Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ebcbab2-b427-33ad-943d-c11223f88a10.roa
File:                     4ebcbab2-b427-33ad-943d-c11223f88a10.roa (raw, json)
Hash identifier:          onbVIxC6zxc/QJRr+RKJN7zjlpbMD6d89h8Y2ejz4JI=
Subject key identifier:   CA:5E:DD:00:9D:CB:CE:56:F5:18:CB:FA:B4:29:75:79:BE:80:CF:20
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F3F62F0021D151B7A51C008C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ebcbab2-b427-33ad-943d-c11223f88a10.roa
Signing time:             Wed 14 Sep 2022 12:00:00 +0000
ROA not before:           Wed 14 Sep 2022 12:00:00 +0000
ROA not after:            Thu 20 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        128.212.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:3f:62:f0:02:1d:15:1b:7a:51:c0:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 14 12:00:00 2022 GMT
            Not After : Oct 20 04:00:00 2022 GMT
        Subject: CN=aa57a8e0-f21c-4961-9c3f-96ce61c59c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ba:93:cb:b4:74:e7:8e:62:5c:e3:93:bd:c3:
                    e2:85:13:d4:20:22:e9:8a:0b:e2:cc:be:28:a7:12:
                    59:6a:ee:c0:e1:8e:59:1c:85:45:ae:e7:89:e1:fa:
                    e5:48:43:2d:38:47:55:78:d2:8d:17:6b:2b:4c:d8:
                    21:91:57:b8:3e:57:07:68:49:99:f9:d2:e2:a7:3e:
                    a6:74:ae:62:6d:21:0b:2d:94:f5:11:12:3f:2b:04:
                    2f:f0:6b:e7:8b:2a:e5:13:6b:e4:65:86:f8:be:a2:
                    c4:d9:e2:46:56:93:97:0d:ca:7d:47:c9:e6:9a:33:
                    7e:a1:d9:95:f7:42:82:90:a3:a2:b6:a0:f1:09:d2:
                    95:a0:63:31:74:70:1c:d0:62:ad:05:68:d8:87:73:
                    26:61:6b:b5:ff:95:a9:dd:ce:79:60:40:9d:69:ed:
                    ae:62:65:08:5b:30:d1:6f:6e:54:ce:a9:1e:ff:0a:
                    0b:91:29:99:c3:cc:0c:5d:20:9e:49:27:5b:e3:c6:
                    31:be:fc:d3:9d:ea:8e:64:be:ae:1c:6d:8b:b3:48:
                    b1:8c:8e:18:68:9d:6e:82:ef:a1:f1:f7:98:4e:d9:
                    33:23:48:17:7f:78:f8:9c:40:28:d8:38:c8:b7:3a:
                    ec:48:57:6d:c3:7d:f8:72:e9:21:e1:c1:12:5b:22:
                    21:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:5E:DD:00:9D:CB:CE:56:F5:18:CB:FA:B4:29:75:79:BE:80:CF:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ebcbab2-b427-33ad-943d-c11223f88a10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.212.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c1:5c:d5:68:09:42:75:89:9e:86:ae:82:96:14:12:72:6c:
         f6:67:bc:b2:1b:a6:95:57:0f:d6:ef:bc:d6:76:3b:28:37:5b:
         1b:40:02:4a:8b:93:be:5f:d5:dd:ff:2f:d2:70:a8:fd:60:15:
         8f:d1:8f:96:06:6c:ef:d6:3a:4f:45:6b:8c:2e:0d:7b:01:2f:
         12:85:f3:a1:d2:56:53:58:c4:b7:e9:fe:53:4e:06:33:d8:65:
         90:5b:66:4e:dd:1c:2f:09:b7:aa:88:ec:07:89:13:83:57:b1:
         4e:07:10:80:ab:b2:d9:cf:0f:e8:16:ab:1c:95:18:a5:2e:7b:
         ab:1c:af:8b:df:ed:a0:f5:c0:2a:04:97:21:71:7c:c9:49:66:
         5a:6b:ad:0a:0e:bb:34:51:e1:93:64:f5:7f:fe:aa:c1:35:a0:
         7e:f1:4d:37:36:74:f1:63:1d:54:bd:48:57:bc:c4:f3:a8:2e:
         ad:58:4d:f4:e3:a4:4e:e3:f9:04:a7:b4:30:59:44:f4:ac:94:
         6d:ea:ff:c1:d8:d3:b0:89:2d:f1:f3:98:a1:96:d6:c8:4f:b3:
         79:aa:2f:ef:d3:e7:96:81:07:e0:bb:30:7e:5f:d5:22:d7:96:
         4c:32:e5:03:b0:d3:69:19:55:01:50:3a:ae:28:22:44:78:a3:
         d7:dd:53:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:18 2025 by rpki-client