Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1768b772-396d-3165-aead-1d4dfa369065.roa
File:                     1768b772-396d-3165-aead-1d4dfa369065.roa (raw, json)
Hash identifier:          cUvfKIW78N+hrZzzpr6XJaOkrJ37uHSTmBpxIOBvoBU=
Subject key identifier:   B9:EF:30:03:AA:A0:4F:A4:60:0F:83:9B:2C:BE:90:A7:E2:42:54:51
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF014BC88868E6E1F2AF16700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1768b772-396d-3165-aead-1d4dfa369065.roa
Signing time:             Wed 16 Nov 2022 12:00:00 +0000
ROA not before:           Wed 16 Nov 2022 12:00:00 +0000
ROA not after:            Thu 22 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        40.163.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f0:14:bc:88:86:8e:6e:1f:2a:f1:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 16 12:00:00 2022 GMT
            Not After : Dec 22 05:00:00 2022 GMT
        Subject: CN=85bf3462-b862-4516-8507-ba53144692d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a8:a9:6b:a2:f6:3a:fe:81:a6:32:90:00:12:
                    8a:9b:a4:5d:f8:09:c8:93:cb:12:f0:8f:6f:cd:ce:
                    d3:b1:12:93:06:e0:82:ef:20:3e:d6:66:4e:95:46:
                    b5:46:67:23:3c:b7:0a:35:17:93:75:f8:d2:31:7b:
                    b4:60:c1:ec:13:5b:ad:9f:95:ac:e8:b7:bd:2c:23:
                    b5:4d:4b:1e:08:5a:1d:42:17:27:ee:fb:38:d1:7b:
                    c0:37:b7:92:58:d0:fc:b8:6a:ec:07:b0:e4:80:1f:
                    f4:8c:34:ea:b7:23:e5:f4:39:35:2a:d3:2b:3f:d3:
                    9d:91:a7:f9:61:97:1c:a6:f8:c8:14:bd:63:d1:a1:
                    58:d2:bb:73:00:de:4b:2f:8b:bf:47:20:69:20:26:
                    3f:f4:e7:4e:29:26:40:98:f8:b3:ff:a6:94:8e:be:
                    dc:14:ac:01:99:b9:dd:3c:32:2c:96:24:b3:25:e2:
                    b3:b0:3e:73:d6:e9:38:c9:3a:52:55:fe:ab:d9:e0:
                    a6:1a:e9:09:c0:a9:be:1d:7c:e5:29:2f:48:b8:4c:
                    7c:b6:05:73:d5:4a:70:5d:46:2d:5f:32:0f:14:d9:
                    76:95:ed:b3:d1:6e:9c:0d:96:2c:8f:f6:3d:ae:69:
                    fb:2a:66:e1:01:58:b4:3e:3b:a1:e0:8c:b3:26:97:
                    50:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EF:30:03:AA:A0:4F:A4:60:0F:83:9B:2C:BE:90:A7:E2:42:54:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1768b772-396d-3165-aead-1d4dfa369065.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.163.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:46:26:09:7a:ac:95:6d:ba:fe:ef:99:6d:ed:46:71:29:6f:
         5f:11:22:7d:15:36:2f:e8:45:66:9e:f1:cd:98:68:68:f9:fa:
         d8:1f:42:7c:91:1a:98:90:65:e0:eb:81:80:c4:fb:1e:5d:b4:
         26:f1:78:ae:54:14:63:b3:5f:ab:e8:c6:83:53:ad:c0:90:df:
         21:88:fd:31:64:26:10:79:da:04:45:75:25:57:a8:55:ed:5e:
         c0:92:f9:03:b9:43:2d:9f:2e:3b:c0:ad:4b:1f:77:10:fb:05:
         69:f8:c9:3f:fe:4c:96:87:97:63:19:6c:3c:55:8f:27:3a:d0:
         ff:7b:b0:ee:45:ba:71:f8:db:e4:8d:bc:10:6f:38:4e:a6:c2:
         3f:bb:8b:e5:06:be:86:34:e9:73:90:1c:c8:87:b3:ab:e0:dd:
         ee:fa:73:2c:40:0c:6e:b6:8c:d1:b4:06:33:38:52:10:d8:00:
         c0:10:4d:95:46:55:6e:29:ba:6b:96:6a:d0:31:7d:22:7f:bd:
         60:51:0c:1c:68:ae:30:30:01:e3:b9:34:9d:d4:3d:0b:26:21:
         b6:12:e2:8b:91:0c:f5:ce:90:72:83:c7:d4:5e:18:a9:40:aa:
         ca:86:83:b1:f6:7f:ef:5e:c2:04:bc:e1:9d:d6:ac:bb:f2:3e:
         fb:c4:fb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:32 2025 by rpki-client