Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16903272-59fe-3cf5-970d-676c3807e3d2.roa
File:                     16903272-59fe-3cf5-970d-676c3807e3d2.roa (raw, json)
Hash identifier:          uRZvXU5hzsIgk3rRp5xCDKQg/8pBNl7agrISM5Sy+DM=
Subject key identifier:   BB:77:EE:51:BF:19:12:2C:0A:2C:25:F9:25:8F:4F:C1:CC:A7:76:C1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CBE13491D3EF8A02279C7F560
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16903272-59fe-3cf5-970d-676c3807e3d2.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        173.228.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:be:13:49:1d:3e:f8:a0:22:79:c7:f5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=53b05873-3c2b-47f9-9d7b-5672b793b431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fd:4c:e5:7f:07:7f:71:23:29:4b:4f:f8:63:
                    84:6e:08:d4:4a:6b:72:3e:46:2f:f9:11:d5:2b:2f:
                    49:2f:a4:e4:70:56:0f:d7:23:be:bb:a6:08:fd:fd:
                    91:0b:be:d7:24:5a:61:85:97:f2:9a:47:b6:74:fd:
                    a7:6a:f0:e8:75:b5:6f:82:c3:b3:9e:2d:32:9f:09:
                    b6:c8:93:4d:98:1c:52:ea:c5:b9:6d:85:f5:d9:9b:
                    67:34:a7:e3:2d:32:a1:c6:2e:51:18:d5:5e:4e:f7:
                    fa:92:31:85:8b:86:a9:61:54:92:39:b9:e6:29:1f:
                    3e:1e:9b:e3:93:14:72:33:5d:6a:07:75:a1:4e:d6:
                    a1:d4:be:f1:86:d8:cd:15:4d:02:48:a3:6c:ae:a8:
                    4f:bd:8a:d9:8a:49:10:0f:10:2e:db:90:65:8b:d0:
                    87:60:59:9e:29:7e:1e:74:f5:73:db:dc:df:da:f2:
                    75:4b:ae:bb:8b:9e:c2:89:44:68:b0:bb:22:b7:66:
                    aa:d6:4e:82:58:2e:f1:01:e1:ce:7b:af:a0:38:04:
                    42:ff:6c:3b:9e:84:02:df:09:d1:50:56:a2:8d:9d:
                    cb:69:1f:c4:16:aa:0b:77:05:0c:d5:ce:5f:32:38:
                    15:22:d7:ad:7b:dd:d6:4e:09:53:8c:46:b2:fa:88:
                    af:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:77:EE:51:BF:19:12:2C:0A:2C:25:F9:25:8F:4F:C1:CC:A7:76:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16903272-59fe-3cf5-970d-676c3807e3d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.228.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:c6:20:3d:8c:f9:d9:06:de:0e:65:02:fc:d5:2d:dd:09:71:
         92:55:ca:41:aa:f2:19:9f:60:3d:b3:d2:29:55:ee:8c:89:4a:
         1a:5b:30:af:b0:20:1a:39:4d:dc:e3:3d:4a:48:d1:f8:66:b7:
         40:66:f9:3a:04:06:c4:fb:c3:9a:f9:55:59:05:dc:0d:4b:a4:
         1d:a4:1b:28:72:03:fe:14:ea:95:42:5d:71:0e:b2:f9:0c:c6:
         5a:cd:c5:0e:4d:95:b9:de:68:93:dd:93:db:10:96:46:6b:d5:
         3b:35:2e:2e:2a:be:ea:2b:c2:70:cb:82:7f:3e:de:32:e7:e5:
         9b:79:2c:6d:b8:5b:73:69:ab:80:d7:a4:f7:ce:02:32:c1:b9:
         aa:ff:a0:bb:49:e7:8c:b6:8c:06:52:73:b3:c0:b8:dd:61:9c:
         ea:ea:54:35:c8:d4:03:69:18:a7:36:87:94:85:ef:8d:c7:4b:
         ec:5d:c1:66:eb:d9:ba:e6:e2:05:fc:47:f0:df:c8:c8:f1:3f:
         45:27:22:e7:cc:e3:a9:e5:e8:76:a0:bb:8e:93:96:50:a9:3c:
         b0:91:a6:ca:a8:69:aa:fb:df:8d:dc:b7:4a:c4:08:ee:ca:a5:
         38:ad:c9:cf:c4:b8:38:b0:6f:92:77:2c:a2:46:2e:af:54:d1:
         f1:1e:3c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:15 2025 by rpki-client