Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/336d29ab-f67f-32d0-976c-b414d60e96d4.roa
File:                     336d29ab-f67f-32d0-976c-b414d60e96d4.roa (raw, json)
Hash identifier:          NgQ9EbiPX2vF4tX+DIDMw/IozYPklbLjQBlE8MR1Wew=
Subject key identifier:   DE:A5:11:D2:62:7C:3B:01:A3:BC:E4:F1:66:2F:04:6B:53:75:FC:76
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840381CDFDDD390915CB0B04100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/336d29ab-f67f-32d0-976c-b414d60e96d4.roa
Signing time:             Mon 12 Dec 2022 12:00:00 +0000
ROA not before:           Mon 12 Dec 2022 12:00:00 +0000
ROA not after:            Tue 17 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        80.241.160.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:38:1c:df:dd:d3:90:91:5c:b0:b0:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 12 12:00:00 2022 GMT
            Not After : Jan 17 05:00:00 2023 GMT
        Subject: CN=9bbfce32-c2a7-40ed-8de4-fe714c596bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:00:48:fc:c7:9d:fd:40:dd:20:d3:c8:81:8e:
                    0e:d6:c8:05:1e:68:0a:c0:e8:63:3a:1c:19:df:65:
                    50:3f:db:90:23:e8:ef:50:33:c9:fa:1e:dc:59:8d:
                    0c:f3:d1:8f:ac:57:84:93:76:85:23:bb:da:6c:b4:
                    1a:0f:ff:b7:1e:bc:a5:9f:e3:18:a9:81:c6:5b:76:
                    e9:d1:1b:08:6e:00:88:61:bd:6f:69:07:fa:bb:38:
                    69:df:dc:81:fa:c9:2f:11:85:99:1d:89:43:d8:9e:
                    bc:7a:0c:20:e3:01:66:e6:ea:75:6f:30:03:16:4b:
                    91:77:c8:8f:dd:a7:97:cc:8e:bc:a9:a6:89:2b:28:
                    d0:4d:da:81:05:9f:e3:f9:37:73:1a:d8:3c:9c:39:
                    bb:3d:b4:fb:04:cb:db:09:bf:18:fe:cf:cc:22:71:
                    6e:97:fa:35:b0:af:56:54:62:ea:88:cc:31:15:75:
                    60:21:9d:29:da:17:a4:74:31:09:1e:0f:43:1f:94:
                    4b:63:eb:c0:39:81:cd:90:e4:2f:c2:0c:f4:e6:5b:
                    56:32:db:86:da:c4:99:2d:01:62:b6:5a:7e:83:65:
                    3c:28:e9:b7:b9:85:60:5e:2b:13:24:1d:a8:cc:c9:
                    1d:c8:47:dc:a4:32:5d:88:94:3d:bd:6f:0c:34:e3:
                    f9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A5:11:D2:62:7C:3B:01:A3:BC:E4:F1:66:2F:04:6B:53:75:FC:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/336d29ab-f67f-32d0-976c-b414d60e96d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.241.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:b8:74:7e:be:2a:b6:89:2b:cf:82:d2:69:c9:9e:aa:5d:e3:
         85:7e:5d:1e:69:a9:f3:95:0d:32:d6:25:3e:c3:dd:7d:86:d4:
         d4:2d:46:39:83:be:65:fe:86:1e:67:ee:48:a5:74:e6:83:28:
         b3:fc:d3:70:f0:3e:b6:70:a1:a5:ca:4f:e4:24:fa:22:fd:49:
         0b:a7:a7:f3:f8:3f:36:c0:54:2a:77:d5:6b:97:03:87:ee:8a:
         cc:38:2d:d6:97:95:6b:b6:3e:be:2d:78:b4:e9:e6:d8:a9:2b:
         16:19:d9:78:d4:0b:e5:cc:3d:ee:67:b3:51:60:c2:a1:25:65:
         d6:ef:28:e4:c9:27:5b:2f:a5:03:90:c5:f0:77:80:18:43:25:
         2e:8d:fb:14:14:83:0c:8c:bd:f3:d5:e7:63:93:99:96:2c:f7:
         22:c5:cb:02:9a:f9:8f:8b:5a:49:b8:43:30:0f:1d:10:de:48:
         6c:f6:4c:de:80:09:77:f7:bb:d5:87:49:e7:9d:99:6e:6d:bf:
         6e:0f:de:0a:17:c2:57:97:d9:ae:9a:1e:78:7f:c2:d5:4d:57:
         a9:07:d7:68:11:4a:7d:ec:3a:88:03:dd:10:ab:ce:4b:69:e1:
         41:0c:19:c5:48:c5:d5:ab:23:c5:89:b9:f8:82:3d:53:85:56:
         ae:56:83:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:01 2025 by rpki-client