Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ee3395e-612c-3ed7-be8d-da29f5dd0e82.roa
File:                     4ee3395e-612c-3ed7-be8d-da29f5dd0e82.roa (raw, json)
Hash identifier:          uVymxv7sEdO1hva/CQWsUYdL3WD7WyKQ1WVGg6Qxwzo=
Subject key identifier:   C9:F1:EE:DF:1E:51:4C:B6:C3:D7:00:95:8E:40:EF:08:E5:E5:6F:49
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858401C39B3D7DA698252DE49FD40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ee3395e-612c-3ed7-be8d-da29f5dd0e82.roa
Signing time:             Fri 02 Dec 2022 12:00:00 +0000
ROA not before:           Fri 02 Dec 2022 12:00:00 +0000
ROA not after:            Sat 07 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        170.68.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1c:39:b3:d7:da:69:82:52:de:49:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  2 12:00:00 2022 GMT
            Not After : Jan  7 05:00:00 2023 GMT
        Subject: CN=1527fed4-5202-450d-b936-d7d1e8a1b922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3d:12:28:d7:d2:e8:49:40:6d:8a:48:94:00:
                    a9:ef:f2:a2:49:81:43:0f:13:b2:fa:bc:67:57:c5:
                    ca:f9:a8:77:e0:59:4c:f3:2c:f4:b5:05:da:b6:ed:
                    c3:c1:c7:75:fb:35:31:1c:65:16:c9:53:80:f6:04:
                    ce:2a:db:02:2c:ca:2f:0d:a2:24:c9:84:07:f1:c1:
                    a5:9d:7f:2e:ec:8b:9c:a2:41:9e:ee:26:bd:1e:a6:
                    20:19:cc:bc:68:9d:86:03:a3:c6:38:fa:46:1d:ae:
                    d1:93:e5:27:63:ee:5e:1b:1c:23:d8:fb:f1:0e:99:
                    4c:4a:88:e5:d0:3f:e5:7a:88:23:f5:c8:4b:95:00:
                    db:08:f8:64:24:ba:fb:df:28:64:4d:82:05:94:d6:
                    22:38:27:05:cb:14:f3:56:c0:e4:0e:39:b3:9f:b5:
                    d1:ce:e5:ad:c0:94:ce:42:88:60:39:4d:09:5d:a1:
                    4e:16:30:58:ac:ed:38:86:7a:f2:29:c1:c5:af:c3:
                    e3:2b:66:82:26:75:a2:1d:33:9f:40:d5:1a:2e:24:
                    42:25:63:49:05:00:51:9a:48:86:02:e9:08:ea:fc:
                    e7:cc:ab:91:25:59:26:99:93:43:27:43:f4:62:25:
                    62:32:85:38:e6:72:b9:6e:64:a9:63:2e:8b:b7:d5:
                    e2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F1:EE:DF:1E:51:4C:B6:C3:D7:00:95:8E:40:EF:08:E5:E5:6F:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ee3395e-612c-3ed7-be8d-da29f5dd0e82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.68.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:c8:0e:5c:10:11:c0:55:e0:c4:d9:65:ea:b6:8b:ae:be:85:
         0e:b2:3c:5a:9a:f4:5e:87:06:13:4e:c5:76:32:c2:56:10:19:
         f9:be:3d:d4:f0:8b:69:cf:47:a8:b5:2a:47:43:ea:66:36:69:
         f3:1a:d9:18:7b:19:49:06:e4:bf:07:10:d3:f4:21:1d:86:95:
         9f:62:bd:4b:fc:18:9d:8f:1b:57:d2:c4:54:92:48:df:f9:b4:
         d2:6e:45:ff:5b:b9:01:9b:87:d5:a4:18:c2:4a:1f:f5:8f:ea:
         8b:49:ca:ba:7b:68:f1:b5:a7:40:b3:25:35:aa:12:53:43:75:
         eb:48:a5:ba:95:53:88:04:6d:88:37:4d:be:60:8a:39:22:a5:
         d3:74:e0:b3:d3:50:28:cd:68:da:19:1d:c9:3a:82:9d:b9:15:
         1f:8b:48:3a:c9:36:4c:5b:b2:17:f6:e1:46:69:70:98:da:5e:
         31:5d:72:38:30:4e:4f:7d:32:43:21:94:3a:0f:d6:74:54:53:
         0f:65:14:91:f7:00:93:be:2c:73:0a:f4:34:03:02:d7:e1:ed:
         78:2d:1a:64:9c:f1:98:f4:5c:3d:30:01:7e:e1:3d:ad:93:c3:
         1b:43:f9:e5:10:ec:fb:d1:13:4a:8a:f0:24:5a:dd:41:7e:c0:
         d9:e7:f6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:07 2025 by rpki-client