Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/49d2b5d0-530e-30fa-9c49-9367a76663b2.roa
File:                     49d2b5d0-530e-30fa-9c49-9367a76663b2.roa (raw, json)
Hash identifier:          0JpyLSbQRZhX2Xbgc+GQlhWOGfLdZamSOOyxnoqOKRI=
Subject key identifier:   95:1B:12:23:6B:AE:44:68:C5:48:1A:90:C0:45:0C:03:F3:08:03:8C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FCBD11ACDB63CCBCA61A65FC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/49d2b5d0-530e-30fa-9c49-9367a76663b2.roa
Signing time:             Thu 03 Nov 2022 12:00:00 +0000
ROA not before:           Thu 03 Nov 2022 12:00:00 +0000
ROA not after:            Fri 09 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        63.246.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cb:d1:1a:cd:b6:3c:cb:ca:61:a6:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  3 12:00:00 2022 GMT
            Not After : Dec  9 05:00:00 2022 GMT
        Subject: CN=bcee05bc-2317-410f-92e7-917eebc06f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:cd:0b:54:21:76:dc:d8:cd:ac:ab:13:84:69:
                    6f:f7:fc:b4:92:e7:b4:6f:9f:fc:f1:44:86:55:a6:
                    55:9f:ae:ef:32:8f:40:77:cc:ce:f2:a9:9b:35:c5:
                    da:47:95:ce:40:9d:8e:82:5c:00:f1:36:05:f2:51:
                    e6:d4:eb:f5:84:83:16:d2:d9:1e:08:7a:64:b2:e6:
                    0e:c0:6e:a5:e8:17:a3:c0:b0:11:3c:ca:25:eb:ed:
                    4b:bb:2d:22:0a:ad:72:9b:84:a5:3b:90:01:4c:21:
                    7f:f7:f9:3b:3b:69:e7:c6:08:a4:e1:cd:9c:0f:48:
                    bc:59:52:0a:03:fa:8b:b4:a8:79:6f:0d:90:83:fa:
                    c2:0e:e8:36:a4:8c:d3:3f:0f:3a:9f:78:d2:c5:a9:
                    1d:56:96:65:e8:18:2b:cd:fb:04:14:d8:c2:4b:bd:
                    05:7d:b7:13:8f:75:3a:21:c6:7c:89:df:0f:44:f8:
                    63:06:a5:eb:38:9b:7b:02:1e:11:8e:46:da:39:9c:
                    a3:23:ad:49:2e:bb:f0:64:51:d6:20:a7:98:2c:fb:
                    87:bb:e5:61:0a:a8:db:72:84:64:5b:0e:58:cc:bd:
                    68:0d:5c:8c:32:96:3e:0f:1e:48:00:bc:c8:4a:41:
                    31:db:52:de:8e:64:45:99:8e:cb:36:ce:db:7b:3e:
                    b4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1B:12:23:6B:AE:44:68:C5:48:1A:90:C0:45:0C:03:F3:08:03:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/49d2b5d0-530e-30fa-9c49-9367a76663b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:ae:64:9a:d8:a6:1a:34:8c:b0:e9:97:99:f3:0c:8e:18:37:
         47:52:52:e6:1d:63:4a:67:4a:e8:e1:52:3d:bf:d6:fc:9e:f0:
         07:49:a3:ae:15:11:7d:34:a3:10:49:10:37:f5:62:66:a5:fe:
         c4:d8:60:fa:0e:96:8a:bf:b2:88:b0:de:05:38:f8:6d:1d:5c:
         59:50:2c:76:37:3a:b9:3c:57:13:21:72:49:27:72:26:64:11:
         9a:00:cf:ec:bd:6f:da:54:62:95:49:cc:98:dc:7c:32:4a:9f:
         93:fc:e6:ed:a2:61:f9:08:59:7c:b7:4d:87:92:fe:9d:16:f5:
         51:f8:69:d1:92:79:47:52:34:52:c7:4c:51:b4:bb:36:55:27:
         eb:34:08:70:87:41:76:e2:87:73:87:fc:ff:84:df:4d:df:b2:
         5d:ca:ab:5b:5c:2e:7f:13:ac:61:b1:0a:29:ac:21:fa:e7:59:
         7d:dc:93:d7:d4:64:9f:9f:e9:a6:b3:4b:c7:03:4d:af:90:80:
         7a:42:e9:33:98:47:dd:8b:62:b6:e5:01:3e:64:8c:e0:d6:e7:
         33:df:06:b5:69:74:94:c1:2e:3b:6a:9e:ce:22:22:83:a8:2d:
         ba:ba:92:17:50:e9:89:65:82:ae:71:95:54:98:2f:b2:28:4b:
         7c:3e:4f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:09:37 2025 by rpki-client