Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/200f86d0-1e18-3eac-85f1-cf91c30cd3bf.roa
File:                     200f86d0-1e18-3eac-85f1-cf91c30cd3bf.roa (raw, json)
Hash identifier:          pXxf3qYjfzjjqGceeukESc/r2xCHDxW74J9pNAE3Ei0=
Subject key identifier:   E4:C9:ED:A6:A5:E6:C9:09:08:BA:05:44:18:50:D2:38:2F:DF:A0:8F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858403DE69772C09B903E078164E8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/200f86d0-1e18-3eac-85f1-cf91c30cd3bf.roa
Signing time:             Wed 14 Dec 2022 12:00:00 +0000
ROA not before:           Wed 14 Dec 2022 12:00:00 +0000
ROA not after:            Thu 19 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        40.164.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3d:e6:97:72:c0:9b:90:3e:07:81:64:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 14 12:00:00 2022 GMT
            Not After : Jan 19 05:00:00 2023 GMT
        Subject: CN=a90ea9c5-b9e8-4318-b607-495b2140677b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7c:34:fa:4c:56:b9:7b:0d:30:61:25:f5:d3:
                    86:61:2e:d2:2f:73:4d:44:cc:ed:67:01:a3:9b:2e:
                    2f:b1:9a:a2:f0:84:0e:7a:d0:a9:3a:a9:d1:a5:90:
                    88:7e:ee:89:3a:9c:96:a3:f0:69:c7:a7:d6:f4:57:
                    63:d3:87:b5:74:fe:38:38:8b:b3:82:33:da:cf:98:
                    41:ce:1e:cb:51:bf:0f:22:f5:df:d7:9b:e1:3f:ce:
                    f2:52:24:62:bd:be:f3:e5:27:b2:70:38:0c:d3:a6:
                    0b:be:d6:2a:d7:44:cd:df:41:84:bb:40:44:3a:cb:
                    8f:17:8e:bb:d4:ab:33:8a:f3:1a:2f:84:44:9e:d8:
                    ee:b0:da:ea:5b:17:d9:d0:32:46:57:6d:38:40:3d:
                    20:b0:9a:93:34:d8:b5:90:f7:7a:ac:02:d7:3b:16:
                    2c:10:dd:56:ee:d2:6a:79:5b:c2:b9:d7:8d:7c:c2:
                    2d:fd:73:2e:82:7c:9a:6a:ed:bc:b8:2e:68:73:57:
                    be:70:71:07:e0:9c:c5:22:74:11:4a:c7:41:9c:5a:
                    82:37:43:b4:53:cf:8c:50:54:bb:11:a9:3f:58:8c:
                    cd:c5:4a:eb:d9:2f:0b:89:0b:c9:db:d9:ed:90:e6:
                    87:7e:12:35:2b:98:0c:c8:33:bf:3f:58:d3:1e:f7:
                    51:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C9:ED:A6:A5:E6:C9:09:08:BA:05:44:18:50:D2:38:2F:DF:A0:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/200f86d0-1e18-3eac-85f1-cf91c30cd3bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.164.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:03:43:5a:55:a4:df:9d:ba:ab:2a:90:b5:42:30:25:33:97:
         d2:15:b7:f7:b8:ab:b9:da:8f:a3:35:8b:c2:17:41:4c:8c:72:
         cf:6b:83:a7:c1:f6:87:ab:64:a1:03:f1:aa:26:05:7f:65:08:
         6f:12:ee:71:9e:d9:37:8c:94:b3:75:9b:c6:5e:fb:29:3d:61:
         b6:31:45:3f:25:a5:c6:f0:94:ab:e9:e2:71:61:f3:3b:64:3d:
         aa:37:83:d0:a3:da:d9:c7:c3:8e:ad:d8:0a:54:b2:68:2c:fd:
         a6:da:4c:12:5d:77:50:ae:7f:ef:4b:17:5c:19:9a:7d:8f:e0:
         ae:43:81:4a:8e:25:0a:70:b9:6e:34:1a:28:38:27:67:63:05:
         36:7f:67:4c:a1:15:e6:de:49:dd:18:b6:77:92:e9:75:e7:ed:
         92:34:9e:3f:6c:6e:74:ae:e0:b5:04:fb:5c:4d:31:1a:ee:e7:
         d0:bf:7f:c7:b9:97:5b:f8:32:ba:75:d3:a7:d6:3a:a5:01:6a:
         52:28:35:49:b3:cf:aa:4f:a0:9f:cb:60:4f:45:c8:e3:0c:f5:
         b6:d8:ba:59:1f:f2:5b:7f:d2:04:7e:a8:90:90:eb:f2:5d:d0:
         04:99:a8:b7:ac:16:4d:d0:72:6c:37:9b:6d:f3:7c:3d:24:bd:
         34:ef:94:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:30 2025 by rpki-client