Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/230acb7e-03ce-3501-8325-d05506be7260.roa
File:                     230acb7e-03ce-3501-8325-d05506be7260.roa (raw, json)
Hash identifier:          X837s54ZFwz4BaihUhsc8T/J3QjWsmTM1q1QyAg0Yio=
Subject key identifier:   3D:31:4E:E9:C6:BA:B6:00:75:30:C2:29:EE:56:87:B2:31:6D:CC:9B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858406204821C1C9764BB0C582F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/230acb7e-03ce-3501-8325-d05506be7260.roa
Signing time:             Tue 27 Dec 2022 12:00:00 +0000
ROA not before:           Tue 27 Dec 2022 12:00:00 +0000
ROA not after:            Wed 01 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        15.178.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:62:04:82:1c:1c:97:64:bb:0c:58:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 27 12:00:00 2022 GMT
            Not After : Feb  1 05:00:00 2023 GMT
        Subject: CN=13f7004e-ecbe-4a4d-ba45-fb771f896a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9c:60:a9:b4:be:a3:03:38:af:5d:0e:59:73:
                    04:43:b0:06:a5:c9:65:6c:1d:3d:ec:77:d1:48:08:
                    8e:25:b2:5a:00:89:d4:f3:ac:a1:bc:eb:0c:c6:d4:
                    07:39:4b:ba:0f:52:5f:d4:7a:d2:d6:e5:74:32:46:
                    53:19:bb:79:e1:df:13:d9:f0:18:a5:6f:d7:64:3e:
                    69:25:e3:2d:d3:69:4d:2e:bd:b1:03:39:ce:cf:14:
                    59:4d:54:c0:1e:dc:d8:e2:6d:5a:f5:14:fe:68:28:
                    02:25:e4:b7:89:4b:2a:f4:b5:48:ff:75:c7:f3:6f:
                    c2:3d:03:29:71:a4:95:8e:06:e8:e5:ac:f6:79:5f:
                    64:a5:51:9a:d3:83:74:fd:e2:ba:83:24:96:44:27:
                    87:b7:0a:6f:13:31:cd:eb:c8:9b:0b:73:34:f1:e1:
                    8e:fe:e2:2f:02:17:69:78:19:bd:ed:35:e0:76:f9:
                    d9:eb:21:d8:68:1d:0f:46:2b:44:64:a2:6f:a0:90:
                    f3:9f:7d:7a:38:16:8b:6e:03:6d:72:f4:c3:6c:07:
                    bd:d6:22:8a:45:1a:67:89:6f:a5:d4:43:06:49:c2:
                    d4:47:c4:f1:8d:d7:58:29:93:98:d7:4a:48:05:76:
                    f3:0e:32:00:ee:6e:6c:2b:7e:93:12:1f:f0:82:72:
                    c4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:31:4E:E9:C6:BA:B6:00:75:30:C2:29:EE:56:87:B2:31:6D:CC:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/230acb7e-03ce-3501-8325-d05506be7260.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.178.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:65:7d:9d:60:ca:47:9b:2b:b2:0d:4c:e7:d6:b6:2d:92:6d:
         6f:e3:34:ea:44:cf:20:13:d0:2b:bc:cd:03:98:20:b9:d2:9f:
         73:18:fd:7d:d8:db:71:8d:1d:3a:b2:2b:4e:ce:dd:88:6b:63:
         1c:b5:25:2c:ed:f3:d9:13:1b:d5:25:d3:fb:09:a1:d8:09:cd:
         ee:4a:93:24:47:5d:82:0a:40:00:3f:c4:b2:a0:64:1e:4f:8a:
         75:7b:f9:d7:19:34:35:d6:35:87:ae:f9:75:40:0f:22:b2:8b:
         90:83:21:42:20:c4:25:19:0b:6e:50:ce:3e:ef:35:be:31:ca:
         02:ec:c4:ba:7e:b4:70:a2:b4:f6:4f:28:d6:ad:67:b8:30:04:
         bb:ed:63:32:5b:19:1b:92:c5:b1:9f:d2:9d:8f:bf:5d:97:ae:
         ce:f4:0b:11:1f:ba:5f:a6:c6:e2:61:1e:83:fe:7c:c7:86:bc:
         ce:df:a9:60:89:9c:6d:2e:4e:5f:87:cf:3d:a4:9e:67:a1:1e:
         13:50:82:82:27:93:20:d6:d9:68:84:14:a5:b1:1d:2a:d2:cb:
         51:57:44:16:d0:7d:8e:54:b6:8c:1d:ec:5e:39:2a:2c:68:34:
         20:58:7d:c3:5a:0d:3b:a2:13:da:54:70:ab:a1:50:99:cd:8f:
         68:25:20:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 15:40:07 2025 by rpki-client