Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0e6fcf91-6f44-3f5c-ba59-1f807c6782bb.roa
File:                     0e6fcf91-6f44-3f5c-ba59-1f807c6782bb.roa (raw, json)
Hash identifier:          M1X+G3DPbZ5hORln4MQguQSUyqLiKXFBjyiN6yDg8D0=
Subject key identifier:   D8:21:33:AC:24:1E:12:31:B8:E3:CA:05:94:EA:BD:1A:DE:DA:C3:74
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584061D09FC3DC441C6B8222F180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0e6fcf91-6f44-3f5c-ba59-1f807c6782bb.roa
Signing time:             Tue 27 Dec 2022 12:00:00 +0000
ROA not before:           Tue 27 Dec 2022 12:00:00 +0000
ROA not after:            Wed 01 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        15.252.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:61:d0:9f:c3:dc:44:1c:6b:82:22:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 27 12:00:00 2022 GMT
            Not After : Feb  1 05:00:00 2023 GMT
        Subject: CN=76ac55c0-2d64-44cb-92ca-85b745434d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c8:df:0c:53:77:1f:cd:0b:4d:1d:91:36:53:
                    98:85:c5:87:59:8c:53:83:ef:af:ca:55:41:4a:4d:
                    1c:f9:1a:d4:b6:c0:23:b2:47:e7:cf:23:82:a2:00:
                    cb:17:8e:11:5c:c4:84:f7:3c:b3:9b:15:60:a8:cb:
                    b4:0c:fb:ae:8c:ba:1c:71:43:e3:2b:75:85:f0:d2:
                    37:8c:ec:53:30:90:5d:02:42:c3:3c:e3:e7:9d:7d:
                    03:14:93:7a:69:b4:8d:c3:94:59:f7:bf:38:75:c2:
                    94:d7:3e:02:d2:01:a4:69:39:75:b7:40:36:d1:2d:
                    b4:0f:a8:d7:47:2b:17:80:06:d1:54:c1:4a:07:9b:
                    f0:cc:a9:26:f2:23:ea:4c:36:10:da:89:6d:c8:63:
                    f2:4d:48:39:ab:32:3c:27:ce:38:13:8c:34:2a:c0:
                    b1:97:3b:2b:fe:4d:ff:88:d1:8e:b9:4e:5f:17:56:
                    33:b1:3d:8c:29:06:72:3d:36:db:79:18:37:28:da:
                    23:95:8a:fb:d0:0d:bc:b9:0b:6c:f7:9e:75:ef:8c:
                    dc:8f:25:e9:f4:f8:b9:7e:c9:25:89:51:5f:ce:29:
                    e4:48:14:8d:a8:44:44:30:d0:03:cb:74:15:6b:57:
                    dc:6b:68:3c:d2:e7:ed:39:45:53:bc:ea:ec:2b:84:
                    df:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:21:33:AC:24:1E:12:31:B8:E3:CA:05:94:EA:BD:1A:DE:DA:C3:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0e6fcf91-6f44-3f5c-ba59-1f807c6782bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.252.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:b9:d4:b1:ea:c2:e4:6d:a4:ed:fa:8e:3d:b6:08:ca:b6:42:
         aa:0a:17:87:3f:53:01:0c:17:1a:8a:fb:cb:11:62:f9:03:0c:
         e6:6f:0b:2f:43:c8:62:2c:56:19:99:43:63:ad:b6:a9:24:ba:
         82:25:92:6d:01:e7:6e:07:1b:78:cb:a0:bd:06:25:fd:0c:ca:
         e8:16:6d:20:d0:a2:ba:f1:ae:25:1f:d6:30:c9:e3:87:7c:da:
         82:d6:ef:fb:5c:89:af:e9:e3:a7:b9:7f:d4:6b:b2:01:8c:18:
         d8:08:43:49:2c:ba:d7:96:f4:58:3b:fc:83:bb:08:a7:0f:52:
         d7:50:e7:f6:52:98:43:77:bb:99:f5:e5:4d:43:68:78:cc:ca:
         de:da:c4:55:8d:cf:92:5c:72:85:94:0a:dd:8b:10:ce:08:e4:
         aa:bf:c8:30:10:a8:16:c9:87:9d:a7:c5:69:88:19:ef:5f:ed:
         6b:4c:2e:ab:dc:a4:04:78:35:32:5d:9f:b5:9b:35:b1:12:67:
         07:fd:73:4e:c4:d9:16:48:8f:16:a4:75:13:d0:59:ca:00:d3:
         f1:5e:35:f8:a5:db:2c:5c:89:9b:ab:19:ce:90:e2:0b:c2:fe:
         98:28:03:23:d4:48:13:c0:f8:73:d3:69:f6:ba:30:8d:59:77:
         85:8f:12:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:24:39 2025 by rpki-client