Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3196461e-60c8-3625-8cec-b946b58d93dd.roa
File:                     3196461e-60c8-3625-8cec-b946b58d93dd.roa (raw, json)
Hash identifier:          G4mpn951AZ54xLEdCvo6a4jzYL7LjVZcbYSUk7OjfM8=
Subject key identifier:   90:8F:7D:40:EE:E6:4D:DA:5F:48:31:CB:3B:FB:5D:11:7B:A7:C1:3F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF4ACBEAD6F86ADBDDB660FC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3196461e-60c8-3625-8cec-b946b58d93dd.roa
Signing time:             Fri 18 Nov 2022 12:00:00 +0000
ROA not before:           Fri 18 Nov 2022 12:00:00 +0000
ROA not after:            Sat 24 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        156.4.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f4:ac:be:ad:6f:86:ad:bd:db:66:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 18 12:00:00 2022 GMT
            Not After : Dec 24 05:00:00 2022 GMT
        Subject: CN=8581b8a2-8da4-4e5f-acbe-6149f4b846b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:52:f1:50:37:da:61:57:8e:32:eb:b8:ab:60:
                    34:0e:6f:7e:f8:7f:3b:1c:56:b7:22:00:9a:bf:ff:
                    ec:09:9a:93:45:45:bf:25:c2:4a:4b:7c:19:d1:5b:
                    62:28:cf:a9:7a:e7:01:e8:3c:5f:a7:24:55:66:e3:
                    b5:c0:7b:a0:ba:ae:d5:b7:56:ec:a0:da:fd:72:0e:
                    6a:1e:81:9a:95:61:92:e2:04:54:a5:45:c7:a8:2e:
                    29:81:aa:75:68:15:d2:b6:7f:7a:d3:c3:19:a5:95:
                    fa:fc:d7:31:67:21:74:9b:17:cb:3a:6a:b8:c6:a2:
                    3e:67:8c:91:08:ab:45:a5:da:53:88:99:18:09:57:
                    d9:33:db:69:96:6f:ec:14:6c:85:fb:e2:96:9e:d8:
                    ec:3b:e0:95:ea:ff:90:77:8b:97:46:08:21:80:0c:
                    49:86:93:87:c4:96:71:90:f5:e6:53:eb:d4:9d:9f:
                    eb:2e:32:11:74:d1:9a:4c:ec:7c:19:5d:fd:dc:0b:
                    06:34:ac:af:38:3a:75:8e:0c:5c:be:fa:2b:0b:e3:
                    1e:d1:17:26:d4:4c:f4:af:2c:be:e0:e7:00:f4:de:
                    f1:a2:ff:c7:17:74:87:02:44:39:af:d1:21:78:aa:
                    2f:23:53:8d:19:b7:9f:d1:53:80:a3:e5:b6:c6:bf:
                    2f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8F:7D:40:EE:E6:4D:DA:5F:48:31:CB:3B:FB:5D:11:7B:A7:C1:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3196461e-60c8-3625-8cec-b946b58d93dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.4.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:65:7e:ed:24:1e:8f:95:e0:57:c8:54:61:72:af:18:c8:a8:
         82:08:ef:c6:18:d1:de:0d:b9:34:68:e0:e6:ab:8e:16:0e:1e:
         4e:0c:aa:ad:78:eb:0e:c2:f1:16:98:68:a8:fc:5e:9b:09:8a:
         30:19:8f:0a:20:92:ad:59:22:da:68:ad:30:30:6a:f8:1f:4f:
         6e:3b:4b:5c:b3:50:e5:36:f6:63:24:8c:29:f6:04:e2:11:74:
         b6:bd:25:61:ad:6d:d0:ee:91:d2:92:33:3b:ab:ef:9b:d6:48:
         37:47:39:6b:54:a5:dc:10:67:45:ee:ea:ac:8a:00:36:70:a4:
         3f:f1:d9:d9:9c:de:a9:a8:40:aa:39:a4:fb:59:1f:00:5d:ec:
         2b:fd:92:d0:72:aa:e2:5c:73:74:44:c6:1b:d7:2f:59:da:49:
         dc:b0:8a:75:74:d1:0e:15:05:c8:b7:13:7e:94:68:8a:46:4f:
         00:f0:f0:49:01:cb:29:5e:3d:24:f0:46:59:1e:f2:38:c5:9e:
         24:97:7c:2e:58:64:1a:e1:bf:dd:7c:2d:c2:48:0c:e3:8c:7f:
         0a:dc:77:61:9c:42:0c:59:33:a6:28:cf:c0:51:5c:8e:14:05:
         70:a2:b0:6e:d9:c8:68:ef:29:44:a1:6d:c4:93:4c:49:dd:19:
         61:bb:fd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:07 2025 by rpki-client