Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2acb056e-e41b-3535-94f2-dd8e0fcf81b5.roa
File:                     2acb056e-e41b-3535-94f2-dd8e0fcf81b5.roa (raw, json)
Hash identifier:          dfx1147OQQXVASv2jP6RhoicnOrWntS3YFeferHnEEw=
Subject key identifier:   A4:44:31:1A:76:D3:7E:2B:55:6D:98:F8:6D:83:7A:C6:AC:C5:F2:F7
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858401CC6D0DD4D5C02C7956069D0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2acb056e-e41b-3535-94f2-dd8e0fcf81b5.roa
Signing time:             Fri 02 Dec 2022 12:00:00 +0000
ROA not before:           Fri 02 Dec 2022 12:00:00 +0000
ROA not after:            Sat 07 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        208.110.48.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1c:c6:d0:dd:4d:5c:02:c7:95:60:69:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  2 12:00:00 2022 GMT
            Not After : Jan  7 05:00:00 2023 GMT
        Subject: CN=d9adc85c-c9d0-4bbd-b00d-746fecd8f764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:10:ee:c1:d0:71:5f:58:7c:b1:7a:27:39:10:
                    13:c2:b8:93:3e:be:32:90:1f:61:c8:f0:68:fc:e9:
                    e6:59:a6:df:55:bf:57:17:18:eb:42:f1:62:c4:59:
                    15:83:ea:4b:f9:53:ec:04:9d:18:7b:da:73:84:41:
                    53:bd:0b:68:4e:7a:aa:8d:b4:26:a0:81:61:7f:f2:
                    b5:a7:d1:f6:be:56:45:aa:2b:a0:04:8d:81:a9:c5:
                    dd:93:f6:49:08:4a:b2:b9:e6:de:86:27:b0:d1:48:
                    1e:4e:9d:b3:e0:01:c1:f1:1b:6c:1d:c4:1a:02:34:
                    3e:15:03:3d:0c:28:6d:3a:11:e0:69:c2:79:65:10:
                    14:1b:32:21:68:15:79:37:9b:96:e7:9a:2d:21:bb:
                    65:d9:cf:66:69:07:5a:03:0e:f8:ec:4d:0a:8d:cd:
                    aa:96:ef:3b:c8:94:0e:cb:a6:88:22:8f:83:70:70:
                    22:60:73:81:9d:07:4a:3e:db:bb:1c:17:38:29:95:
                    89:4f:e9:07:bf:c3:5b:08:d7:ba:72:5d:3c:02:5e:
                    cc:c0:a0:24:05:17:1f:2f:13:4a:1a:9e:6e:44:f4:
                    55:05:87:9b:fd:d9:5a:f7:e3:51:2b:57:4e:27:8b:
                    55:9d:e2:0c:df:dc:94:3d:0d:76:84:73:05:16:17:
                    ff:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:44:31:1A:76:D3:7E:2B:55:6D:98:F8:6D:83:7A:C6:AC:C5:F2:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2acb056e-e41b-3535-94f2-dd8e0fcf81b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.110.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:f7:4f:a2:34:e8:b7:b3:10:cf:34:15:25:04:11:24:69:1d:
         e7:dc:c1:5a:6a:25:4f:64:bf:88:45:b0:43:76:da:3a:f8:8f:
         0a:67:ac:af:fb:19:f6:3d:48:c0:6f:d2:39:61:66:31:55:44:
         82:6c:5c:2d:9c:05:43:09:0f:38:53:56:60:85:e4:79:f5:3d:
         17:ec:91:a1:e7:02:1f:45:24:ad:64:3a:ca:62:2e:e4:90:d6:
         24:08:7b:37:21:bf:4c:ca:07:28:c5:46:2f:79:86:c3:27:40:
         07:47:10:8b:3c:d1:9c:43:cd:8b:07:21:fe:ef:8e:19:85:a2:
         83:f5:43:fd:84:cf:ff:33:8c:34:77:42:15:e2:d1:42:a8:d2:
         47:13:17:5a:43:72:2f:4a:ba:ac:03:5b:c2:ac:de:82:6e:3d:
         c8:49:51:c2:50:f0:a7:1a:f6:29:06:a6:d6:03:9a:25:ae:46:
         78:8e:55:63:b9:7d:32:4d:d3:84:65:27:be:40:2f:cd:57:04:
         f8:b4:54:fb:b9:2d:1c:1f:6b:1f:4e:33:c5:1d:0b:11:a7:bc:
         3a:84:0f:52:73:ad:e6:6e:54:27:b1:95:09:c6:79:b3:32:de:
         df:d2:12:a9:5f:fc:22:27:b7:2f:eb:34:6f:ea:3d:7f:41:94:
         3d:c1:ba:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:09:55 2025 by rpki-client