Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/53f39702-96b3-38db-b0b5-69d8b25548bb.roa
File:                     53f39702-96b3-38db-b0b5-69d8b25548bb.roa (raw, json)
Hash identifier:          wKC9eDrEVM5REFVj3wwuhs2vUqULjLQ5TnWMWqE+CJE=
Subject key identifier:   95:CE:F4:58:88:D6:B4:20:69:FD:5F:38:EA:BE:15:88:BA:F3:B3:3B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584029E4958F170586DCDCD4A589
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/53f39702-96b3-38db-b0b5-69d8b25548bb.roa
Signing time:             Wed 07 Dec 2022 12:00:00 +0000
ROA not before:           Wed 07 Dec 2022 12:00:00 +0000
ROA not after:            Thu 12 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        128.11.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:29:e4:95:8f:17:05:86:dc:dc:d4:a5:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  7 12:00:00 2022 GMT
            Not After : Jan 12 05:00:00 2023 GMT
        Subject: CN=cfeceaba-b9d8-49c0-b47f-5f6ef727f3d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:58:c6:c5:60:35:e7:41:43:e3:ff:8a:c3:ba:
                    ed:9f:06:37:11:88:b5:5b:78:2d:8f:c6:48:64:65:
                    a2:52:e4:63:5e:b2:a8:1e:d4:78:f4:4a:73:a1:53:
                    17:8d:4d:91:04:45:49:4a:1f:47:fd:42:57:16:06:
                    30:57:ee:af:0a:5f:d5:50:e3:3b:4f:c7:e5:1a:7c:
                    83:92:d8:2c:2f:c3:1b:78:3b:b7:16:a7:4d:4a:37:
                    7a:83:38:a0:93:0e:59:04:56:13:44:4f:29:b1:c4:
                    2c:05:ec:3c:96:d1:82:fa:65:a1:c2:41:34:8b:1f:
                    d8:c0:ec:74:0f:07:f1:5d:62:1e:9d:93:93:fc:5d:
                    82:d3:6e:1e:cc:54:e5:e7:42:f7:37:7b:bb:60:27:
                    1f:c8:24:b1:a0:b5:66:87:27:67:6c:67:d4:3f:9a:
                    37:a9:f2:ff:08:64:ea:94:9c:47:49:e5:b6:50:f9:
                    6d:69:88:89:90:38:9a:1e:d6:f5:a9:ba:55:66:fd:
                    ca:c4:e1:37:f7:59:83:2b:95:af:99:69:88:e0:4a:
                    57:a5:e8:c2:a8:df:bc:b3:fe:6b:73:54:4a:e2:d8:
                    24:9f:24:63:b2:9d:46:ab:ff:58:60:d4:bf:dd:83:
                    8b:49:b0:6d:74:e9:90:11:f9:dc:05:49:0a:c1:03:
                    25:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CE:F4:58:88:D6:B4:20:69:FD:5F:38:EA:BE:15:88:BA:F3:B3:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/53f39702-96b3-38db-b0b5-69d8b25548bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.11.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:9f:42:34:bf:ad:92:51:b7:75:27:c6:c7:50:07:2f:f4:be:
         7b:bf:c8:77:ef:b7:0e:8f:ff:2b:68:39:57:9b:a8:90:db:de:
         ab:66:13:26:a3:d2:07:72:bb:93:ba:9d:ea:6c:89:38:74:37:
         19:10:f4:a8:b0:10:34:36:64:09:51:9f:aa:4b:c2:f3:1e:7c:
         67:1b:82:df:4b:03:52:ea:fe:ab:d0:a8:eb:b6:53:bd:aa:8e:
         36:e0:cf:1d:51:a0:66:ce:4c:17:73:5a:ff:e9:b3:5f:0f:5f:
         c6:c3:14:8f:47:4d:78:36:93:a9:c7:ae:82:8f:80:01:ea:4f:
         16:21:a3:15:51:d7:4e:b5:98:e7:74:da:9e:8e:0d:8c:fa:f6:
         52:f9:c8:34:54:9c:94:5c:95:34:3b:c0:c2:4c:b6:fb:fc:ad:
         2e:55:7e:27:c1:fb:f0:c9:b2:27:69:e1:f5:25:dd:a7:46:94:
         31:40:c0:b0:d0:7a:d0:05:07:d7:0f:c4:1f:ee:f2:05:e5:f5:
         1f:69:f4:d5:02:96:6f:8c:06:89:65:9e:2a:f2:40:71:6f:2e:
         93:46:ec:7f:83:cb:e9:f3:a4:ef:d8:d1:51:d4:ad:dd:9c:74:
         fb:f3:81:d4:02:84:9a:bc:cd:58:e4:3f:0c:69:6b:27:4f:da:
         1a:f6:4b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:12 2025 by rpki-client