Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39a9cad1-8bec-3718-be86-1b1805fde7d2.roa
File:                     39a9cad1-8bec-3718-be86-1b1805fde7d2.roa (raw, json)
Hash identifier:          PyzXFXf0O14NOUYMdSK0qsjgJ6tnUu+Tjz8zY/vnUs0=
Subject key identifier:   ED:09:6A:DD:7B:68:65:19:69:03:45:89:F4:8D:AB:65:7F:F3:07:DF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EA6DBE1D877AD9220708CAE20
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39a9cad1-8bec-3718-be86-1b1805fde7d2.roa
Signing time:             Thu 21 Jul 2022 12:00:00 +0000
ROA not before:           Thu 21 Jul 2022 12:00:00 +0000
ROA not after:            Fri 26 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        160.223.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:a6:db:e1:d8:77:ad:92:20:70:8c:ae:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 21 12:00:00 2022 GMT
            Not After : Aug 26 04:00:00 2022 GMT
        Subject: CN=5a588404-942d-430b-a987-7e8932f64fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0c:49:e6:e8:f2:23:25:c9:93:c7:e6:01:b8:
                    70:84:8d:fc:39:c6:d1:25:20:b2:d2:9c:0b:0c:7a:
                    f4:99:6c:f4:9a:88:fa:de:42:58:3d:e3:63:7c:c3:
                    f3:e3:97:34:b1:3d:6e:d6:d2:8b:79:b4:a5:83:8d:
                    e3:5d:66:2a:8c:ff:d0:fc:91:d5:75:59:63:ee:b4:
                    2f:0a:cc:d5:c4:79:23:1f:63:0c:0d:84:68:f8:7c:
                    87:33:13:03:b0:b6:75:cd:a8:99:f4:38:60:6f:07:
                    3c:37:f8:54:67:63:11:9a:f7:f5:dd:76:0e:55:11:
                    8e:f0:2c:d1:cb:3c:ed:1c:c2:3a:f9:97:05:c2:9f:
                    4e:7a:1d:25:2b:d3:02:7e:58:bf:27:9f:db:fa:01:
                    35:da:71:f1:f9:51:24:f2:12:9f:f2:16:5a:67:be:
                    ad:54:37:ce:fe:b5:22:22:80:79:94:7a:71:f0:ca:
                    76:94:bb:5f:c2:0f:b1:b9:ba:98:00:5f:6e:72:e1:
                    94:01:03:45:a6:89:fa:2c:d3:ed:f4:3c:84:96:cd:
                    c3:86:de:53:4a:dc:7c:79:bd:1a:84:d1:d0:5c:4b:
                    5d:44:15:29:23:11:da:f7:34:35:2e:9d:f5:95:6b:
                    f4:4c:8e:10:be:81:3b:a4:77:b8:2d:68:8c:82:98:
                    36:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:09:6A:DD:7B:68:65:19:69:03:45:89:F4:8D:AB:65:7F:F3:07:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/39a9cad1-8bec-3718-be86-1b1805fde7d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.223.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:f3:48:ed:96:40:ab:95:16:5e:24:13:f2:a2:43:61:21:d6:
         da:a0:2d:16:52:62:f5:72:48:86:ba:0c:f0:43:97:c5:61:4c:
         30:39:a6:fd:ad:1a:49:d3:66:29:7a:18:03:41:2c:aa:bd:40:
         79:e0:e2:69:1a:04:88:84:52:80:4b:82:41:7c:36:12:14:bd:
         88:45:e8:da:48:27:fd:cc:a6:4f:54:ec:6f:33:b8:4a:a3:29:
         25:47:5e:e8:96:bf:b0:bf:15:90:b9:92:e3:45:2b:89:6f:4c:
         cb:70:a8:de:34:80:74:27:2c:8f:43:3a:34:79:14:2a:a3:a2:
         b4:fa:87:be:ab:0e:f6:0c:d7:e3:43:b2:9d:97:19:85:b7:c4:
         8b:a9:ca:21:f6:63:ba:78:5b:28:a4:00:4d:83:10:bd:49:c9:
         e6:3b:e0:51:d4:c8:75:08:cc:58:41:ca:48:56:10:cd:39:e8:
         db:fe:28:f9:c2:f3:ea:e4:ea:ea:53:c4:b4:ab:1f:cc:78:1d:
         82:e7:8e:b1:2f:b4:cf:c4:36:5e:0b:f5:04:2e:9b:cf:86:25:
         85:60:92:a1:89:8b:8d:20:eb:f1:61:53:ae:b5:2f:34:68:78:
         92:53:b4:d2:e3:53:9c:5f:ad:d3:9e:7f:f3:23:62:44:a3:42:
         52:60:3f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:51 2025 by rpki-client