Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2080dbc5-7b25-35de-8157-b2a6ecb012ed.roa
File:                     2080dbc5-7b25-35de-8157-b2a6ecb012ed.roa (raw, json)
Hash identifier:          r+OXdk4mkOuS77/jp2FMpdevigl4fOoeE8GViW446gI=
Subject key identifier:   05:F6:37:15:28:2A:1A:03:98:49:65:AB:98:BF:42:71:09:AA:4F:D9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FB025A78902CB177CCEA35D40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2080dbc5-7b25-35de-8157-b2a6ecb012ed.roa
Signing time:             Mon 24 Oct 2022 12:00:00 +0000
ROA not before:           Mon 24 Oct 2022 12:00:00 +0000
ROA not after:            Tue 29 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        132.223.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b0:25:a7:89:02:cb:17:7c:ce:a3:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 24 12:00:00 2022 GMT
            Not After : Nov 29 05:00:00 2022 GMT
        Subject: CN=d089376e-e282-4af8-ace2-9fde6d88e956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9c:0a:e0:ce:4d:db:52:e4:b5:bf:9e:01:00:
                    6f:47:c6:4b:84:89:10:b6:68:34:64:84:3d:b0:5d:
                    bc:7d:5c:6f:2a:d2:f9:56:96:74:93:83:26:ce:5a:
                    ee:c8:58:25:cc:85:be:a9:f6:b8:57:3d:65:6c:30:
                    76:5d:e6:28:ef:9a:29:19:40:bd:33:db:9e:54:97:
                    ed:e6:79:a5:98:21:6c:d1:15:8e:a1:8e:da:02:2a:
                    03:fc:da:79:8a:9d:95:46:be:ed:a3:5f:26:8f:44:
                    0c:26:23:9e:5c:a7:1d:1f:46:82:ef:0c:0e:46:c0:
                    84:d6:2e:ae:bd:b2:7d:0f:89:a6:71:bb:ca:93:b0:
                    98:b2:c1:df:ab:21:29:b3:c8:2a:1a:f7:cc:97:b5:
                    5c:f0:7b:3d:1c:40:c6:7f:e3:16:f1:63:81:d1:5a:
                    f2:26:0a:6f:42:0f:0a:24:9d:73:8d:9d:e4:2e:4f:
                    30:06:f6:e0:ce:e1:23:3c:5f:fd:df:64:34:73:ac:
                    cd:1b:47:65:51:17:ec:da:94:c3:e6:a3:9b:e9:48:
                    85:14:16:0d:ce:ef:cc:e5:15:0c:68:38:38:d4:02:
                    1e:52:9a:07:75:d3:d0:e0:46:8f:78:d6:61:76:d8:
                    5e:3e:11:c5:43:1d:c4:99:e2:62:88:75:63:2e:23:
                    ad:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F6:37:15:28:2A:1A:03:98:49:65:AB:98:BF:42:71:09:AA:4F:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2080dbc5-7b25-35de-8157-b2a6ecb012ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.223.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:0a:e2:bd:c7:32:88:f4:42:96:c1:92:1e:fc:51:9f:47:78:
         37:87:ce:8d:ae:ba:b3:dc:9a:a1:62:71:40:b2:d8:5e:12:3b:
         88:96:bc:7b:b7:20:25:87:fb:0b:07:97:fc:54:88:7b:2b:ee:
         97:e0:2e:4b:fa:2f:ee:a7:a8:4e:93:02:8c:d7:b3:ff:c0:ff:
         a6:27:25:f8:52:be:7c:9a:b7:9a:d1:19:20:a4:66:04:b9:5c:
         46:69:6a:fb:f0:9d:20:52:1d:58:e1:72:b8:59:52:28:f9:8c:
         c5:7e:14:54:60:75:c1:f2:47:e8:ba:fa:8e:d7:c3:94:b0:a6:
         0d:3f:13:57:18:bb:c4:5d:da:24:de:f8:3d:a1:7d:7f:bf:2b:
         ae:f0:69:69:5f:39:fa:e0:4f:91:97:b3:64:96:80:7b:8a:78:
         e4:af:1a:d2:66:bc:f6:a1:16:5a:a9:3a:74:23:ee:fc:4b:47:
         24:0a:9d:b3:a4:4e:87:a6:90:a8:8f:b7:47:ef:62:b6:cd:0a:
         a1:3c:a1:19:35:98:f6:95:9f:1b:e2:0e:80:c5:4d:9b:8f:16:
         53:52:b9:6d:a7:97:e2:05:4c:cb:c5:fd:6f:7e:69:7d:77:46:
         51:6d:a4:55:6b:07:0b:33:0b:63:58:9b:5e:a3:40:95:61:8b:
         f4:aa:69:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:46:45 2025 by rpki-client