:ec:1e:d5:5b:bf:10:57:fe:b9:f3:9c:80:3e:
                    a1:86:96:29:36:4e:cf:d0:ac:42:31:2b:6a:9f:af:
                    23:62:5e:6d:1b:96:44:ee:79:65:b6:52:48:02:7b:
                    ae:45:1a:38:14:c0:d4:16:e4:1f:59:36:e2:2b:b5:
                    52:9d:3a:07:cf:e3:7c:6a:bd:da:0d:cb:b7:d3:1a:
                    df:36:f5:a4:b5:be:bb:9c:19:5f:48:95:59:f0:16:
                    79:39:60:e5:02:e6:56:fc:d0:f2:57:81:67:1d:39:
                    f1:0f:e9:08:36:3b:2c:ae:4b:23:72:21:da:33:dd:
                    fa:80:03:ea:ca:2b:6f:8c:37:3b:60:3b:4a:64:e4:
                    f7:fa:16:a5:fe:06:53:1f:bd:78:19:68:f6:2b:60:
                    cb:d2:c2:34:cd:af:f1:f9:79:2c:17:32:63:a0:f2:
                    5d:23:88:f9:ad:5f:93:e5:a0:f6:4e:06:dc:d1:64:
                    d4:93:b2:7f:45:a9:a2:0f:f8:82:7b:22:ce:c0:97:
                    8b:fb:3b:6d:39:84:d4:73:04:41:43:69:e6:b7:80:
                    1e:60:e0:2f:b2:05:db:6e:69:3c:23:7c:51:f5:36:
                    9d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:0B:CC:8A:64:56:45:96:2D:D5:34:35:5A:FC:CB:CC:13:C1:1F:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a4ec8aa-cec9-33fe-b751-97ba6781650f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.117.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:3a:41:f6:76:53:b4:e1:51:9b:ff:22:42:05:41:a7:a5:87:
         dd:71:c0:04:ff:9e:cd:e2:e9:fc:e2:fe:ef:c9:22:e7:7d:39:
         6a:62:f4:a8:73:b3:4b:d1:cc:cc:0f:a8:c3:6b:5a:4d:1d:de:
         c9:bd:69:ac:e5:aa:99:e9:5f:29:49:22:9d:c5:4b:bb:cf:42:
         4d:60:d7:99:50:78:e5:f6:df:a1:b3:87:e2:7c:29:57:2c:9f:
         a3:89:fa:81:ce:a1:18:4b:63:ea:c5:92:cd:a6:94:0f:c5:4b:
         4e:e5:94:3d:f8:4a:3a:2e:e8:ff:ef:ff:83:a4:c8:a0:2b:09:
         9c:1a:a5:ee:7b:25:ea:27:cd:dc:a2:8b:e8:72:ae:c2:2c:ef:
         40:3b:73:7a:0b:e8:e0:be:a5:fb:e9:ad:54:35:b8:42:5b:6f:
         1b:f5:94:c3:15:46:85:82:c5:66:dc:4a:79:62:e1:84:f4:14:
         1e:c7:3b:5c:1d:e1:fa:31:68:ac:98:7a:b6:c0:35:10:c4:dc:
         50:ce:85:61:53:3f:28:54:25:f0:59:e7:b8:19:b1:52:15:81:
         8d:d1:9d:79:5c:fe:45:0b:98:4d:6b:26:8e:89:62:eb:53:23:
         ca:c0:23:a0:cc:35:11:77:70:e3:98:8a:f3:b7:23:2d:35:c2:
         0a:1f:26:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:54:24 2025 by rpki-client