Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2f8e5984-9b2f-313f-8268-a21703945806.roa
File:                     2f8e5984-9b2f-313f-8268-a21703945806.roa (raw, json)
Hash identifier:          c2/poTExrmljdnwX839AFU8sOG6jofSCvWU5nrQcSFU=
Subject key identifier:   FC:13:C4:16:14:10:DB:15:39:9D:C0:A8:DC:2C:17:7E:2E:0F:FD:B8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FC906A7728143575409E3D840
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2f8e5984-9b2f-313f-8268-a21703945806.roa
Signing time:             Wed 02 Nov 2022 12:00:00 +0000
ROA not before:           Wed 02 Nov 2022 12:00:00 +0000
ROA not after:            Thu 08 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        40.163.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c9:06:a7:72:81:43:57:54:09:e3:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  2 12:00:00 2022 GMT
            Not After : Dec  8 05:00:00 2022 GMT
        Subject: CN=18a25c64-c8a4-4677-adcd-cbb56d4a7abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:12:d9:67:20:89:31:56:9c:01:20:d6:50:78:
                    7d:5a:01:dd:38:4f:63:00:a5:2b:45:94:35:d7:51:
                    ee:6c:66:1b:50:ff:23:b3:34:49:b4:d2:dc:9e:66:
                    8b:bf:60:68:4a:f4:9b:e8:ab:33:18:b1:2d:c8:83:
                    ee:10:17:94:32:0d:38:f7:7b:d6:68:21:11:4a:e6:
                    87:e9:29:02:cc:5c:60:e2:76:1f:d7:92:76:e1:85:
                    54:52:4a:40:99:55:a7:7d:a6:56:33:00:58:64:b5:
                    45:1e:09:0f:4e:fa:00:61:ed:01:ef:23:4d:b6:b7:
                    48:07:47:48:61:cb:46:28:9f:f0:f6:f3:83:3b:06:
                    6a:08:9f:32:83:bc:95:51:cd:96:e0:f3:2f:4d:d0:
                    69:9a:b1:21:0f:b0:5a:79:cb:48:a5:00:c9:4c:b1:
                    5e:3e:53:c0:f1:dd:ce:df:b9:f5:a7:bf:f5:0b:42:
                    9c:b8:84:f1:00:35:c2:60:6f:f4:f9:07:f7:31:35:
                    ca:54:cd:9c:26:d4:15:90:3a:9b:19:49:e8:bb:90:
                    cf:7f:c4:df:25:dd:52:18:5e:31:07:06:d9:ff:f2:
                    80:83:7d:b4:65:d6:34:c3:10:1b:02:55:32:51:cd:
                    97:a0:5d:d6:27:59:ed:38:c6:e0:27:ff:2f:99:51:
                    a6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:13:C4:16:14:10:DB:15:39:9D:C0:A8:DC:2C:17:7E:2E:0F:FD:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2f8e5984-9b2f-313f-8268-a21703945806.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.163.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:1d:37:e5:47:ae:42:e5:de:ce:38:e6:79:96:ec:37:47:87:
         44:a8:c2:a4:8b:57:ed:30:37:71:56:f8:3d:d0:64:22:4e:2f:
         98:2e:b9:08:0f:b8:30:7f:df:70:ff:88:d0:e4:e9:65:c3:79:
         e5:c8:ef:11:dd:af:a1:00:01:db:94:4b:ef:4f:60:18:37:2b:
         ea:c9:4a:ae:fb:01:75:c3:27:a2:88:f3:65:70:c1:5d:cb:d4:
         98:1d:10:8e:77:f1:cf:8a:0e:a8:93:a6:dd:8b:e0:50:fe:e2:
         0c:6f:ef:ab:44:44:2f:ff:45:97:80:86:90:c8:fa:69:39:28:
         c5:8b:95:30:92:32:aa:78:d9:5a:01:c7:d9:54:42:59:44:92:
         5b:67:44:c2:87:c3:66:d5:c9:76:e1:12:f4:2b:1e:cb:1c:fa:
         12:3b:38:4f:77:54:26:c8:ec:6e:70:da:c6:8b:0b:bb:d6:4c:
         47:6e:1c:98:43:bd:35:55:f2:c0:9f:02:12:80:ed:61:10:85:
         a5:58:04:a4:51:98:77:8f:13:97:a5:b6:c0:6a:63:97:e8:39:
         3a:3e:39:ba:1e:e0:f8:cc:c8:44:fd:ad:25:af:f1:15:c4:28:
         7f:26:ae:b1:3d:2d:47:07:88:76:ab:dc:49:82:cf:7a:ac:38:
         c5:9f:37:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:56 2025 by rpki-client