Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a4ddc6d-f511-3975-847a-88b131deb10f.roa
File:                     2a4ddc6d-f511-3975-847a-88b131deb10f.roa (raw, json)
Hash identifier:          Zvv8kuUgyitdEG7H5G7V8tqdHKy+NcG6416rk+Y2eDU=
Subject key identifier:   AB:09:A8:2B:28:1B:63:E3:8D:98:77:E0:15:FD:01:91:7B:86:66:41
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F8938DA4FA04E1F92F2894C60
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a4ddc6d-f511-3975-847a-88b131deb10f.roa
Signing time:             Mon 10 Oct 2022 15:51:07 +0000
ROA not before:           Mon 10 Oct 2022 15:51:07 +0000
ROA not after:            Tue 15 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        40.180.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:89:38:da:4f:a0:4e:1f:92:f2:89:4c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 10 15:51:07 2022 GMT
            Not After : Nov 15 05:00:00 2022 GMT
        Subject: CN=36666e01-1c4a-46a4-93d7-9d179e1e260c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:15:29:ec:77:b8:26:d8:8b:b0:a5:16:89:c5:
                    64:1f:13:0e:b2:d5:97:53:fb:01:e2:38:0a:bd:19:
                    49:c9:d1:75:a5:57:d3:e3:fe:02:87:da:b5:25:a9:
                    be:b4:46:7e:29:e8:bf:82:2b:e1:49:bd:64:ae:7b:
                    ea:2f:62:4e:5d:4f:50:3a:bd:38:13:1b:38:41:59:
                    30:25:33:34:c5:72:ac:ba:69:91:25:52:5b:b9:56:
                    fb:b6:f7:8f:6f:e7:45:ec:2d:ab:52:1f:f6:82:74:
                    e3:b3:d8:0a:7e:5e:a8:97:61:44:52:ea:46:c5:02:
                    cf:21:0f:cb:6c:a7:ff:65:58:bb:b8:61:fc:86:76:
                    60:f9:de:ad:95:8a:34:23:09:3c:fd:0b:75:8d:e0:
                    84:6a:c1:74:43:28:ee:b5:e3:b8:8c:dc:86:43:8f:
                    2d:94:00:2a:89:2c:ff:8c:6c:11:63:7a:b3:04:52:
                    6b:bd:2b:b6:7d:33:bc:e7:ef:b4:59:29:f6:c2:95:
                    cc:52:b9:22:25:e6:09:43:1b:a0:a6:e3:36:ab:aa:
                    29:78:a4:90:69:98:56:63:39:24:34:0f:e5:a8:da:
                    a2:e7:75:84:2c:37:0f:ca:52:25:19:9e:a1:9a:bd:
                    a5:3b:15:d2:2a:22:e4:28:03:90:2f:0a:c1:de:d9:
                    4f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:09:A8:2B:28:1B:63:E3:8D:98:77:E0:15:FD:01:91:7B:86:66:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a4ddc6d-f511-3975-847a-88b131deb10f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.180.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c9:80:10:d7:1d:8d:cb:5e:66:28:b9:ec:86:eb:11:b2:78:
         a9:79:72:a7:f3:80:d2:b4:af:2f:1a:35:f6:87:cd:7f:c3:c0:
         c7:8c:c5:99:5e:9b:6d:4d:a4:6e:b8:57:c2:72:9e:ea:73:4e:
         93:24:a7:1c:4b:58:a5:e1:58:ea:87:02:1a:c1:f2:a0:fd:2c:
         99:72:7c:16:59:62:27:3c:ee:cc:e6:d1:91:8b:64:1d:3c:f0:
         18:14:74:10:19:d7:12:c7:7b:88:de:6a:b2:5f:54:11:07:27:
         44:c0:0b:88:a4:f4:7e:cb:d3:e5:d7:68:3d:e2:ce:da:cb:2a:
         94:79:10:f5:f3:3c:e1:60:19:8b:a8:0d:35:b9:cd:29:2c:0e:
         31:20:09:e5:86:b5:25:2a:e5:ad:5b:62:47:51:c7:81:68:46:
         27:3d:20:7b:a3:d9:31:d9:40:10:c1:b6:80:ad:7f:50:44:18:
         a2:77:0a:93:70:da:6f:93:17:4d:d8:3b:dc:d2:a4:37:b9:4c:
         34:f2:ea:9c:57:ed:c2:7c:39:81:2a:3c:59:e3:c2:72:3f:d3:
         57:8c:37:54:16:8d:8d:f6:f8:32:3e:5d:37:75:23:87:b6:57:
         29:86:8b:cf:83:4b:6a:74:b5:76:2b:58:72:18:e5:0a:1a:fe:
         2d:de:b2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:55 2025 by rpki-client