Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4895c231-3c89-3860-b9c5-b0f4f2d955db.roa
File:                     4895c231-3c89-3860-b9c5-b0f4f2d955db.roa (raw, json)
Hash identifier:          VQ29Z8Ls5t21MiPjCHFxh4SSTAkAY/g6fmRm7sKzms4=
Subject key identifier:   B8:CF:26:DE:93:F4:ED:A5:C4:AE:29:D9:E9:5F:E8:3C:94:25:A7:3F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FE9AEEA71688197F53CE10680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4895c231-3c89-3860-b9c5-b0f4f2d955db.roa
Signing time:             Mon 14 Nov 2022 12:00:00 +0000
ROA not before:           Mon 14 Nov 2022 12:00:00 +0000
ROA not after:            Tue 20 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        130.186.32.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:e9:ae:ea:71:68:81:97:f5:3c:e1:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 14 12:00:00 2022 GMT
            Not After : Dec 20 05:00:00 2022 GMT
        Subject: CN=ed926a7e-446d-4841-afa5-00c4de4e172f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:16:a2:9a:72:e8:d8:1a:8b:c8:9d:bf:ca:38:
                    fe:d8:14:3c:00:67:c4:4f:fa:63:29:60:b6:34:cf:
                    6b:47:ba:6d:09:cd:cb:90:29:34:3b:af:db:6d:51:
                    f3:db:54:4b:d9:aa:40:98:75:5e:2a:61:c6:38:ae:
                    7b:cb:28:6c:75:71:c5:6e:bc:a9:91:a0:b8:27:8a:
                    58:4c:da:1d:d0:c5:a5:7b:27:ab:ab:0b:62:77:8a:
                    43:eb:a5:f2:ec:2b:ec:08:51:78:18:55:6e:7c:51:
                    39:25:6c:1a:2d:72:5d:61:73:c0:a8:19:8a:3f:1c:
                    d7:41:31:50:4a:e4:31:53:81:15:60:8d:d1:ba:16:
                    6a:61:a1:6f:99:ae:7d:f4:bc:ff:e9:28:ad:a4:65:
                    68:91:22:b0:b0:56:a1:fa:e8:ab:51:f8:bf:5f:f5:
                    a1:09:00:b1:0b:79:f1:0d:f9:db:4d:bd:f8:cf:2b:
                    e9:7b:47:66:85:82:98:7e:9d:0a:68:c1:05:07:51:
                    ea:b1:89:3a:0e:b3:11:50:9f:a3:0a:85:29:11:39:
                    5c:a4:33:53:01:99:76:16:e9:85:f0:3f:74:db:4b:
                    15:9c:46:a4:6e:ae:43:96:40:22:40:91:c5:2b:41:
                    cf:d8:00:f9:a8:de:59:df:55:fc:3e:d9:d8:71:7f:
                    98:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CF:26:DE:93:F4:ED:A5:C4:AE:29:D9:E9:5F:E8:3C:94:25:A7:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4895c231-3c89-3860-b9c5-b0f4f2d955db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.186.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:fc:76:a0:42:49:00:4a:73:30:01:7e:d8:e5:5f:04:8c:7e:
         9d:d3:59:2d:7d:7b:20:26:ff:0b:f8:a9:cf:3d:02:1c:f1:0f:
         c1:a2:59:35:bc:c7:28:1b:75:8f:0e:24:20:52:9e:13:bf:5a:
         94:a5:6a:fd:75:a3:e6:d4:86:69:f8:e1:97:68:ad:56:3a:fe:
         1e:ef:3a:73:cd:13:3f:c7:11:d9:f0:81:98:b7:56:53:b8:14:
         68:ba:c9:d7:02:4c:e9:df:78:97:b5:3b:c0:64:12:9f:6a:43:
         26:74:cc:80:7f:c4:9d:40:7f:67:4c:d6:fe:52:02:7a:9e:8c:
         d3:74:42:cb:73:c7:21:c6:e3:ca:d7:7d:a4:81:50:19:a1:e2:
         92:0c:47:25:37:01:cc:2b:1f:ad:3d:b2:f8:ba:c3:f5:07:33:
         71:3e:17:69:70:1d:1e:32:75:5b:0e:84:d0:12:67:90:d3:2d:
         07:dc:44:be:da:5e:e4:a2:46:0d:9f:a9:f9:5a:9b:9c:cf:e2:
         f9:c1:e2:66:e6:58:01:08:4b:49:c1:5f:d7:c8:60:0d:14:7a:
         e5:9d:ae:5d:4a:13:5e:b3:17:c5:d7:34:d0:ff:08:db:86:55:
         e7:0c:d9:7e:1e:c6:8d:5d:44:71:9f:28:80:eb:9a:b0:33:31:
         25:ec:54:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:30 2025 by rpki-client