Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/55671a32-5367-32aa-9e52-1711e91729ff.roa
File:                     55671a32-5367-32aa-9e52-1711e91729ff.roa (raw, json)
Hash identifier:          6myUzGMb1Ep1qe0t1mo0EEXxqAt7D56srHJbHcf7ivY=
Subject key identifier:   C2:10:D2:13:68:76:84:3D:A4:09:11:3A:B9:98:33:43:CF:72:B5:AF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E4EA104EE6CA32B190E7DEC40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/55671a32-5367-32aa-9e52-1711e91729ff.roa
Signing time:             Mon 20 Jun 2022 12:00:00 +0000
ROA not before:           Mon 20 Jun 2022 12:00:00 +0000
ROA not after:            Tue 26 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        40.176.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:4e:a1:04:ee:6c:a3:2b:19:0e:7d:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 20 12:00:00 2022 GMT
            Not After : Jul 26 04:00:00 2022 GMT
        Subject: CN=09b04667-0983-4039-bcaf-c8bbb3f7c6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:40:36:9a:4c:f1:0e:1a:2a:ac:91:15:d0:d2:
                    6e:d3:b5:12:4b:2f:7e:ba:44:3d:5e:9e:4a:78:9f:
                    be:52:18:3e:d7:e5:18:2a:79:a8:c7:95:57:6c:ea:
                    db:40:5f:75:4f:2f:0e:c0:2b:81:ce:47:be:85:b1:
                    a5:d9:a5:7e:29:bd:5c:33:69:20:17:b3:ec:c3:52:
                    51:1e:47:2f:ae:bb:9f:bb:91:92:fc:05:89:bd:d4:
                    3f:15:38:94:d4:77:58:b5:d1:24:38:f6:9d:ef:ac:
                    dc:25:c7:80:b3:76:6c:bf:45:d9:6c:55:c2:e5:5e:
                    59:a4:c8:93:95:9d:1c:3c:f9:e4:13:c2:70:e0:a8:
                    ca:26:0c:99:cb:62:ab:15:d3:1f:f8:2a:f6:7d:0f:
                    e2:e5:b6:06:54:da:f4:d4:89:e8:b2:c4:19:be:73:
                    e9:15:e4:ae:73:68:37:fd:cd:5e:9d:da:c4:b8:cb:
                    4b:ad:16:52:44:de:01:f9:09:61:04:3b:0c:00:57:
                    02:07:5b:24:10:53:d2:52:8c:42:35:ee:02:62:3a:
                    e3:d8:ea:2e:b3:43:06:d5:2a:8e:74:83:39:c2:d8:
                    09:f7:aa:29:5c:b2:8e:96:0c:68:32:91:43:12:88:
                    0e:32:34:21:57:aa:19:c9:36:64:63:5e:aa:ad:bd:
                    42:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:10:D2:13:68:76:84:3D:A4:09:11:3A:B9:98:33:43:CF:72:B5:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/55671a32-5367-32aa-9e52-1711e91729ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.176.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:fc:67:ea:71:e3:94:72:68:b0:47:3b:82:90:92:5a:87:2c:
         dd:47:17:c7:02:11:8a:08:86:da:e6:75:75:f7:e1:16:11:3a:
         aa:7f:d7:f2:d8:08:95:d6:71:b3:09:d5:52:89:af:f2:32:8c:
         91:86:cf:73:fb:c0:ee:59:0c:51:19:29:2d:65:96:bd:b9:7f:
         a3:48:d8:58:63:cb:42:05:ac:63:72:b9:81:b0:04:11:77:69:
         0c:84:ef:0d:17:db:ac:d9:fa:21:f9:18:b9:66:d0:4b:75:26:
         6e:d8:c8:c6:7b:2b:98:87:d6:b3:7d:fd:87:90:41:55:bd:1c:
         9c:d0:42:f0:b5:29:cc:13:4b:05:8d:9e:d3:3f:db:e6:83:4b:
         2e:8c:c1:f7:bb:b4:77:fe:e1:f7:d3:75:87:6a:c3:17:84:f0:
         06:dd:db:06:50:87:47:fc:9a:28:98:bc:9c:56:0f:70:09:1d:
         43:82:b7:b7:5b:f9:d6:3f:ff:58:4a:07:59:49:35:f3:73:8f:
         16:e5:2d:a8:7a:36:1c:f4:07:20:68:86:b1:c2:46:4a:ac:29:
         89:6a:fd:da:88:a7:d3:b5:cc:a0:6e:68:e7:17:06:88:80:88:
         97:ed:43:6d:c2:8b:44:93:ae:25:80:e5:4f:6a:9b:f1:58:e1:
         4c:35:4c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:59 2025 by rpki-client