Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b249172-ac34-354c-9f2b-d1786ae3ddb1.roa
File:                     3b249172-ac34-354c-9f2b-d1786ae3ddb1.roa (raw, json)
Hash identifier:          esWEZoU4m3/xHdc3q/irx0ZC61NV68hc4JXyOQdgk2s=
Subject key identifier:   8A:7A:5C:D7:78:9E:4A:CE:ED:20:29:79:5D:1F:96:CB:B9:1A:2B:F7
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D0C5489107E8A65E0138DFB80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b249172-ac34-354c-9f2b-d1786ae3ddb1.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        165.129.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0c:54:89:10:7e:8a:65:e0:13:8d:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=27ddbf37-8580-40bd-9d7c-e98c5e51d7a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7f:10:00:cb:bc:5d:8a:e8:b3:ac:64:fc:be:
                    22:55:5d:eb:64:a4:46:3f:f4:9e:15:05:05:1d:1b:
                    01:d4:7e:4f:8b:4f:ec:ea:e4:fe:71:86:8a:9c:13:
                    77:29:c5:46:e0:47:e3:fa:ad:a8:a1:3f:e7:fc:d2:
                    90:ec:0d:c7:2f:af:8c:98:02:b4:a4:ad:25:ff:fa:
                    7f:17:c9:a4:a9:ba:0f:86:79:e7:05:58:9b:56:94:
                    e4:35:67:70:77:11:09:4c:37:30:67:21:0a:4f:b0:
                    15:aa:7f:42:40:23:eb:96:73:74:2e:13:31:a7:d5:
                    cd:fc:e4:2b:43:0f:dc:04:17:56:74:5a:6c:77:81:
                    be:43:b9:9f:5e:e1:7c:8c:b7:63:f2:4d:36:f2:9f:
                    20:b5:0c:68:af:cc:c9:5d:2a:56:28:5e:db:5d:fb:
                    2d:7a:84:89:9f:03:e9:13:1d:c6:7b:13:42:34:e7:
                    d4:d1:78:fa:ba:d7:02:4f:dc:b8:1b:1b:2c:ee:9a:
                    64:85:10:cf:3c:e7:76:0a:44:3c:06:e0:41:73:be:
                    5e:53:f5:88:be:e0:52:f2:28:75:df:c7:be:e4:9f:
                    10:ee:c8:9d:5d:35:ae:cc:f8:1e:f0:d0:a7:af:47:
                    62:21:15:de:fe:ef:22:91:d4:cb:15:3d:08:9a:2a:
                    20:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:7A:5C:D7:78:9E:4A:CE:ED:20:29:79:5D:1F:96:CB:B9:1A:2B:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b249172-ac34-354c-9f2b-d1786ae3ddb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.129.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:7c:47:8a:de:73:c8:81:96:60:c4:50:b1:9b:cf:d8:2e:b9:
         8e:82:6a:a3:f5:cd:4d:ef:0a:24:6c:12:02:e0:7f:bd:a5:10:
         12:6b:f3:5d:c8:d5:50:98:a4:20:2c:5d:83:b8:0f:45:ad:3c:
         04:db:76:d9:64:48:50:d2:5d:7a:4f:7e:ce:a4:87:dc:04:b2:
         8e:81:84:41:c5:d6:33:f6:55:95:a8:89:a1:eb:2d:1e:82:ef:
         32:5a:6d:cf:1d:db:b9:45:94:eb:95:f2:29:83:17:3b:f1:e7:
         6e:a9:3b:db:5f:52:24:9f:2c:d2:c5:0a:61:1e:1c:ad:45:31:
         03:8f:ac:b1:70:7a:94:db:de:fe:05:56:cc:13:70:8d:90:c2:
         a8:97:03:fe:45:9e:00:24:b7:38:a6:03:a9:51:07:9c:cc:01:
         1d:33:70:f1:c0:74:6a:b5:26:4f:33:47:1d:0d:6a:e1:eb:c8:
         3a:0a:26:a0:52:f0:af:d4:3b:21:e3:ae:3b:87:50:de:06:d0:
         8d:4e:d6:8b:80:30:da:ed:c9:ed:04:80:35:75:52:99:4e:92:
         d9:56:b2:2e:97:e5:73:47:60:fa:c7:91:2c:84:86:cb:96:22:
         91:32:44:5f:c5:c7:5b:4a:6f:7e:0a:b3:ab:d1:8e:45:17:9a:
         61:3f:02:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:28 2025 by rpki-client