Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/46a6a7ad-43b0-3cba-84f3-6ce2364f0bca.roa
File:                     46a6a7ad-43b0-3cba-84f3-6ce2364f0bca.roa (raw, json)
Hash identifier:          HKcVTcoW7YraxSWouGo+cLhO1okUik5eZ46jNCGNJnA=
Subject key identifier:   5F:DF:7F:99:57:B4:2E:BB:2F:A7:FA:2E:05:7A:99:CB:BA:AB:95:EE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EA00DD272328712B51AB36640
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/46a6a7ad-43b0-3cba-84f3-6ce2364f0bca.roa
Signing time:             Tue 19 Jul 2022 12:00:00 +0000
ROA not before:           Tue 19 Jul 2022 12:00:00 +0000
ROA not after:            Wed 24 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        152.227.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:a0:0d:d2:72:32:87:12:b5:1a:b3:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 19 12:00:00 2022 GMT
            Not After : Aug 24 04:00:00 2022 GMT
        Subject: CN=ae9d146c-9b73-4b46-997c-3d7118cb1d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:76:ac:d8:4c:c8:d9:a4:ff:8a:a8:19:a5:db:
                    ab:ac:2e:10:a0:0e:bb:86:93:94:41:b2:a9:3f:1e:
                    fb:46:bf:5f:a9:24:8d:87:78:41:08:1a:0d:e6:82:
                    9c:59:f0:d2:e4:c2:71:2a:c5:fb:2f:c8:49:e0:3c:
                    0a:83:30:67:26:ba:01:66:43:3d:07:02:c3:ad:64:
                    cf:e4:12:ba:79:50:bd:6a:61:31:4d:12:06:fa:f1:
                    e8:ba:e7:9f:0e:54:7c:4f:cb:0a:58:af:78:bb:c7:
                    eb:c6:12:62:9f:b8:b4:f3:70:bf:cf:47:78:90:0d:
                    a4:e8:3f:b0:b2:18:47:5e:75:93:e0:cb:68:d5:0a:
                    3f:36:5b:97:14:b5:d7:3e:3c:5f:cb:93:2b:f3:ab:
                    b5:a6:72:29:f1:db:cd:0d:a7:b3:8f:6b:8d:f5:f6:
                    cb:24:ef:ed:38:e0:20:9f:0d:a1:db:5d:cb:1e:0e:
                    6d:8c:d0:ca:c9:a7:07:88:97:bb:dc:44:9c:24:6f:
                    17:c8:8c:26:26:0e:0b:8f:0f:e7:db:07:b8:1e:62:
                    1b:55:15:45:ca:b0:70:84:e3:18:ae:a4:7a:0c:9a:
                    c7:19:04:b6:16:00:11:c5:0b:61:a4:38:3a:ad:26:
                    24:3e:49:8b:bf:cb:d4:e5:f7:75:1b:9e:48:a5:2e:
                    9b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DF:7F:99:57:B4:2E:BB:2F:A7:FA:2E:05:7A:99:CB:BA:AB:95:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/46a6a7ad-43b0-3cba-84f3-6ce2364f0bca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.227.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:6f:b9:f5:f8:52:bf:b4:e6:f4:0f:cf:f8:02:05:87:31:b2:
         06:b4:f4:37:4b:57:aa:f4:c3:fa:e2:93:d7:bc:f9:0a:f8:fb:
         d8:e5:37:a4:37:ac:42:79:6a:24:9f:79:a5:2b:03:0f:13:5b:
         dc:95:39:f9:8e:5e:7e:f1:69:1a:7f:d1:ba:8d:98:33:ea:b2:
         2e:68:6a:ab:08:06:e2:ef:db:7a:d0:ac:62:e2:0c:f9:82:c9:
         32:fd:4c:12:41:fd:49:ca:28:a0:0d:83:87:d3:aa:88:24:5b:
         68:e1:da:ce:ce:70:26:12:cd:5e:cd:21:a0:a9:b1:ae:60:46:
         07:ca:3b:12:18:7c:57:e3:7b:84:e7:ad:ee:c5:25:01:67:70:
         b4:60:d8:31:37:bd:70:81:64:34:51:fd:f3:91:c5:9b:4c:36:
         a7:20:bd:e0:c4:0c:04:aa:c3:d3:a9:e8:a1:bb:58:e4:31:40:
         e1:8b:92:f0:66:af:7c:6e:57:c1:d7:5c:2c:bd:05:60:9e:57:
         69:95:52:91:de:d1:62:29:f9:b6:13:03:3a:23:3d:20:c3:c4:
         62:f8:e6:84:e1:c7:6b:b4:7b:f5:93:d5:71:32:28:4b:38:5e:
         54:39:64:8f:8e:14:53:7c:fd:2c:a9:3a:26:8a:2e:f9:0c:69:
         94:a7:51:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:58:29 2025 by rpki-client