Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/44593bad-9584-3a73-a6ca-ccd77d5b30af.roa
File:                     44593bad-9584-3a73-a6ca-ccd77d5b30af.roa (raw, json)
Hash identifier:          coKG1WnQUTtqMz5JCqjbheTNrsrlZJcmGLuHayJu/Zg=
Subject key identifier:   7E:29:5B:A4:C9:B3:A8:11:2A:24:A8:8E:FF:15:97:54:83:CD:A8:3E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F66CA6923D1C4B5DE00655300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/44593bad-9584-3a73-a6ca-ccd77d5b30af.roa
Signing time:             Wed 28 Sep 2022 17:57:08 +0000
ROA not before:           Wed 28 Sep 2022 17:57:08 +0000
ROA not after:            Thu 03 Nov 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        128.212.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:66:ca:69:23:d1:c4:b5:de:00:65:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 28 17:57:08 2022 GMT
            Not After : Nov  3 04:00:00 2022 GMT
        Subject: CN=2783ca81-27f8-4aec-ac70-68914353243a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5b:3a:d0:13:ed:d8:a0:5e:60:50:9f:84:b2:
                    a5:1f:7f:48:5d:53:6c:3d:67:17:b4:53:e2:5d:6e:
                    09:f8:53:0b:cd:03:8e:38:7f:d8:e0:c1:c8:19:8e:
                    27:ad:39:c3:f3:63:c8:0e:9d:60:13:13:50:ba:94:
                    7d:67:69:9f:91:ca:ec:41:a4:79:20:72:95:fd:17:
                    47:9a:55:5c:50:2c:44:7e:fb:0a:54:7e:66:86:21:
                    12:8d:e5:c8:3a:b4:af:9a:36:df:60:97:68:87:1b:
                    bb:24:10:12:f5:c3:6e:60:d3:d7:e9:70:2f:24:ce:
                    6c:a9:cb:02:db:4c:dc:a1:d7:9b:bb:22:0f:bf:58:
                    03:df:05:0d:a9:43:7a:71:9f:a4:66:83:d1:61:f8:
                    38:5d:ef:1a:84:83:17:db:18:37:bc:a3:ae:20:4c:
                    fa:9d:55:d9:6d:fe:11:6e:98:db:41:7a:25:5a:03:
                    33:73:6e:14:48:7a:1f:5e:f3:3e:d3:7b:63:78:ec:
                    d7:57:95:bc:f6:61:34:f1:7e:3a:c2:8d:b1:e2:e7:
                    ea:51:bc:89:0c:ca:22:f3:a4:bb:d6:22:ab:ed:af:
                    a7:91:8c:02:d3:e4:55:46:2e:c1:48:19:cf:59:71:
                    24:7d:30:51:b7:8d:5c:76:ba:f6:07:a0:bb:5d:fd:
                    1b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:29:5B:A4:C9:B3:A8:11:2A:24:A8:8E:FF:15:97:54:83:CD:A8:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/44593bad-9584-3a73-a6ca-ccd77d5b30af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.212.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:6d:3a:35:b6:75:bf:0c:32:a1:4b:fc:c3:42:d0:2b:3a:93:
         a2:55:93:a6:36:c0:16:0c:63:45:52:2f:c0:3c:6a:fa:cb:f1:
         f4:9a:58:5f:d7:0e:d1:19:e5:84:68:e0:b1:44:df:92:bb:64:
         7e:84:70:03:50:34:28:69:25:55:5a:99:49:fe:43:d7:d1:88:
         01:62:e6:75:1c:bc:92:15:5b:d9:5b:5a:46:b2:28:0a:00:22:
         62:45:54:82:dd:35:5c:13:d5:b2:1d:1e:b9:bc:4c:f0:d5:e0:
         fc:f1:97:64:93:80:1d:2f:4f:4c:ca:70:06:b6:4c:23:0c:47:
         14:66:19:9f:17:85:fd:ba:bf:1c:e6:b4:75:7c:47:dc:c6:8a:
         36:99:15:c5:b0:02:e7:59:55:21:96:e2:9a:fe:19:11:91:72:
         f7:e9:a6:35:bf:fd:84:6a:23:1f:94:b6:1f:6c:32:3d:0c:2b:
         dc:21:35:e4:40:df:fe:78:c4:1f:07:dc:9c:4e:f8:05:6c:e5:
         9b:a4:c9:e8:3c:ef:16:63:88:0d:31:b9:35:02:e0:82:f8:be:
         39:97:b7:aa:a3:7e:d9:ed:ec:e1:0f:03:bb:02:a9:df:c7:f3:
         ef:53:d4:48:5b:f9:ca:78:8f:ed:1c:f2:ea:8d:79:76:4a:50:
         c8:93:07:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:24 2025 by rpki-client