Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/552441fa-e8b3-3821-830b-98e87faef766.roa
File:                     552441fa-e8b3-3821-830b-98e87faef766.roa (raw, json)
Hash identifier:          +jz+8MmF8Hf5e/Eu+ceIUL4wNXdXp/dZX4p2MUiGaYk=
Subject key identifier:   3C:95:6E:6D:23:6D:2C:AE:F0:FF:C6:0C:3A:EF:7E:AF:C7:6B:34:E5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C7E4C75AAED0C391691BFDB80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/552441fa-e8b3-3821-830b-98e87faef766.roa
Signing time:             Wed 05 Jan 2022 05:00:00 +0000
ROA not before:           Wed 05 Jan 2022 05:00:00 +0000
ROA not after:            Wed 09 Feb 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        40.172.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:7e:4c:75:aa:ed:0c:39:16:91:bf:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan  5 05:00:00 2022 GMT
            Not After : Feb  9 05:00:00 2022 GMT
        Subject: CN=b972d0d6-359d-422b-bb83-43ac4686ac78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e0:ed:38:d5:49:15:b5:41:ea:f1:ca:9e:04:
                    22:f3:28:14:e4:ae:c6:aa:8b:54:3f:b1:3c:49:2c:
                    a3:dd:4f:d2:a4:c9:ce:c6:52:e6:90:64:4f:21:11:
                    43:22:02:5f:9f:4e:54:bf:d4:4a:eb:2e:61:42:98:
                    ad:33:79:6e:83:24:aa:25:53:87:6a:ea:d0:f3:b7:
                    3b:d5:29:ba:e1:0e:7c:e7:fa:77:cc:65:cc:0e:a0:
                    34:d1:29:3b:15:50:a4:5a:3d:9e:8e:84:7a:89:75:
                    73:e6:81:a2:11:09:cf:80:f5:d1:c1:7c:f0:1b:b1:
                    ef:37:c1:db:80:c6:b6:d1:8d:b1:8b:ec:42:c0:3f:
                    76:95:39:b3:2e:07:a4:d7:44:4a:ed:46:30:9f:3e:
                    71:ef:b1:0a:ee:69:81:24:98:8e:5a:d9:12:92:0d:
                    21:fd:6c:b2:e9:12:f6:b0:f1:cc:a7:a6:e4:f0:ef:
                    db:c1:02:82:14:03:86:20:89:1f:70:e5:b3:10:81:
                    b3:19:7e:61:2c:d6:d2:a0:6a:ff:89:ed:fa:cc:5f:
                    50:6b:99:37:06:fe:37:45:21:c0:58:d5:30:e1:76:
                    84:e3:c4:89:44:fa:dd:12:b5:ac:0f:7d:1b:49:2f:
                    37:46:ea:1c:91:74:f6:c9:fb:3b:04:7f:91:ce:ec:
                    a6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:95:6E:6D:23:6D:2C:AE:F0:FF:C6:0C:3A:EF:7E:AF:C7:6B:34:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/552441fa-e8b3-3821-830b-98e87faef766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.172.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:7f:6e:37:80:d7:04:02:e0:16:cb:ea:04:e7:7d:b7:19:98:
         18:9f:6b:29:d5:26:da:30:9f:f9:14:ec:a0:5d:7f:a7:28:33:
         e2:44:d5:64:2f:e6:9d:2a:ca:f9:39:dc:97:62:21:59:60:99:
         37:1a:0c:83:06:98:a7:bf:0a:a3:94:af:4d:2c:6f:4a:46:c1:
         a9:13:84:04:9a:df:e4:6a:5f:cf:07:ef:02:cb:e9:f3:47:af:
         3b:24:2e:f4:d6:7b:55:64:75:e6:f7:c9:d9:4e:8c:16:f8:07:
         0d:f8:e9:26:ab:3e:d3:cc:42:54:96:18:e7:57:6b:a6:aa:8a:
         8f:d9:31:44:34:41:bd:7f:d2:d0:6e:8e:ce:fa:76:75:b4:c9:
         d5:2a:08:84:45:e6:5b:36:da:f5:76:01:4c:bf:68:35:9a:ab:
         52:5f:cd:69:94:89:b8:ed:a2:f9:1e:05:c9:50:7c:db:e1:7e:
         9e:9f:40:bf:e3:e2:8a:b2:5f:62:54:bf:90:a3:b6:33:f0:b5:
         fe:89:e0:a6:00:7d:0f:c3:57:36:29:eb:2b:d7:7a:f8:15:1d:
         68:cf:c1:ce:42:b5:37:a8:fb:cc:f8:14:21:da:ff:17:d1:72:
         d6:90:6c:c1:7d:46:5c:bd:a0:ce:61:60:74:d7:9d:79:4b:f1:
         b7:42:62:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 18:49:40 2025 by rpki-client