Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32f5d297-fd9c-3dfc-bf03-54d5af992867.roa
File:                     32f5d297-fd9c-3dfc-bf03-54d5af992867.roa (raw, json)
Hash identifier:          NjzfFMuAAOfRwtnmlqiXGRd2Srm3SE7BE6Jybn3sIoY=
Subject key identifier:   DD:AF:4F:FD:CE:22:61:D8:12:4E:79:EC:E8:14:B3:13:92:02:1D:EE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E9430C046A40DCD7B0A086B90
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32f5d297-fd9c-3dfc-bf03-54d5af992867.roa
Signing time:             Thu 14 Jul 2022 21:12:08 +0000
ROA not before:           Thu 14 Jul 2022 21:12:08 +0000
ROA not after:            Fri 19 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        155.134.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:94:30:c0:46:a4:0d:cd:7b:0a:08:6b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 14 21:12:08 2022 GMT
            Not After : Aug 19 04:00:00 2022 GMT
        Subject: CN=ef63a974-04f7-4e2b-81aa-42b604e3ced9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4d:c1:fd:e9:d3:94:49:53:94:50:00:c9:43:
                    c0:f6:7d:ca:56:19:bf:d9:bd:b7:47:6b:03:94:35:
                    0f:91:67:8d:7a:8a:75:d2:28:5b:01:13:c4:32:d4:
                    d5:20:18:4c:8c:f9:79:eb:55:e2:79:9b:43:4a:85:
                    1a:e1:e1:2d:05:c8:fb:ac:95:52:e7:b6:d7:02:6c:
                    a8:b5:a9:d3:45:be:8e:79:25:e1:d5:01:59:01:d4:
                    db:cd:c4:db:aa:7e:c2:06:8e:40:eb:83:54:b7:ce:
                    56:a6:f9:1f:54:e1:c8:69:ab:46:f9:19:73:9b:5b:
                    2a:5f:82:f8:1d:ee:54:4d:92:46:09:86:2b:06:2a:
                    28:57:e3:e4:d6:12:03:43:f3:64:7d:5f:05:69:f9:
                    7d:64:c6:78:c6:b2:ee:8e:8f:ab:53:77:63:1b:38:
                    7e:66:4a:9a:9c:b3:0d:de:f9:72:42:de:7c:0b:52:
                    ee:1a:71:09:7e:f2:aa:89:30:ac:0f:33:6e:59:52:
                    fa:c7:d1:2a:bc:2c:15:c4:39:89:84:b3:cc:91:06:
                    c0:47:8d:45:7e:46:42:e3:41:78:22:5f:75:01:04:
                    59:37:70:ef:18:56:fb:53:72:24:bc:0c:23:08:f7:
                    5b:39:4d:1f:46:db:61:1a:8a:a9:32:e8:2c:09:94:
                    3f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AF:4F:FD:CE:22:61:D8:12:4E:79:EC:E8:14:B3:13:92:02:1D:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32f5d297-fd9c-3dfc-bf03-54d5af992867.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.134.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:60:ea:f8:4a:24:35:7c:f4:bf:da:99:37:fb:73:c1:01:89:
         a7:04:75:26:f9:70:11:c5:8b:49:62:75:ee:59:cc:4e:8d:34:
         12:eb:cd:2f:db:41:8b:bc:c7:c0:22:97:1b:c4:1b:12:64:7b:
         d3:f2:fd:33:c5:b1:bc:d6:d0:3f:f9:28:3e:b0:c6:33:74:01:
         f5:d9:35:86:f6:6b:d2:4c:3d:bf:65:12:e7:e6:0c:68:8f:c5:
         b7:41:d8:73:90:e4:82:03:9e:5c:88:38:4d:58:dc:ee:da:92:
         b2:95:3e:51:ab:9e:22:43:95:4e:7e:96:e0:ef:65:5a:d7:50:
         1b:c8:45:c6:8a:45:ed:42:93:63:b1:1c:05:4b:14:0c:6b:8c:
         c9:8b:67:c9:17:d0:2d:68:bf:c3:ae:93:6f:8c:45:d7:bb:9c:
         c0:4f:dc:c2:11:2e:68:84:92:8b:56:ff:7e:63:91:9b:00:2f:
         b0:92:f7:86:b4:90:80:49:99:00:cf:a5:17:83:cf:07:2d:a7:
         bf:2e:c4:59:45:ba:85:06:1f:bd:8a:10:23:f1:45:bb:b4:60:
         e0:85:fc:c0:86:05:8b:fa:06:ee:c5:e3:c1:3c:aa:31:8a:e0:
         27:eb:61:0c:60:69:4a:9f:3f:ec:53:39:a4:e7:85:47:e4:d4:
         f7:96:79:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:08 2025 by rpki-client