Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/311465ca-5d41-3f8f-913d-59071d404af3.roa
File:                     311465ca-5d41-3f8f-913d-59071d404af3.roa (raw, json)
Hash identifier:          ERqWuwxJBqeffw2XLEXqwtqba1xHSM9fJSo3AOgbAUU=
Subject key identifier:   EF:68:4A:00:41:E1:6D:97:AF:4F:DA:F9:45:DA:16:A3:F6:00:FC:A2
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840731DFB7CAB765F59B57B6880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/311465ca-5d41-3f8f-913d-59071d404af3.roa
Signing time:             Mon 02 Jan 2023 12:00:00 +0000
ROA not before:           Mon 02 Jan 2023 12:00:00 +0000
ROA not after:            Tue 07 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        13.134.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:73:1d:fb:7c:ab:76:5f:59:b5:7b:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  2 12:00:00 2023 GMT
            Not After : Feb  7 05:00:00 2023 GMT
        Subject: CN=3d579639-2195-413b-bd1d-5119016678b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:16:c9:bf:74:4f:5b:2d:29:89:69:d1:f6:1f:
                    b8:4f:89:62:21:36:4d:6c:18:42:d2:ec:90:21:36:
                    92:c6:5b:2f:68:66:2d:e7:70:05:bd:c8:02:b1:01:
                    bb:20:54:1f:e3:74:77:34:f1:3f:80:6a:b2:b2:d8:
                    70:fe:ea:c3:40:5a:7a:3f:b8:ad:a5:2f:42:d9:a5:
                    1b:3a:5e:f7:f3:93:db:58:cb:68:70:1e:eb:e5:85:
                    2d:ad:e1:6a:75:c7:87:ab:48:27:fc:a4:85:34:39:
                    6d:41:cf:ea:50:44:9e:04:48:a6:58:b4:29:21:84:
                    91:69:d9:15:08:66:d0:6a:30:e1:db:3e:ea:45:9b:
                    dc:81:93:1e:c5:3b:fb:6a:90:ad:33:cc:da:bf:a6:
                    01:6b:ac:40:09:3a:fa:4e:50:7d:9b:e7:04:99:41:
                    44:16:15:4c:ed:93:37:96:fd:a2:bc:85:dc:5f:c5:
                    fb:f4:e1:81:cb:22:90:52:cc:79:78:07:f4:d5:79:
                    b6:e3:55:c0:2c:cd:97:86:24:1c:84:ab:d3:c1:28:
                    4e:97:b1:2b:7a:a5:d2:26:31:1b:9f:84:ab:7f:36:
                    80:09:d1:12:4b:9c:03:b3:6b:08:f6:6c:54:ee:0c:
                    72:69:1d:73:4a:6e:f3:98:5e:39:22:15:1a:8b:77:
                    7c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:68:4A:00:41:E1:6D:97:AF:4F:DA:F9:45:DA:16:A3:F6:00:FC:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/311465ca-5d41-3f8f-913d-59071d404af3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.134.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:9d:1e:be:96:06:b2:b1:c5:56:6b:20:35:92:ef:00:7e:e3:
         da:f0:ec:ad:8b:cc:24:07:80:36:1d:a9:1c:c1:7e:58:d7:71:
         36:fd:30:7f:9a:8d:7a:03:49:44:bb:e5:50:05:4a:78:df:c3:
         38:cf:4b:97:86:83:16:93:bc:6d:f7:47:89:17:76:d2:c1:7c:
         f1:d1:c2:b1:44:b2:d9:ed:59:80:b0:6f:15:a8:fc:d0:e9:ae:
         82:3b:eb:8c:a5:e2:ce:85:2b:46:67:4e:e9:d2:a2:36:69:39:
         0a:fa:c4:33:ab:40:c7:55:63:c7:e8:9a:d5:27:71:8a:ca:4f:
         ca:3a:6f:53:8e:27:d4:4a:36:e9:a7:4a:b3:66:90:bd:56:bb:
         73:0a:ad:41:cd:28:f7:d1:62:60:77:11:8c:c8:24:36:27:c9:
         30:c7:2b:c1:8b:fb:35:14:f2:74:39:6b:26:9e:69:f7:43:c2:
         06:03:31:83:88:c8:08:3e:97:02:31:db:0a:16:4f:4f:51:7b:
         45:a0:05:3e:d8:39:d9:54:84:0a:f0:ca:32:41:7c:b3:1e:5d:
         fe:93:51:4a:ef:54:0a:5d:4e:86:6c:c7:41:f1:78:34:a2:5b:
         3b:bb:32:c8:27:2e:a2:78:99:de:c0:03:37:cc:18:d0:bc:fe:
         3e:28:78:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:57 2025 by rpki-client