Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48832bec-b290-3f4c-a44a-ba287c9d7bfa.roa
File:                     48832bec-b290-3f4c-a44a-ba287c9d7bfa.roa (raw, json)
Hash identifier:          hWmsXPu+H9D5C7zMObDJdxdQpiosppfYC+G4Y5xsD/c=
Subject key identifier:   17:F1:93:5B:7F:0F:0C:08:BE:46:83:A2:DF:6C:1C:A5:CD:E0:56:2F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F1152E1ED7133BE3E10C14980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48832bec-b290-3f4c-a44a-ba287c9d7bfa.roa
Signing time:             Sun 28 Aug 2022 12:00:00 +0000
ROA not before:           Sun 28 Aug 2022 12:00:00 +0000
ROA not after:            Mon 03 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        192.31.212.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:11:52:e1:ed:71:33:be:3e:10:c1:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 28 12:00:00 2022 GMT
            Not After : Oct  3 04:00:00 2022 GMT
        Subject: CN=7b13c4e8-b736-4b31-929f-521bcee3f8db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0f:01:6b:b2:42:c3:72:f5:24:c6:0d:bb:77:
                    89:49:c2:8b:7a:94:bb:cd:9c:5d:46:32:81:e5:c8:
                    e6:ee:71:0f:37:15:c2:ba:44:19:e1:35:dd:21:9a:
                    19:bd:7a:86:26:79:cc:08:89:8a:e5:71:ac:f8:f3:
                    be:d0:b0:78:cd:c9:9f:94:3f:37:aa:63:2a:c2:28:
                    a4:a0:ad:dc:70:29:31:bd:7c:e0:75:8a:69:dc:db:
                    8b:3a:6c:96:c6:33:3c:97:38:c4:45:27:64:7e:c5:
                    60:19:fe:bf:5c:bb:be:26:62:6b:6f:5d:a8:b6:8a:
                    9c:86:20:43:cd:59:3c:95:dc:db:e9:78:2c:5d:29:
                    fe:de:33:18:be:03:a5:4c:5b:61:67:ee:58:5a:82:
                    25:11:65:32:9b:76:61:d8:c3:a6:34:41:4b:ef:73:
                    82:3f:70:d6:67:68:be:13:9e:69:ab:19:85:02:e0:
                    02:4b:20:ac:8a:af:99:e5:58:ed:d1:15:1d:1d:8c:
                    31:8a:af:f4:5a:ae:f8:cf:15:bb:5a:24:22:da:25:
                    5c:f8:1c:93:d5:8f:c7:f9:b9:06:56:d9:36:1d:37:
                    51:61:15:21:8d:42:26:76:d5:81:d2:f7:b5:9a:1e:
                    ab:37:75:d2:34:8c:49:a8:ae:ec:6f:66:ba:64:27:
                    0e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F1:93:5B:7F:0F:0C:08:BE:46:83:A2:DF:6C:1C:A5:CD:E0:56:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48832bec-b290-3f4c-a44a-ba287c9d7bfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:4f:63:94:c6:2b:a4:e4:df:a0:05:53:92:48:f8:56:48:10:
         45:e5:6e:ee:c8:fa:d7:37:f0:7f:79:0a:4a:b4:2a:3c:72:05:
         cf:bc:99:0d:37:7f:ed:3e:3f:23:f8:de:a3:7e:ec:46:10:50:
         ef:9a:3f:95:48:28:d3:03:f5:e0:e1:7f:b9:46:30:ef:23:7f:
         2f:89:1e:9c:79:99:d8:e0:f0:bf:7d:07:ff:c1:c1:f1:9f:7b:
         04:f6:ea:f4:90:ec:c7:4b:13:c0:29:9d:79:00:4b:34:37:02:
         3c:23:6f:b7:23:f9:0d:5b:c3:d5:30:82:c2:8d:9e:e3:1b:e5:
         d3:67:d0:fd:06:20:46:ff:c6:03:93:56:99:1d:1f:bb:0e:56:
         dd:c2:15:5a:ea:1c:8a:34:96:cf:25:d3:4e:94:d1:c9:fe:98:
         a8:ed:0e:00:23:43:97:b1:58:21:e3:bc:3d:76:46:cf:d1:af:
         a4:09:ae:ea:77:3a:60:3e:52:16:b1:17:b9:15:b8:6f:37:e9:
         af:d8:d2:f0:6b:c7:49:9f:ca:48:c0:55:2a:53:34:c3:bc:31:
         a5:2b:49:de:4b:d2:87:ee:a9:b7:9e:3a:d9:20:66:a5:8e:05:
         c8:3c:aa:4b:50:aa:fa:ad:53:20:c6:0a:e4:93:a5:95:aa:f4:
         bc:7d:9f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:15 2025 by rpki-client