Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/231f5989-e731-33ba-a5e3-5746b9f7b18a.roa
File:                     231f5989-e731-33ba-a5e3-5746b9f7b18a.roa (raw, json)
Hash identifier:          CmnFmbxDhLqV9yYUGZvqx4ZH+I3FYLSXa7yt8hUx5GQ=
Subject key identifier:   91:A6:3C:6F:D1:BD:A1:0F:DA:6E:F3:6C:B1:B1:E0:1E:38:34:FD:06
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EA7AC50AAC8D07B710EE04480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/231f5989-e731-33ba-a5e3-5746b9f7b18a.roa
Signing time:             Thu 21 Jul 2022 12:00:00 +0000
ROA not before:           Thu 21 Jul 2022 12:00:00 +0000
ROA not after:            Fri 26 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        167.97.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:a7:ac:50:aa:c8:d0:7b:71:0e:e0:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 21 12:00:00 2022 GMT
            Not After : Aug 26 04:00:00 2022 GMT
        Subject: CN=66511bde-d416-47c7-8670-2c2c00704be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b7:4b:75:dd:84:81:2f:f8:e6:ad:7f:22:21:
                    88:19:23:49:d5:e6:9f:cd:32:bd:b2:42:61:e8:c5:
                    a1:12:7c:dc:2d:26:60:9c:33:eb:6d:38:63:ba:dd:
                    40:ec:2e:45:a3:31:f6:9f:01:4b:52:47:06:24:48:
                    36:5f:c3:7c:39:36:63:fd:90:cc:94:44:4e:7d:61:
                    66:36:bc:db:ee:84:99:81:a2:a3:25:24:1f:5a:2b:
                    dd:99:e7:26:e7:54:b9:5e:de:8a:36:78:ca:10:1f:
                    2f:e6:4f:c8:e1:5e:5b:4d:a8:f7:78:d9:77:2e:c6:
                    f8:89:ce:f2:b0:67:23:17:e6:b8:e5:5b:c5:da:71:
                    58:4d:88:02:d7:1d:60:63:2d:e9:66:1f:41:d6:c9:
                    f7:22:67:a2:40:7f:48:3a:ac:d9:75:e2:c0:01:a5:
                    8b:66:a0:8d:f2:84:80:c2:4e:6e:d4:85:26:20:fc:
                    ff:df:b9:9b:41:d8:d8:24:4d:17:ee:f7:ac:48:7b:
                    fe:b3:12:9b:17:cb:01:2f:45:e1:af:82:31:af:fb:
                    ad:3b:18:78:80:c9:33:17:04:da:d0:79:5f:ab:a8:
                    3d:77:1b:69:4b:b7:0b:d3:17:56:d7:43:e7:be:e4:
                    0b:8b:4a:35:b0:87:be:aa:4d:29:06:8e:03:87:b7:
                    a3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A6:3C:6F:D1:BD:A1:0F:DA:6E:F3:6C:B1:B1:E0:1E:38:34:FD:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/231f5989-e731-33ba-a5e3-5746b9f7b18a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.97.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:18:6f:43:1a:e5:6f:bb:1a:e4:be:9c:e8:68:df:f6:e3:30:
         f8:65:02:c8:f7:ba:52:8a:1e:f1:89:69:d5:f6:ff:3e:31:3c:
         a7:bb:a8:69:06:52:a3:d6:56:5b:59:41:9f:5b:b6:ce:57:de:
         bd:c7:2c:3d:c3:98:3d:e7:9d:58:0a:27:cd:bb:97:2b:d9:8c:
         89:e7:c0:1c:e8:86:91:37:75:59:16:cb:2f:36:6e:3e:34:14:
         0f:97:06:8e:71:82:76:b8:8c:61:c3:d0:c1:73:cd:ef:ad:45:
         2d:30:00:36:dc:67:05:46:78:b4:ca:3e:a3:6a:04:8d:23:23:
         24:c5:f0:17:dd:42:c1:fe:1f:00:5c:06:13:2a:a8:be:4c:3c:
         e8:cc:36:b3:db:d9:01:77:b7:96:46:82:fe:57:9a:f9:aa:75:
         3a:85:52:da:1f:64:06:85:be:86:95:03:4b:18:37:41:96:94:
         16:62:25:88:c0:8d:d8:8c:bd:5d:3c:78:2a:3b:6a:53:7c:63:
         d7:4b:1c:94:13:4e:eb:6b:e8:72:34:38:d3:56:1d:ce:db:e5:
         f0:9b:46:25:54:07:3e:10:49:c6:74:99:0e:09:f3:54:78:4a:
         0d:7c:bd:66:14:06:b9:eb:9f:e2:19:75:d9:71:36:72:9a:84:
         98:be:85:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:30 2025 by rpki-client