Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1bf3768b-5eaf-3d61-9adc-8d529280d4ab.roa
File:                     1bf3768b-5eaf-3d61-9adc-8d529280d4ab.roa (raw, json)
Hash identifier:          +M+tPNGGxwcUVI+c/30e969iZgZGy/HLj5hr5yDtPkU=
Subject key identifier:   41:14:A3:69:67:C5:3A:09:2E:D2:C3:82:18:5C:2D:B4:BE:26:55:AE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D3CD62B25D806BB99E4F0C608
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1bf3768b-5eaf-3d61-9adc-8d529280d4ab.roa
Signing time:             Mon 14 Mar 2022 04:00:00 +0000
ROA not before:           Mon 14 Mar 2022 04:00:00 +0000
ROA not after:            Mon 18 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        40.180.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:3c:d6:2b:25:d8:06:bb:99:e4:f0:c6:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 14 04:00:00 2022 GMT
            Not After : Apr 18 04:00:00 2022 GMT
        Subject: CN=3f1cedfe-3ad0-49ec-ad54-0908c8a25d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:60:17:4b:42:5b:09:db:b1:76:d1:56:30:
                    55:be:f8:a2:33:9e:2f:2a:f1:42:7f:f8:f0:03:e4:
                    7d:0e:c3:40:37:48:1f:3b:7a:2c:ab:e3:fb:1c:d4:
                    d0:56:cd:57:f2:47:ab:33:f3:65:ef:ac:3a:5d:e1:
                    75:cd:c1:08:71:59:a9:ad:1c:d5:24:22:5a:0a:82:
                    43:9a:a4:a9:5c:71:9f:0f:50:9a:2e:a2:2c:f8:c6:
                    a9:b3:29:29:73:c3:b6:48:a4:85:50:e0:8d:0d:f3:
                    e1:4f:25:f6:4a:89:6d:9d:62:ac:df:ab:85:fe:2c:
                    50:50:ac:9d:b1:f8:6f:6e:6c:8b:e8:e9:e8:99:91:
                    ef:31:4a:af:0d:7e:f6:6b:1c:ae:a8:7b:2f:cc:71:
                    b2:a8:0a:f1:5a:48:d0:3b:5a:7d:6f:bb:4a:28:b4:
                    9e:dc:e8:75:58:39:a5:d2:e7:31:ce:d1:5c:cf:76:
                    43:77:21:43:fb:94:30:bb:e7:e3:1e:65:62:52:4c:
                    82:42:0a:58:21:6e:7b:3b:9c:06:40:ef:c8:e7:63:
                    0a:9e:72:89:7d:b9:f1:27:ab:c5:a0:c1:1c:cb:ab:
                    ae:2b:7e:fd:10:82:a9:ee:7f:7d:99:7d:c6:61:79:
                    1c:44:9d:5d:4f:3e:14:eb:56:f7:57:66:04:74:75:
                    b2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:14:A3:69:67:C5:3A:09:2E:D2:C3:82:18:5C:2D:B4:BE:26:55:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1bf3768b-5eaf-3d61-9adc-8d529280d4ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.180.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:f5:2e:38:be:bd:a0:3b:10:06:d9:fe:9a:3a:77:5b:d2:94:
         c4:5e:6c:46:97:a0:a5:20:85:7b:e2:c6:b7:3c:5b:14:6d:a0:
         2e:de:ac:bd:86:b4:f7:a2:24:22:1c:0c:0d:23:37:79:0c:b1:
         22:0c:90:6f:ea:bb:82:67:4b:5b:ba:79:d5:c8:6f:18:28:a5:
         c7:d9:ff:2c:72:41:44:b3:f8:6c:79:81:8f:8f:1f:4c:fe:6b:
         d3:b2:98:c9:9d:06:52:1f:52:98:cc:b2:79:b2:70:68:e6:67:
         28:62:70:0e:9a:5c:7b:21:86:26:cd:40:8f:1e:76:73:b6:57:
         ab:c7:3d:21:65:df:eb:1e:26:ba:ed:75:c6:35:a0:be:29:80:
         50:de:a2:8b:cd:6b:64:df:bd:35:23:63:59:d7:78:1d:d5:97:
         0c:48:86:1d:e3:57:24:21:50:20:f6:dd:2e:80:79:f1:e9:be:
         d1:54:e4:9c:60:6a:e0:a4:8c:b5:50:2e:d1:f8:50:a0:8a:ec:
         c7:c7:d9:c1:3f:08:30:34:68:3c:a6:20:a2:69:e0:7c:c4:03:
         cb:9f:83:70:b2:88:60:74:6e:26:f5:c3:d5:8b:b5:7f:af:97:
         a5:4f:80:3f:76:44:0c:4f:34:f5:43:7f:74:10:97:dd:e5:c9:
         85:11:2d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:58 2025 by rpki-client