Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/556f2a66-b048-363d-9c9a-5c40f56f4b02.roa
File:                     556f2a66-b048-363d-9c9a-5c40f56f4b02.roa (raw, json)
Hash identifier:          DMoY+iIxtzI+fPObtcPGQrJ8tgRphZetGvy6UD1KASE=
Subject key identifier:   EE:C5:A9:F6:C2:0B:38:DB:B2:F7:F8:90:AF:66:7F:3D:50:42:7F:A3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FE9AEF7870297AA3940056498
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/556f2a66-b048-363d-9c9a-5c40f56f4b02.roa
Signing time:             Mon 14 Nov 2022 12:00:00 +0000
ROA not before:           Mon 14 Nov 2022 12:00:00 +0000
ROA not after:            Tue 20 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        130.186.32.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:e9:ae:f7:87:02:97:aa:39:40:05:64:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 14 12:00:00 2022 GMT
            Not After : Dec 20 05:00:00 2022 GMT
        Subject: CN=e772eb86-c7e4-483a-8c36-eeb1e950145a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:15:90:d8:5f:1f:dd:62:52:d0:4a:a1:3e:4b:
                    da:7f:7e:44:e4:7d:fe:77:cb:e4:04:fd:13:8c:00:
                    3f:c5:06:c3:e3:06:b5:12:10:76:8d:0c:22:7e:d1:
                    f1:ba:96:41:de:51:c6:28:9d:d6:cf:ed:93:ec:7b:
                    de:ac:d4:fe:b4:14:63:86:0c:ff:8a:46:c2:15:bf:
                    46:eb:1e:ed:9a:63:97:ea:19:db:be:61:bc:33:1c:
                    4c:4d:d4:44:37:e3:6a:57:d9:06:56:82:ae:e2:62:
                    71:4f:1b:d8:87:a8:c9:7b:e5:7d:63:cb:30:59:8c:
                    46:6f:f2:70:95:61:04:e9:38:e6:5b:c4:21:8a:e4:
                    61:56:86:36:fb:b4:54:c7:f4:2d:04:2b:8b:86:29:
                    5f:13:a8:55:8f:31:1c:ef:27:0e:18:ff:ea:15:7c:
                    91:f1:07:04:04:af:b0:dc:95:61:3f:1d:fa:0e:4d:
                    ba:83:5e:91:39:ae:60:f9:20:9c:69:67:71:b8:84:
                    98:74:4f:f8:b7:69:72:9d:fa:49:27:83:03:ab:f3:
                    89:0b:54:ac:92:8d:ea:3a:6a:9e:51:fa:1e:49:5d:
                    b7:d9:f7:74:f2:93:d2:f3:33:78:62:ae:c0:86:9b:
                    48:b9:13:7b:3b:e0:fe:4b:48:18:19:27:08:c9:89:
                    3b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C5:A9:F6:C2:0B:38:DB:B2:F7:F8:90:AF:66:7F:3D:50:42:7F:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/556f2a66-b048-363d-9c9a-5c40f56f4b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.186.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:1d:14:c1:c9:f3:33:1c:23:06:0d:0b:ae:f0:7a:31:30:df:
         04:d6:4e:b3:38:52:75:b7:58:26:26:6c:5a:03:48:22:e3:d5:
         61:cc:d2:29:56:5b:18:2b:bb:aa:3a:e7:39:ba:ef:ba:9e:ca:
         5c:ea:91:10:05:5e:91:13:21:fa:52:7a:3b:95:99:f7:9d:70:
         c8:cd:f6:3a:6c:cb:d2:63:e4:06:7c:cc:97:16:b7:e8:66:a9:
         b7:00:2d:8a:63:f3:05:87:12:ce:66:fb:4a:92:81:ca:3d:9e:
         8b:1b:14:06:d7:8a:f1:ed:30:cd:0a:fb:42:15:eb:37:51:71:
         fd:49:42:9b:20:57:31:a6:5c:09:a7:e0:1c:1b:43:37:a4:d7:
         8c:f6:1c:ac:bd:79:6f:1e:26:fa:2c:7d:6d:36:d9:7b:6f:6c:
         02:59:08:ed:f8:14:db:07:92:6f:04:6d:04:0d:01:84:13:5e:
         63:ab:47:dc:01:e7:3e:9e:9a:41:fb:0f:61:2d:2b:19:09:9e:
         d5:18:68:48:11:6a:08:92:7f:8d:e6:5d:fc:ac:3d:c7:66:75:
         84:f7:72:90:75:6b:d7:5c:bc:8b:1b:a7:1b:e1:bc:db:53:dd:
         b0:f8:7b:62:5a:36:10:52:91:31:24:82:f2:82:36:4e:b3:b9:
         a3:59:24:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:21 2025 by rpki-client