Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/172266e1-dc21-3d9a-a917-bc49a3c5e59b.roa
File:                     172266e1-dc21-3d9a-a917-bc49a3c5e59b.roa (raw, json)
Hash identifier:          j0C/XMd0gylq9CXe8WdMh+xNriTFvUDbOolc90ID2H4=
Subject key identifier:   61:7C:8D:75:E3:89:1F:6C:81:44:C2:C3:CE:63:21:A1:07:05:83:8F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F2F4E41FD8AE1A0875C170440
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/172266e1-dc21-3d9a-a917-bc49a3c5e59b.roa
Signing time:             Thu 08 Sep 2022 12:00:00 +0000
ROA not before:           Thu 08 Sep 2022 12:00:00 +0000
ROA not after:            Fri 14 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        63.246.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:2f:4e:41:fd:8a:e1:a0:87:5c:17:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep  8 12:00:00 2022 GMT
            Not After : Oct 14 04:00:00 2022 GMT
        Subject: CN=6e5b1fc2-83a8-49c3-b8f2-a04870d3fe87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9a:a9:e2:2f:80:98:c4:e7:11:30:ea:51:d3:
                    a3:da:8d:6e:16:9a:ad:23:c9:c1:d2:e1:79:09:d6:
                    4e:5c:87:5f:bc:ae:d2:f3:af:4e:dc:3f:0d:bb:2f:
                    ee:3b:60:10:77:79:93:39:a8:fa:ad:f9:42:f6:1e:
                    fe:ea:24:f2:b2:0a:96:46:f7:51:f8:be:cd:d9:91:
                    f9:e9:5e:44:38:4d:e2:8b:13:5d:6e:a6:62:87:88:
                    4f:71:be:f1:23:ac:d1:39:c8:50:f0:ff:33:45:64:
                    2e:04:cb:65:4c:8d:e5:30:f8:2f:b6:dd:dd:53:01:
                    89:ed:3c:6a:d5:77:2a:e0:f2:25:d7:c1:4c:69:af:
                    d1:1b:0f:cf:bf:f9:5b:57:a8:bb:55:94:c7:00:65:
                    94:04:c6:90:50:ad:6a:70:3f:ed:56:f6:b9:3d:11:
                    8e:fe:70:79:06:ef:44:7e:74:67:b8:d7:a7:95:0f:
                    35:c9:2f:5e:f5:db:96:1a:84:a3:dc:f8:47:fd:fb:
                    a7:b1:28:af:43:26:10:15:de:6d:70:55:d9:3c:4c:
                    2e:da:00:70:44:54:63:56:19:ca:4f:bc:99:81:2c:
                    81:7a:09:1e:26:ca:8a:7c:89:26:b8:57:87:0f:e8:
                    a1:47:76:de:7d:f1:8d:4e:7d:77:e9:08:d0:d1:29:
                    59:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7C:8D:75:E3:89:1F:6C:81:44:C2:C3:CE:63:21:A1:07:05:83:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/172266e1-dc21-3d9a-a917-bc49a3c5e59b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:8c:29:56:33:66:16:a6:d8:d1:3f:7b:7b:a1:ca:da:af:06:
         e8:f2:e0:e6:d2:6d:67:21:92:2b:f1:e0:b3:c9:ad:36:f4:7d:
         04:1d:05:41:2e:79:1d:80:4c:df:f8:30:92:b7:82:f3:f1:d5:
         03:9b:0c:08:0d:0d:73:f4:97:f9:be:13:2c:0d:35:4d:62:2f:
         c8:27:54:da:f8:d0:79:7a:26:0b:eb:3a:27:85:da:8b:37:e8:
         fc:3c:01:36:f5:fd:14:6f:fa:14:59:44:a3:3c:d2:77:4c:89:
         f3:8c:90:a9:89:8d:cd:5f:5a:5f:a3:63:a8:89:e9:c6:28:ba:
         2a:9a:ad:59:1f:30:2e:c7:52:7f:26:35:04:26:79:01:84:15:
         65:ae:92:a7:43:53:cf:50:fe:91:3f:79:71:3a:a1:31:f4:76:
         51:b4:ae:45:c9:8a:6e:fb:41:16:37:70:3b:09:a5:61:cf:81:
         9d:18:23:07:6d:a2:e6:73:fd:9c:3c:70:f4:09:97:2f:86:0b:
         c6:20:f7:d5:c0:47:9f:5e:45:cc:92:aa:47:38:d9:1a:cc:e6:
         85:f0:10:8e:67:55:16:32:91:5a:0f:ff:85:55:86:75:b2:14:
         27:d4:d8:f3:f8:0d:06:d6:cc:56:1c:18:1f:a2:5a:b4:cf:10:
         d1:a2:17:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:12:45 2025 by rpki-client