Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d651c66-0213-34cf-8203-f8b2472827e9.roa
File:                     4d651c66-0213-34cf-8203-f8b2472827e9.roa (raw, json)
Hash identifier:          gE+cE0Ijw7qqtCnpak5YImPv0017uPM36u1GVZiU6QA=
Subject key identifier:   14:6E:48:4C:B4:66:70:4C:CB:72:64:F1:84:91:70:E0:5F:8F:C6:66
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF593840DADDC5B5FE39C2940
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d651c66-0213-34cf-8203-f8b2472827e9.roa
Signing time:             Fri 18 Nov 2022 12:00:00 +0000
ROA not before:           Fri 18 Nov 2022 12:00:00 +0000
ROA not after:            Sat 24 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        208.110.48.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f5:93:84:0d:ad:dc:5b:5f:e3:9c:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 18 12:00:00 2022 GMT
            Not After : Dec 24 05:00:00 2022 GMT
        Subject: CN=223e2797-3ae9-47df-bd55-5bf53a17292b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0a:eb:ed:28:a5:21:a9:e7:37:fa:93:e5:60:
                    99:14:2c:20:5a:85:20:6a:da:63:59:89:4b:31:ea:
                    9c:af:69:8b:f5:4f:91:d1:15:71:50:b2:cc:3d:03:
                    a1:13:91:0e:3d:e1:23:d3:dc:f5:33:bb:e2:74:c8:
                    a9:07:95:81:3b:8e:c1:fa:04:4a:6b:c4:76:50:a3:
                    44:2d:b8:12:cb:59:13:cc:21:c2:12:ac:6d:a2:60:
                    2d:ba:ac:36:2f:bd:bb:9f:01:a2:e9:c3:9b:7d:f4:
                    80:a1:cc:3b:86:2d:0d:c7:43:0b:32:a7:b6:0a:74:
                    e6:0b:4c:f1:f7:d2:51:cf:d8:5c:3c:61:83:41:b8:
                    99:fe:13:ae:c6:88:f8:9c:69:70:7f:a1:24:0a:db:
                    9c:e4:2c:ba:4f:c7:a7:79:30:d3:c6:28:c7:06:e2:
                    ad:f2:97:c0:5b:5d:07:85:f6:40:e7:13:56:ee:5c:
                    e0:94:9e:07:62:4c:3d:9c:b6:a6:9b:6e:9d:23:25:
                    a6:fe:5e:d8:77:ae:3e:88:dd:19:39:2a:c2:c6:3e:
                    d1:29:87:12:36:77:f0:9e:c1:83:f3:63:38:bf:72:
                    9c:21:18:5f:3a:7e:ec:51:0a:24:cf:20:a2:da:3e:
                    d8:84:5f:74:1f:1f:12:6b:bd:8e:dd:75:bc:74:cd:
                    30:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:6E:48:4C:B4:66:70:4C:CB:72:64:F1:84:91:70:E0:5F:8F:C6:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d651c66-0213-34cf-8203-f8b2472827e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.110.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:2c:da:0b:d5:c9:98:71:3c:05:0b:03:a4:fb:1e:ac:e7:60:
         65:33:d9:e3:22:0a:08:71:45:45:50:b0:3f:bd:d4:97:46:1b:
         62:af:0c:d1:03:1a:49:ba:a2:d0:69:8b:9e:95:b7:b4:ed:72:
         2e:b5:88:13:4b:e9:32:6c:75:14:97:19:13:ed:1a:86:12:e2:
         b6:5a:1e:38:78:d9:9a:ac:cf:e9:67:28:5c:76:c1:4e:d5:82:
         3d:ac:56:52:af:d6:d1:19:57:47:4b:e3:c4:19:12:c4:73:db:
         24:08:31:1f:84:9e:68:6c:6d:86:38:a1:81:07:97:ce:35:6a:
         0c:0f:46:28:ec:ea:b9:ca:a0:b0:2c:b9:ba:27:0f:ea:e4:a4:
         9a:c6:d5:9c:52:57:71:29:8e:e3:95:72:9a:bb:60:f5:10:70:
         7b:b4:ca:ad:46:a4:8f:7f:bb:42:92:d2:2e:d4:82:e7:be:b9:
         c9:32:18:66:59:55:09:30:4d:54:02:08:52:a8:fd:e4:eb:c7:
         10:b6:5d:4a:a7:bf:c8:36:c2:85:03:be:73:86:59:fa:52:d3:
         2c:a3:f5:c7:45:4e:b5:de:4c:d4:dc:6b:8c:23:ae:4e:d1:b0:
         ee:84:67:7a:54:ab:80:11:0e:65:e0:eb:49:54:2f:61:fd:c2:
         a1:cc:10:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:06:05 2025 by rpki-client