Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/156411fa-5ad9-3003-abbc-bcc948541779.roa
File:                     156411fa-5ad9-3003-abbc-bcc948541779.roa (raw, json)
Hash identifier:          AVbAQXwGMU9h1MyifrsmSfDCKq23yLYnr2QMkl3STY0=
Subject key identifier:   A7:14:FC:67:F0:A4:6F:C3:64:DC:54:8E:65:CB:69:D1:64:70:9F:EA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C6F968FD8B99AE2D624201780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/156411fa-5ad9-3003-abbc-bcc948541779.roa
Signing time:             Fri 31 Dec 2021 05:00:00 +0000
ROA not before:           Fri 31 Dec 2021 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        107.176.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6f:96:8f:d8:b9:9a:e2:d6:24:20:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 31 05:00:00 2021 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=83cef335-a21b-4091-945d-39db9e7b7ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ee:c3:94:70:7d:7d:08:35:d5:7e:cc:4b:4c:
                    39:e2:ab:81:41:ee:60:47:f2:d1:da:5b:d4:86:cc:
                    3f:5e:bc:8d:1d:fa:eb:fc:64:f6:2c:18:50:3d:32:
                    9e:e5:61:a6:36:45:e8:80:05:40:d9:fd:4c:05:45:
                    a7:2c:1a:c8:04:1a:d7:26:fc:38:1a:6a:9c:c9:fc:
                    d7:0e:22:7e:8d:2b:e9:6a:71:44:65:71:e8:a3:db:
                    30:76:d1:84:3f:29:73:e6:d8:2c:f1:2d:9e:dc:bc:
                    37:c5:7e:ca:38:a8:ce:7a:35:7e:59:a3:4d:d9:fc:
                    9a:83:67:b7:bf:1c:d9:18:32:87:4a:c9:24:df:30:
                    91:01:9a:63:f9:10:e0:cb:ea:3d:76:84:d8:1d:b4:
                    7f:cd:32:6e:75:e8:73:aa:7d:20:1f:4d:f3:4e:bf:
                    e7:ce:68:b5:44:2c:22:c5:be:f5:d3:56:b8:e4:d0:
                    97:ed:b4:eb:6b:cf:fc:57:45:f2:c5:54:9d:e9:72:
                    6b:c5:1e:bc:0f:cf:71:83:6b:82:07:b5:fb:35:ba:
                    94:4c:27:1c:50:c0:87:89:46:59:68:41:93:e1:09:
                    8f:3f:a6:e6:2f:5e:97:2c:8c:3a:65:1e:f3:0b:63:
                    0c:93:c9:05:e6:f4:94:12:4f:8a:db:11:87:01:45:
                    2e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:14:FC:67:F0:A4:6F:C3:64:DC:54:8E:65:CB:69:D1:64:70:9F:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/156411fa-5ad9-3003-abbc-bcc948541779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.176.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:43:3e:95:8c:79:81:8c:33:76:92:59:02:95:2a:cb:1a:9d:
         6a:49:8d:65:94:83:00:9e:18:c0:38:f2:f1:74:39:d6:5a:7a:
         9a:d5:93:f4:ed:ab:bb:13:0e:1f:2d:48:83:8f:6e:1d:7a:66:
         ac:ce:a3:44:61:c8:d8:d1:86:4f:cf:cb:ce:2f:81:1d:8f:32:
         a9:c4:c4:fd:50:82:97:a9:41:5b:2b:15:d8:4f:ee:8c:d3:47:
         50:41:b4:7b:3b:d4:2a:a4:1c:7d:c2:c3:07:44:a0:46:10:7e:
         95:42:bf:b0:49:28:f5:ab:18:a0:fc:c8:d7:c4:df:79:3f:09:
         7e:43:fe:dd:55:88:74:88:6b:81:be:f7:db:8d:92:b5:46:a3:
         47:f7:1b:60:ba:40:d3:19:23:ee:20:90:96:b7:dc:9d:f6:a2:
         99:07:18:96:52:b5:88:3e:8c:28:c0:cf:5e:fc:5c:15:2f:49:
         bf:af:4d:34:dd:1b:ad:05:75:da:8b:1b:8f:90:1d:bf:45:15:
         c2:65:3c:3d:c8:e9:27:cd:88:23:ac:12:18:b5:fc:82:0c:e7:
         78:7d:d8:14:26:b8:95:57:c3:e7:c1:8e:67:a7:a7:51:81:18:
         fe:62:fe:5f:98:10:02:51:9e:cc:6b:69:80:27:5e:bd:88:16:
         c5:6f:d7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:31 2025 by rpki-client