Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4952d95b-58f3-3aea-a005-02a3439e696b.roa
File:                     4952d95b-58f3-3aea-a005-02a3439e696b.roa (raw, json)
Hash identifier:          E/phA4J0tOcN5TDZbVuce9zK3/of+3B0Esl00zADGkU=
Subject key identifier:   27:06:04:25:C0:CB:FC:AD:4F:86:9F:63:20:2C:E8:72:8E:9F:A8:81
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F58568F83E29E6C291D86C360
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4952d95b-58f3-3aea-a005-02a3439e696b.roa
Signing time:             Fri 23 Sep 2022 12:00:00 +0000
ROA not before:           Fri 23 Sep 2022 12:00:00 +0000
ROA not after:            Sat 29 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        156.4.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:58:56:8f:83:e2:9e:6c:29:1d:86:c3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 23 12:00:00 2022 GMT
            Not After : Oct 29 04:00:00 2022 GMT
        Subject: CN=b94e85e7-f123-4c43-943b-301dce4b9c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ce:68:53:94:ee:ca:11:32:91:bc:d3:68:69:
                    67:63:7c:ad:35:d4:3e:7d:e3:e6:7a:5e:fd:8b:6b:
                    76:cb:78:4d:72:0e:f8:b1:c5:2e:64:e5:a2:3f:bb:
                    ac:a2:e3:ef:ca:b6:89:6e:c8:ad:76:30:16:cb:c2:
                    61:a7:c9:05:fb:6f:93:1e:63:dc:c9:20:75:06:a1:
                    b4:0a:bf:9f:ca:00:7f:db:ab:6a:72:37:9f:aa:fd:
                    15:9f:74:7f:1e:9d:36:f9:d8:ad:7d:ed:5a:3a:86:
                    54:f0:af:8c:53:c2:a8:d0:80:04:46:01:8a:6d:e8:
                    86:37:9e:86:61:b3:45:8b:b8:89:5d:6d:8d:a5:c8:
                    3d:f4:84:2e:29:e2:9a:7e:f6:96:7d:79:dd:1e:ea:
                    29:2d:fc:10:d2:19:57:4c:6f:b4:4d:cb:c9:2d:19:
                    11:43:6d:b4:a9:7b:58:9c:36:43:fc:03:cb:b5:e1:
                    9f:73:9d:70:2b:83:ba:7c:e5:f3:97:28:48:0b:4d:
                    1b:01:01:a9:e8:bf:87:f8:2b:a8:fc:16:5e:7c:f9:
                    12:93:be:88:9a:7b:f9:1d:5d:ea:b8:9c:d7:f3:f0:
                    1e:b2:d0:ed:88:63:8e:e8:17:0a:a0:2c:16:ab:e6:
                    50:e9:92:85:4a:4b:4a:ec:6a:93:c2:a1:68:06:2d:
                    3c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:06:04:25:C0:CB:FC:AD:4F:86:9F:63:20:2C:E8:72:8E:9F:A8:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4952d95b-58f3-3aea-a005-02a3439e696b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.4.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:d6:8d:53:c0:5b:68:5e:2f:9f:45:ae:97:a9:95:c1:8e:bf:
         ec:02:18:47:c6:d6:ea:3b:3e:60:5c:8b:37:f9:e0:66:ca:a3:
         79:55:77:99:62:59:c3:62:83:0d:59:7f:8c:bf:49:17:a5:7d:
         39:6e:04:8c:66:4d:66:18:b3:b8:37:4b:19:e0:64:e2:e4:ed:
         c8:3a:90:f9:5d:5f:d8:6b:ce:63:de:98:74:9a:18:f2:2e:0f:
         8a:4d:80:8d:a2:6a:ae:ff:49:54:5a:f9:6d:b1:4c:26:ba:21:
         ff:e2:65:bc:fc:8d:6b:a2:0b:fa:dd:72:80:90:68:b4:59:5a:
         62:38:fd:83:12:d0:55:80:17:29:93:70:3d:fe:cb:2e:6f:86:
         d3:2c:12:79:5e:a3:b8:00:3a:ef:19:43:65:f1:33:1f:95:e7:
         47:66:fd:56:32:9b:b2:51:83:6f:3d:e0:11:6a:9e:ec:ae:c6:
         99:a6:b7:ff:2c:10:54:17:df:5a:c3:6e:ee:8a:74:89:c6:ba:
         2f:80:4f:50:b8:f1:52:ff:c1:f3:2f:bb:99:1b:d5:ef:08:0f:
         0c:26:e7:91:01:41:60:ea:37:6c:eb:b5:c8:d7:9b:3e:67:73:
         5b:c0:a5:2a:a6:8c:20:88:14:5c:b8:f6:98:58:d3:69:28:af:
         d1:4c:1e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:37 2025 by rpki-client