Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d06b1d8-0628-3448-9816-aa1101d2b3ef.roa
File:                     4d06b1d8-0628-3448-9816-aa1101d2b3ef.roa (raw, json)
Hash identifier:          8lEtUqwt8OYNaD2cOB+Efix2CZnvyyRLELuNGfdV06Y=
Subject key identifier:   26:17:F3:3D:02:AC:47:25:0F:1D:EA:79:0A:68:20:1B:A1:A4:D0:C3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F83074E17952B3A1BDAEFD900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d06b1d8-0628-3448-9816-aa1101d2b3ef.roa
Signing time:             Sat 08 Oct 2022 12:00:00 +0000
ROA not before:           Sat 08 Oct 2022 12:00:00 +0000
ROA not after:            Sun 13 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        104.153.112.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:83:07:4e:17:95:2b:3a:1b:da:ef:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  8 12:00:00 2022 GMT
            Not After : Nov 13 05:00:00 2022 GMT
        Subject: CN=3051b679-9cf1-49ac-a4ab-1573653e784b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4b:9b:93:ad:57:e5:7f:6d:1e:90:66:3b:65:
                    8f:f5:c9:ad:c5:1f:fa:3d:89:6d:47:69:ce:a7:87:
                    32:57:be:c6:5e:3b:33:f7:61:9e:09:8d:a6:b7:3e:
                    ef:02:80:11:12:4e:f4:8d:ce:c1:56:1f:de:e9:c2:
                    3b:84:36:bc:c3:24:27:5f:b5:61:1f:c3:1c:7a:f1:
                    0c:3c:3c:20:8c:76:c9:76:86:cc:06:d7:bd:f2:99:
                    5b:c6:ea:3c:cf:bf:55:6d:b5:a7:00:ec:76:3a:0b:
                    ae:cf:2d:a3:58:74:f3:ed:0a:7f:65:78:10:f9:fd:
                    17:29:5a:a1:32:6c:0a:8d:31:3c:32:78:01:ed:f6:
                    e4:12:77:0a:f2:0e:93:b1:af:cc:ae:ff:45:7e:a2:
                    7b:4d:08:69:3c:a2:94:ee:0d:6a:1a:66:84:35:71:
                    8b:77:2f:f2:75:c5:89:98:aa:e5:ae:3d:fb:01:69:
                    9d:41:2e:55:8d:51:a2:3c:30:e8:ef:b1:6e:b4:3b:
                    6b:1c:c8:e6:b2:6a:f3:89:c3:19:fd:25:13:6d:de:
                    18:10:38:94:d8:77:e3:73:0e:f2:ff:67:da:44:91:
                    e6:9f:e7:8e:10:99:60:06:44:1b:59:be:61:29:a3:
                    fa:e2:91:1d:b6:bc:2a:10:fe:96:98:f5:e5:da:10:
                    b4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:17:F3:3D:02:AC:47:25:0F:1D:EA:79:0A:68:20:1B:A1:A4:D0:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d06b1d8-0628-3448-9816-aa1101d2b3ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:47:52:9b:49:22:75:30:5c:b8:61:65:74:4e:b5:d9:91:29:
         f0:a6:6b:49:b2:5e:b7:17:86:26:d3:b6:15:61:74:4f:a0:1b:
         4a:77:c4:c6:8b:d1:ba:cc:2d:c9:f8:37:e7:26:a6:33:b5:fd:
         51:cb:fe:e9:0c:0a:de:a2:16:91:7e:69:b8:a1:b2:6a:10:e2:
         8d:8c:2f:b1:59:66:a5:e1:27:06:f9:d5:8d:14:09:7f:43:28:
         75:c4:77:ff:25:7e:cb:4e:a1:21:66:11:1d:20:cd:85:6c:cf:
         d0:0e:02:5d:2c:d5:10:ec:5e:64:e5:fa:c2:67:65:80:5f:31:
         15:fb:9f:7d:45:db:0f:89:df:94:b8:2a:03:1d:a9:3a:0c:cc:
         96:88:08:df:4d:98:4e:2f:ae:b1:b0:6f:12:72:96:bb:44:6d:
         a6:51:f4:4c:ad:2b:06:08:71:63:a8:0b:d0:19:e3:01:77:5a:
         82:30:2b:ca:2f:3f:d0:64:2c:6e:b4:d3:c6:97:94:ac:2d:79:
         3c:87:17:c3:77:b5:76:b1:9d:b4:09:a7:01:67:e0:3f:20:b5:
         e5:f0:2a:f6:39:73:7a:ef:c2:d4:24:a3:76:b4:93:bd:fe:56:
         6c:a5:f0:c7:8b:fa:86:7b:6d:7a:99:71:c1:0e:6b:bf:5a:e7:
         30:f0:e6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:12:58 2025 by rpki-client