Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2bbafa2a-45dc-395a-be98-ca685964705b.roa
File:                     2bbafa2a-45dc-395a-be98-ca685964705b.roa (raw, json)
Hash identifier:          MFXyiyg5JpcO+ls5JsvZ3iPGGo7PogJnFW1rPFgcaWM=
Subject key identifier:   38:30:F9:1D:36:95:62:31:DA:7A:43:BA:48:8E:B6:48:06:BA:0B:22
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583ECF3926BB5AE120588BCB1480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2bbafa2a-45dc-395a-be98-ca685964705b.roa
Signing time:             Fri 05 Aug 2022 12:00:00 +0000
ROA not before:           Fri 05 Aug 2022 12:00:00 +0000
ROA not after:            Sat 10 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        149.44.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:cf:39:26:bb:5a:e1:20:58:8b:cb:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug  5 12:00:00 2022 GMT
            Not After : Sep 10 04:00:00 2022 GMT
        Subject: CN=93e94020-431e-40a2-a338-29eff705a683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bb:26:84:4c:70:d5:42:f9:4a:7f:22:23:39:
                    7a:ae:cf:63:83:0f:24:65:80:8c:2e:0f:d9:7f:d3:
                    a8:7e:9e:ad:79:0d:29:cb:63:a1:8f:e8:b8:29:29:
                    b2:3f:51:02:7c:36:a1:37:f3:82:0c:aa:c5:72:bb:
                    b0:4c:7a:59:15:56:4d:24:d3:36:bc:fd:91:d9:62:
                    55:31:f0:ee:1e:6f:db:9f:e7:37:46:9c:34:25:09:
                    ed:70:f5:50:5f:38:2a:a0:b0:f3:53:ef:75:29:5d:
                    1d:d7:96:d6:45:4d:bc:13:40:3e:e7:3f:2b:4e:6a:
                    9a:c2:eb:58:73:d1:62:10:ba:c3:f4:73:43:00:63:
                    05:6e:6f:fa:f4:76:0a:d1:47:dc:26:8d:de:80:18:
                    07:b8:a5:38:2c:9c:56:55:92:f2:8d:d9:c7:dc:3f:
                    50:93:31:be:61:d7:b9:24:aa:a6:ce:6b:f4:ec:49:
                    38:6d:20:04:56:59:08:04:a2:0b:80:db:c6:47:98:
                    e7:18:2f:79:fe:de:2b:88:51:01:60:31:da:fe:ee:
                    9a:97:9c:12:0d:b0:a7:3a:12:4e:02:80:e5:60:f1:
                    97:d1:cf:d8:ac:b9:89:0a:d6:7c:94:35:40:62:44:
                    33:19:c4:c2:f4:a0:73:c4:f7:98:c1:d5:0f:d7:e3:
                    d7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:30:F9:1D:36:95:62:31:DA:7A:43:BA:48:8E:B6:48:06:BA:0B:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2bbafa2a-45dc-395a-be98-ca685964705b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.44.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:31:a6:f2:31:69:6d:97:a2:3d:f4:04:78:29:78:29:26:09:
         ff:af:4b:d0:74:f9:53:cd:51:67:06:7e:99:bd:8a:fc:28:65:
         b9:0a:09:a3:ad:25:5a:01:72:8e:bd:cf:69:5a:e5:ae:bb:14:
         5c:c9:36:9b:70:28:80:ea:a4:c9:e2:a6:3d:b6:a7:c6:73:e6:
         ee:36:da:88:d2:8e:b7:15:a0:dc:75:b0:bf:fb:5e:78:c2:f3:
         79:8d:ad:32:d4:ba:0f:38:d5:90:af:a2:2c:e9:c8:bc:87:69:
         e3:24:3d:ce:bb:87:f3:af:6d:41:91:43:54:8a:fc:95:5d:68:
         6c:cc:50:a1:53:fb:81:4c:da:21:bf:e9:92:7a:72:77:9c:55:
         03:96:6d:86:5b:9f:74:65:42:e1:e5:85:5e:7f:35:23:02:5e:
         31:44:cf:17:10:f4:fc:d0:dd:f3:46:43:73:03:f0:92:3c:ba:
         28:12:6a:74:8e:8d:c9:de:d2:57:fb:04:10:8d:82:35:94:27:
         f8:15:c7:71:10:5d:db:fe:a9:49:48:60:0b:a1:76:a6:ee:61:
         a7:7f:34:34:2e:2c:af:ca:77:3e:58:5b:b9:f4:45:0f:2d:58:
         ec:1f:7d:19:56:3a:75:12:a8:86:fc:71:44:78:f7:ef:80:39:
         d7:a2:2b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:37 2025 by rpki-client