Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0e6167ad-1657-33f0-b75d-f5ac53f5ce44.roa
File:                     0e6167ad-1657-33f0-b75d-f5ac53f5ce44.roa (raw, json)
Hash identifier:          pwfYkXQHCjk4wAhBWZWBgz7yEosApG9tlulKdT7yBJo=
Subject key identifier:   1E:51:E3:77:F3:24:F1:0A:A4:67:D3:E4:4E:30:BE:9C:E4:D1:D3:FD
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DC9263CC4A9D9A59BC497F000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0e6167ad-1657-33f0-b75d-f5ac53f5ce44.roa
Signing time:             Tue 03 May 2022 12:00:00 +0000
ROA not before:           Tue 03 May 2022 12:00:00 +0000
ROA not after:            Wed 08 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        146.130.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c9:26:3c:c4:a9:d9:a5:9b:c4:97:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  3 12:00:00 2022 GMT
            Not After : Jun  8 04:00:00 2022 GMT
        Subject: CN=bd42c9de-28c8-4658-a317-20425aa35948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8b:13:de:2f:20:a7:81:87:b5:89:11:84:0d:
                    11:ff:ce:51:96:1a:d7:89:f1:c7:4e:8a:c8:31:6e:
                    ac:83:7e:76:84:d4:c4:38:82:79:a2:fb:fe:25:27:
                    b9:fd:42:d5:3d:e2:c2:d4:12:df:00:d7:a1:18:45:
                    8d:60:f1:c8:05:a3:18:2c:f4:6b:95:38:c4:49:04:
                    33:40:6f:e5:b8:d2:6d:0e:d9:92:a3:37:60:09:fd:
                    b0:f9:de:4a:0f:33:ef:10:68:c9:eb:77:35:73:4f:
                    60:6a:a0:8b:51:9f:5b:d7:16:f3:d9:8c:6b:cf:bf:
                    69:2d:a0:1a:f6:35:c0:85:1c:44:ed:37:be:10:1e:
                    6b:37:87:de:18:9b:8b:97:e9:fb:90:6f:b9:e6:b3:
                    6d:4d:6e:21:26:58:14:c9:c0:0c:99:16:3d:52:ef:
                    fb:79:a5:8f:8a:87:83:cd:0d:6b:9b:dc:55:35:ed:
                    b8:b5:8f:86:7e:47:41:58:47:23:43:45:8d:ff:ab:
                    a6:2c:91:0e:cb:45:07:df:11:e1:fb:c6:ca:6a:52:
                    34:ed:24:23:b0:c3:c2:9f:fe:05:a5:bb:83:6d:74:
                    a1:34:77:8a:f1:4a:78:89:9e:71:0a:ad:20:3c:d9:
                    69:b4:87:a4:4b:ca:0f:f3:06:3b:47:68:02:2a:a1:
                    e8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:51:E3:77:F3:24:F1:0A:A4:67:D3:E4:4E:30:BE:9C:E4:D1:D3:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0e6167ad-1657-33f0-b75d-f5ac53f5ce44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.130.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:6a:0b:0e:09:25:fe:a4:b7:8f:1c:37:3f:7c:7a:04:fa:18:
         8e:08:54:79:6c:fa:cc:33:85:b6:c2:c4:98:24:a1:39:45:6a:
         a7:7e:d2:21:3b:ff:45:63:c9:df:4a:86:b0:4c:0b:de:f3:f8:
         bd:ce:16:31:8f:22:4f:c2:87:eb:ea:d3:e6:2d:7b:d9:c4:ce:
         57:30:ad:9f:75:e9:36:88:62:0a:2b:e8:75:b6:a2:46:0b:ae:
         16:6d:fc:75:7a:f5:95:7f:1b:94:35:cb:06:2b:1e:da:de:be:
         fa:5f:8a:1b:bf:15:2a:46:66:39:b6:d8:93:95:dd:3f:03:7d:
         59:d4:62:4a:bc:8f:36:b8:06:fd:7d:17:f8:c7:ef:f6:38:1c:
         43:c2:b4:91:50:d9:c1:24:7d:ed:25:28:82:5e:9b:38:84:1a:
         1b:45:74:91:77:ea:74:21:6e:9f:07:74:f6:12:c7:bc:75:2f:
         b4:5b:ed:1a:6d:62:02:26:21:49:f2:ef:49:67:da:2e:6b:7c:
         a3:d2:1c:13:48:c2:82:ca:47:ca:38:fd:e9:5f:6f:14:16:4e:
         01:0f:d4:ff:20:17:35:a1:e9:3f:23:d9:64:ef:19:48:ca:39:
         35:83:bd:be:14:e4:58:78:8f:dd:ed:6b:ab:25:66:1c:5b:e1:
         9f:3b:1c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:19 2025 by rpki-client