Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/171ecd5b-4f25-3559-95ba-a3f675e3882b.roa
File:                     171ecd5b-4f25-3559-95ba-a3f675e3882b.roa (raw, json)
Hash identifier:          Kj6uGIbUZQMHQsRZIG0hoAYxgnH8KcNj7ZVHmB3HnH8=
Subject key identifier:   4F:41:87:D0:B5:66:A3:BF:50:F7:27:70:24:45:2A:CB:54:7F:84:00
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DF6EC0A668A997A4492623F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/171ecd5b-4f25-3559-95ba-a3f675e3882b.roa
Signing time:             Thu 19 May 2022 12:00:00 +0000
ROA not before:           Thu 19 May 2022 12:00:00 +0000
ROA not after:            Fri 24 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        100.24.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f6:ec:0a:66:8a:99:7a:44:92:62:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 19 12:00:00 2022 GMT
            Not After : Jun 24 04:00:00 2022 GMT
        Subject: CN=11f4630b-3f6d-4cf3-9b39-242dc4b63ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:28:1a:45:05:cc:5b:0f:f2:c6:90:98:9d:58:
                    79:d9:fa:a2:75:27:b0:e0:49:60:a6:1b:12:29:e6:
                    32:48:9b:cb:c3:d9:08:7b:db:a3:e6:8d:63:b7:92:
                    58:f0:7c:34:b9:3a:0f:2e:85:0f:e1:05:1d:ca:75:
                    b0:e2:87:56:78:61:15:2c:72:c1:d2:89:ea:5d:6e:
                    3c:10:a1:c9:d7:7b:ee:f0:46:05:97:bc:99:1a:0e:
                    46:d8:92:d6:cb:df:88:14:e0:69:fa:6a:52:fa:bd:
                    c0:29:84:e3:a9:3e:02:6d:2f:d4:4f:c0:3a:ea:3a:
                    0c:8e:9c:d2:dd:6b:47:3e:9b:9f:51:9c:ab:75:36:
                    b7:01:a3:95:0f:36:bb:22:b4:d4:c5:0b:73:00:cf:
                    9e:f9:4e:29:a1:85:e9:ac:69:cc:73:ef:f7:e0:22:
                    55:b9:10:c8:4e:08:e7:12:06:0d:12:c0:cb:93:5c:
                    56:d1:63:4b:cb:7c:24:65:94:aa:7a:f1:ee:08:58:
                    f7:23:ea:25:b5:4b:33:55:80:05:16:48:44:9c:28:
                    d6:c3:3b:1a:46:01:84:eb:7f:86:46:3e:95:8e:8e:
                    ce:0a:b9:ed:25:cb:8f:76:7e:50:5a:b7:1e:70:19:
                    c1:3a:d5:73:16:1e:8e:60:04:dc:79:c2:f3:d2:cc:
                    59:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:41:87:D0:B5:66:A3:BF:50:F7:27:70:24:45:2A:CB:54:7F:84:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/171ecd5b-4f25-3559-95ba-a3f675e3882b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.24.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:cc:ca:ce:b1:f2:8b:a1:d9:29:a9:11:1f:6b:d9:0b:a6:db:
         c1:c3:b9:c9:2f:50:d9:b3:36:39:3f:f8:cb:2b:15:47:18:c1:
         a9:8e:26:e6:6f:51:aa:a2:e8:70:3b:66:4b:c9:ba:d4:24:5b:
         10:9a:91:2a:26:54:ab:15:e7:4c:d7:9d:c1:28:ca:e6:31:22:
         e3:42:ed:5c:2d:67:d7:cd:c7:77:ed:22:27:4d:b8:a4:63:dc:
         18:a5:ff:57:13:9a:57:ae:61:eb:55:b7:2b:f9:b2:73:4a:d0:
         fc:87:d2:97:e3:ed:d9:5f:0c:c4:0a:4d:43:ec:97:07:77:95:
         ea:05:e5:3b:88:8e:c8:90:d5:73:f7:5b:38:06:a5:2d:d3:09:
         3b:4e:88:c8:a0:e5:96:72:d9:08:ee:d5:d3:d4:41:96:9c:dd:
         ce:54:ea:dc:56:fc:1a:9a:f5:7f:6e:4b:6d:68:48:6c:c4:6d:
         62:87:fb:3c:4d:d7:0a:94:df:7d:5d:c1:b9:69:ac:73:4d:7d:
         89:24:01:a2:42:ac:81:ab:b3:fc:92:06:8d:06:21:25:e0:d5:
         a3:e3:6d:49:79:3d:14:eb:02:ea:40:53:5b:91:cc:1b:0d:b4:
         72:04:c8:1e:7e:4d:38:16:5f:9a:9d:cf:53:7c:eb:0b:b4:ce:
         8d:e4:0e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:25 2025 by rpki-client