Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ad173e1-2ec1-3e63-a4e8-62e403235921.roa
File:                     4ad173e1-2ec1-3e63-a4e8-62e403235921.roa (raw, json)
Hash identifier:          vt7LIY2mGHnqICFiHHJrf0ckLc3LfE6NXUy3q38bTKk=
Subject key identifier:   7E:DE:70:A3:A2:DD:78:85:1E:44:1D:35:43:96:BD:F3:6D:1A:58:9A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F1D734B3229909AC0908A9100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ad173e1-2ec1-3e63-a4e8-62e403235921.roa
Signing time:             Fri 02 Sep 2022 15:54:07 +0000
ROA not before:           Fri 02 Sep 2022 15:54:07 +0000
ROA not after:            Sat 08 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        156.27.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:1d:73:4b:32:29:90:9a:c0:90:8a:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep  2 15:54:07 2022 GMT
            Not After : Oct  8 04:00:00 2022 GMT
        Subject: CN=13522369-b99b-4f7c-b5d0-01a10760376e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:03:a0:24:48:6a:04:bf:64:53:96:7b:92:28:
                    fb:80:3d:52:9f:7f:39:ab:00:d2:38:f7:74:26:78:
                    6d:c3:6b:4e:ce:aa:49:98:c1:79:be:2d:b1:0d:fc:
                    78:f2:df:f0:62:3c:0d:1c:a5:7d:b6:25:d7:be:a0:
                    81:f8:a9:e9:33:37:61:bf:75:2f:d8:32:a1:58:ba:
                    6d:bc:c8:d4:b4:cd:7d:05:92:d4:50:e5:7f:d5:f9:
                    63:ba:28:d3:69:99:0e:71:9c:2a:b5:3d:ed:bc:15:
                    4e:17:b6:e9:13:98:65:bf:50:e4:fb:1f:65:ad:47:
                    45:51:1a:09:4e:60:94:17:d1:e0:c1:fd:03:3a:bf:
                    f7:69:d2:67:d3:27:75:cd:69:60:a7:f9:fd:9f:34:
                    ce:7c:bc:e3:24:6b:81:39:cb:e5:2d:28:76:25:f4:
                    0a:57:0a:df:e0:ac:99:e8:1b:32:11:7e:71:cf:bf:
                    d2:22:f7:28:9a:9c:65:3e:60:c5:34:dd:ff:f7:9b:
                    39:ff:d0:c2:cb:d7:ee:0b:52:06:3b:df:37:67:14:
                    ca:7d:67:93:eb:b6:6b:80:83:e1:9d:bb:e9:26:14:
                    51:6b:44:23:64:6e:51:18:b2:00:88:39:74:6c:a7:
                    af:d3:60:11:41:a3:1e:5a:dc:de:f6:ad:eb:3f:94:
                    0c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DE:70:A3:A2:DD:78:85:1E:44:1D:35:43:96:BD:F3:6D:1A:58:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ad173e1-2ec1-3e63-a4e8-62e403235921.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.27.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:c4:e6:09:d0:81:18:29:64:da:6f:ed:c9:7c:c0:59:87:ca:
         1d:e5:b4:2b:fe:50:2f:69:c6:cc:e5:55:3d:6c:34:74:b1:91:
         c0:15:02:9e:21:ac:c8:fe:e0:d9:29:f4:19:7b:a7:dd:c7:cc:
         18:54:fe:0d:8a:4d:18:02:b5:b5:cd:c9:2d:38:83:3f:32:69:
         05:10:fd:18:e4:96:2f:54:2c:91:8e:6c:5f:fc:e6:98:64:0c:
         eb:0f:f0:1e:2b:f8:b2:d9:ca:4f:c5:fc:9d:ed:2d:39:92:e7:
         e8:de:0d:1b:fd:bd:da:63:b5:dc:93:50:86:77:7a:b5:90:ae:
         76:5e:e6:65:32:37:98:00:54:57:de:d9:22:d2:8f:4a:04:1f:
         a3:3f:4e:b0:94:d3:63:f6:48:ae:ff:56:87:81:a1:30:75:fc:
         d5:1e:ed:3f:52:5f:9c:99:bc:b5:f6:b5:20:4d:7d:5c:60:b1:
         cb:71:1a:f3:ec:c7:16:3f:f4:12:5d:0e:d8:be:a1:22:2b:8a:
         39:b9:4b:a1:f4:19:05:01:74:cc:eb:0b:74:2a:48:d2:20:15:
         76:2c:cc:bb:46:31:32:e1:e0:6a:bb:8a:e8:23:95:d7:16:43:
         60:45:a6:c6:16:dc:be:60:e1:ca:dd:f4:0b:ec:e5:bc:7e:fa:
         d5:b1:03:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:22 2025 by rpki-client