Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1f7d3d9c-7ef3-3648-acdc-91d81a2837ae.roa
File:                     1f7d3d9c-7ef3-3648-acdc-91d81a2837ae.roa (raw, json)
Hash identifier:          HPtPSKsLw5CkGweHZX5OmpglPzRYHEDPq96WMG48D3c=
Subject key identifier:   40:0C:7B:47:DC:B3:29:37:7F:D2:21:FD:30:CB:37:6A:4A:F0:4B:88
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F5A58527EACC503F0F0EB7780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1f7d3d9c-7ef3-3648-acdc-91d81a2837ae.roa
Signing time:             Fri 23 Sep 2022 12:00:00 +0000
ROA not before:           Fri 23 Sep 2022 12:00:00 +0000
ROA not after:            Sat 29 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        162.254.72.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5a:58:52:7e:ac:c5:03:f0:f0:eb:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 23 12:00:00 2022 GMT
            Not After : Oct 29 04:00:00 2022 GMT
        Subject: CN=c6aa7071-03a9-4ea5-86e8-bcf6996b44e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f0:88:72:fb:c7:6a:d2:84:02:fc:24:bf:8c:
                    50:2e:7b:09:11:52:86:05:63:b2:15:0f:34:c5:67:
                    6a:f5:e0:97:46:16:9b:05:48:88:ff:fb:df:f7:df:
                    9a:10:1f:54:fd:4c:0d:90:b9:66:24:24:38:fe:25:
                    a0:4d:36:b1:1d:c8:cb:f1:fe:a2:de:cc:3c:e9:4a:
                    c5:d2:e3:a0:25:db:41:3f:a8:eb:97:31:04:fb:43:
                    2a:ff:a2:cb:7c:f6:03:9f:44:0e:89:d3:a3:c5:47:
                    52:39:f9:a4:b8:c8:03:4f:5e:89:80:85:25:91:55:
                    09:a9:14:fe:cb:15:5e:c4:44:d5:33:bf:f8:b3:00:
                    45:a3:07:bd:41:9a:8e:14:e8:2d:80:71:d3:a3:4c:
                    72:ad:e8:cf:17:d4:b3:e6:be:51:4d:a6:f4:b2:2d:
                    da:66:cc:e8:b9:77:8e:b9:6c:45:cf:9b:ad:32:dc:
                    76:e7:75:e5:a6:fa:4f:99:74:c2:86:65:c9:29:dd:
                    34:68:6c:de:88:3b:99:77:8b:b4:78:c9:1a:4b:94:
                    f4:b6:1b:9c:3b:79:1a:89:7a:4d:9d:8b:f1:67:df:
                    b0:9c:fe:e7:17:e9:49:e4:d1:2b:fa:f0:23:57:7c:
                    3b:81:57:dd:a9:98:55:3d:7d:ea:58:4b:78:e5:b8:
                    e9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0C:7B:47:DC:B3:29:37:7F:D2:21:FD:30:CB:37:6A:4A:F0:4B:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1f7d3d9c-7ef3-3648-acdc-91d81a2837ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:93:c6:e2:f0:17:3b:26:07:6c:7a:d6:f5:41:c5:b2:f4:1d:
         14:31:7f:be:9a:e9:e6:a3:86:46:77:f0:1f:0a:ff:07:43:a6:
         de:7d:ad:ae:44:15:41:d9:47:a3:2e:6d:a9:0c:cc:14:69:39:
         aa:58:69:ab:ba:3e:af:f2:b6:23:82:81:7e:7d:33:cd:e8:1d:
         3a:c4:6c:02:5f:b9:54:97:99:22:fa:c9:f1:96:37:bf:84:7e:
         f0:ca:88:37:d6:5c:d5:6e:82:86:20:31:53:9a:96:99:88:75:
         4b:84:2d:b8:a8:21:0f:4e:b3:c1:f5:ea:3c:d1:2d:ba:60:d7:
         47:3f:25:9a:bb:4e:ce:51:3d:70:12:16:4f:ec:c9:2d:a0:e0:
         84:bc:a3:b8:5e:18:a8:0e:af:dd:dc:99:6a:27:4a:76:97:e0:
         87:a9:8a:81:98:7b:ca:e9:bc:94:d8:c9:0a:8b:16:e5:58:13:
         bf:2d:52:16:ac:e5:2c:7a:00:c2:9f:c3:7a:98:62:33:be:23:
         3c:b4:95:f4:c6:b4:8c:72:eb:9a:8e:01:b6:88:52:51:f2:8c:
         11:5e:e6:cb:85:21:1c:5e:1b:66:3a:9e:d9:59:83:cb:d2:80:
         4a:ae:59:1c:5a:4e:6e:70:6f:77:ff:5e:18:bb:79:d9:24:88:
         c9:9a:17:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:55 2025 by rpki-client