Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/490c1eac-8840-3548-ab37-2f04aab86800.roa
File:                     490c1eac-8840-3548-ab37-2f04aab86800.roa (raw, json)
Hash identifier:          Zx26/Syd36Q+PlCTufu2SgU5+xcIvy6uWe7ZmbLwlfg=
Subject key identifier:   8B:CF:2A:00:6E:6A:80:25:3F:C2:64:91:A0:F8:33:9C:02:20:30:41
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D5A8EBC76289FE1AABFEBDEC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/490c1eac-8840-3548-ab37-2f04aab86800.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        165.129.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5a:8e:bc:76:28:9f:e1:aa:bf:eb:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=05f5dd80-7fe7-4327-814f-a8a4a4544ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e6:0a:21:f2:f5:5b:2b:2a:40:a9:9f:86:76:
                    39:a2:f5:71:36:b4:0c:64:79:6b:1f:6b:88:87:48:
                    17:ec:19:41:b4:42:3a:8b:89:ca:83:75:3f:31:5d:
                    c7:31:98:55:46:e9:b8:21:d7:15:84:82:5d:24:70:
                    e2:8b:80:bd:42:37:c1:2d:f7:21:e2:ce:cc:18:0e:
                    7c:56:64:a7:9a:41:95:f2:c5:12:0e:e6:bd:ee:0e:
                    70:1c:9d:eb:08:8d:71:e3:de:0d:c6:1a:f9:29:59:
                    35:e7:65:92:59:01:a2:ca:41:fa:0c:7e:25:1d:0a:
                    d9:b7:21:4a:cf:2e:d9:42:af:c7:ab:c9:2e:07:31:
                    59:c1:5c:55:60:82:13:16:62:01:8f:22:2e:ee:f9:
                    fe:14:b0:60:9e:e3:a7:87:92:ab:51:00:bf:00:e2:
                    9b:71:41:51:3d:73:2d:d4:5a:39:86:89:ec:c9:a5:
                    27:93:1f:54:ea:d6:13:27:85:c3:c7:45:c4:86:56:
                    4e:3a:4d:19:bb:2d:a2:a4:51:3c:b7:9e:c0:92:73:
                    d3:0c:6e:d6:00:a5:bd:a6:9d:25:e5:96:52:08:1b:
                    5b:ce:4d:8f:9b:9a:cc:f2:09:67:39:61:09:1b:12:
                    90:94:1b:99:31:ae:29:71:c3:bb:25:a1:ee:b9:c8:
                    4e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CF:2A:00:6E:6A:80:25:3F:C2:64:91:A0:F8:33:9C:02:20:30:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/490c1eac-8840-3548-ab37-2f04aab86800.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.129.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:b5:09:9d:66:59:f5:8b:d0:ae:86:34:90:a9:e3:64:c0:c5:
         b9:2f:3a:e8:ea:2f:ca:e5:a1:3f:45:46:f2:ff:94:3e:aa:a5:
         de:e9:dd:a0:2b:b2:2f:ad:c7:25:56:88:51:65:1c:ac:c7:da:
         77:4a:8b:4b:6a:ad:05:07:44:3f:5e:cf:58:c5:13:d0:fc:42:
         52:22:a6:d7:0c:51:67:6a:8d:79:08:83:28:3a:db:4e:38:78:
         d5:a7:99:00:a3:e5:83:df:df:e5:6a:f6:0d:eb:55:5f:6b:f6:
         f7:15:e5:14:67:e7:f8:b2:03:06:6b:e8:33:6f:12:ef:16:d7:
         f2:f8:4b:ea:a4:0e:3b:32:81:14:37:bf:8e:5b:9a:91:e8:1b:
         5d:a4:52:d0:4e:52:e4:d5:8a:7e:05:58:3b:7f:18:85:cf:dd:
         20:a2:b7:b9:80:24:98:d3:3c:9d:a4:3e:04:cc:c5:6b:ed:4a:
         91:0e:5b:ef:98:c8:33:14:d0:e3:d2:00:39:d9:6c:f9:6e:64:
         10:84:16:8b:83:4c:13:20:0f:a0:91:c7:52:0a:59:de:09:54:
         db:68:2e:ad:29:ae:e2:a8:b7:98:61:25:54:44:48:7a:b3:96:
         8a:49:66:58:06:6d:cc:95:12:12:fa:0b:ec:b2:36:ed:bc:7e:
         76:8a:d2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:28 2025 by rpki-client