Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/31a4a02e-21d2-3d68-954e-4b08fc2cf790.roa
File:                     31a4a02e-21d2-3d68-954e-4b08fc2cf790.roa (raw, json)
Hash identifier:          bkS7ut15aYVrjkwxoqt8PRLw6Gz5Ye+qGaMM7aY0b5w=
Subject key identifier:   B0:EE:3F:F7:E6:F3:F0:C5:E2:CD:41:7D:05:F8:5E:48:49:0D:FB:1C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840C6334161EE206BF647E59F40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/31a4a02e-21d2-3d68-954e-4b08fc2cf790.roa
Signing time:             Wed 01 Feb 2023 12:00:00 +0000
ROA not before:           Wed 01 Feb 2023 12:00:00 +0000
ROA not after:            Thu 09 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        128.11.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c6:33:41:61:ee:20:6b:f6:47:e5:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  1 12:00:00 2023 GMT
            Not After : Mar  9 05:00:00 2023 GMT
        Subject: CN=e8de8b6d-c788-4c9e-a6fc-48917927865e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:67:d9:8f:dc:78:ff:0c:a8:f9:e0:c1:2a:31:
                    38:74:ef:c0:2e:a4:f4:20:04:17:4f:1c:fc:d4:2a:
                    0b:90:cd:39:ef:db:35:58:58:3e:ea:99:9b:dc:78:
                    a6:fe:fd:10:40:5b:3b:6d:57:c1:39:50:d3:26:4d:
                    13:05:db:ad:71:66:2a:da:5b:b6:3c:5c:fd:e8:2f:
                    a2:93:ba:57:d8:8e:54:68:6a:82:c5:82:7a:40:05:
                    db:fc:55:f4:fb:8e:43:59:88:65:c8:16:73:5b:eb:
                    fa:b6:26:58:56:90:7c:aa:96:81:96:63:3b:0e:de:
                    8a:14:ca:52:8f:15:a1:52:e7:48:b0:91:d8:06:98:
                    fa:ae:36:5b:72:7f:57:bd:45:20:31:97:b1:d8:48:
                    bb:9c:f3:d2:b2:a3:ef:40:e5:78:81:45:2c:9b:c7:
                    49:66:c3:84:91:76:8a:74:ae:25:ab:34:69:ed:d8:
                    69:30:7d:94:27:90:0b:6f:2f:70:11:e5:ef:12:92:
                    31:c4:58:ee:00:36:d8:25:21:83:40:9a:86:5d:08:
                    61:c5:60:18:2f:f1:1c:79:f2:aa:04:35:8b:b5:65:
                    ec:37:75:e8:e4:a5:1f:7e:83:a2:8e:c3:d3:62:14:
                    25:dd:6b:80:2e:7f:e0:37:6f:7a:53:d1:f5:f5:34:
                    39:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EE:3F:F7:E6:F3:F0:C5:E2:CD:41:7D:05:F8:5E:48:49:0D:FB:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/31a4a02e-21d2-3d68-954e-4b08fc2cf790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.11.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:5d:66:a7:3e:4c:f4:74:b5:5e:20:96:2e:02:47:90:59:2c:
         0d:12:cd:ef:ae:ff:ac:99:de:56:46:5d:da:22:6d:d3:35:97:
         41:b9:17:7a:ad:3a:1a:d9:9c:b7:0f:f3:43:05:10:7e:cb:77:
         b7:3f:07:00:38:f9:6b:a2:0d:e2:ca:82:c4:63:3b:6d:5a:c0:
         89:ba:c0:7d:f5:45:01:38:6d:c9:85:86:96:82:72:cb:22:12:
         9c:eb:34:c7:e1:78:c9:db:b8:65:10:7c:cb:55:b9:2d:e2:82:
         4b:b5:86:45:21:66:2a:96:92:29:7a:34:6b:8f:7e:bc:12:6b:
         88:e0:67:e9:be:a3:be:94:83:b9:98:fa:20:c0:a3:57:e4:8f:
         47:c4:51:93:c6:32:0a:67:af:a7:4e:24:a0:40:cd:bc:ed:dd:
         6a:88:23:88:7f:0c:f0:f0:45:c4:e4:94:d8:e5:55:f1:2b:b1:
         45:5d:75:75:5f:80:11:49:9f:1c:6a:5e:d8:ee:9f:80:f2:87:
         85:ba:36:6c:15:17:c2:67:37:01:12:b9:dd:fc:d7:9a:29:60:
         6e:fb:c8:6b:8b:32:64:12:44:78:66:76:2a:a2:5d:9e:f7:cb:
         55:93:11:3f:c8:b2:b6:c0:2e:39:3c:20:65:be:d7:69:79:e2:
         95:4b:f8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:02 2025 by rpki-client