Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5a2ae789-77fd-308a-836e-6401a0b48d6c.roa
File:                     5a2ae789-77fd-308a-836e-6401a0b48d6c.roa (raw, json)
Hash identifier:          yosMud9qilQAlPSBd61guQ8eE/PUPi1sOGGuWIE2voc=
Subject key identifier:   0F:A6:05:5E:95:22:C4:A0:72:C9:38:EC:31:64:34:39:8B:6D:0E:A1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E0066CA10BD4E1BAA8C1CBB40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5a2ae789-77fd-308a-836e-6401a0b48d6c.roa
Signing time:             Sun 22 May 2022 12:00:00 +0000
ROA not before:           Sun 22 May 2022 12:00:00 +0000
ROA not after:            Mon 27 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        40.176.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:00:66:ca:10:bd:4e:1b:aa:8c:1c:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 22 12:00:00 2022 GMT
            Not After : Jun 27 04:00:00 2022 GMT
        Subject: CN=030a9835-1560-4968-937b-2f531a82f233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:92:57:33:43:d5:8a:aa:80:63:42:e3:24:9c:
                    73:10:8f:6c:64:42:24:21:0b:d2:32:f9:91:8f:be:
                    ef:6b:ed:01:61:19:45:97:af:d5:c5:c7:8a:46:9c:
                    40:88:04:15:8b:4d:1a:ff:97:8c:c1:6f:4e:7f:6d:
                    7e:5c:70:d9:ab:e6:dc:a4:fb:0a:b1:5d:02:bb:b1:
                    3f:ed:99:14:44:88:09:f7:07:f5:dd:4b:a4:23:0d:
                    6b:f4:ab:84:30:32:b1:ae:6f:73:3b:84:e0:80:a8:
                    fc:3e:2b:04:92:95:eb:45:ad:5d:61:d3:8f:00:6d:
                    7a:6a:47:bd:31:08:be:5f:8f:3d:fb:9f:fb:ea:80:
                    f2:9e:f0:73:6a:23:4d:5c:10:8f:f8:38:db:a4:34:
                    82:28:e8:57:31:2f:18:23:77:5c:3a:66:33:90:b7:
                    a9:a7:9d:55:a2:47:a6:8d:3a:18:0f:22:c4:bc:fc:
                    a3:1b:78:f4:2f:3f:34:88:b1:17:ed:67:40:d3:4f:
                    0b:8d:9e:00:25:ff:a9:86:68:67:50:f7:38:2c:0d:
                    6d:65:e4:2c:1a:dd:7f:cb:26:eb:ba:ab:df:5f:c4:
                    2d:0b:76:1b:0c:41:18:6a:51:aa:4d:77:6a:62:5d:
                    35:be:b3:d1:85:27:43:b9:0f:47:54:c2:0d:45:66:
                    23:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A6:05:5E:95:22:C4:A0:72:C9:38:EC:31:64:34:39:8B:6D:0E:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5a2ae789-77fd-308a-836e-6401a0b48d6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.176.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:d2:5d:c1:58:42:0b:e3:18:2b:4a:b6:fc:2b:f3:58:93:c4:
         96:96:66:5b:54:48:d8:10:4b:0f:df:fd:12:b2:19:98:f9:b0:
         40:d7:23:dc:af:d1:10:9c:39:c8:8c:e0:ce:e5:4c:95:88:ae:
         09:9b:6d:4c:91:18:9a:93:90:ca:2b:a0:d3:1f:a5:70:ba:0c:
         18:32:a9:40:9a:78:e8:89:79:07:b5:b8:62:04:98:76:70:c8:
         a3:92:0c:9f:14:85:85:46:9a:eb:98:54:72:27:ba:0f:fc:85:
         b2:e7:95:38:c5:a7:d1:7c:a2:12:a8:5f:94:71:35:d0:bd:d2:
         91:07:f9:a1:38:f5:48:06:3c:f4:24:a5:e8:9b:d4:88:68:39:
         2b:00:bd:99:84:cb:a6:8f:45:a8:27:06:44:a7:0a:49:00:bd:
         d8:45:fd:1c:66:68:4d:c5:ff:0d:f9:5c:9c:1e:71:d4:6d:af:
         7b:dd:e7:46:a6:70:7c:b7:48:9e:85:94:34:b5:6f:6e:3d:04:
         60:ad:32:a1:25:dd:d2:d7:9a:67:15:89:ac:84:9b:0b:44:4d:
         fd:0d:97:d5:a5:27:7f:2f:98:7e:fd:f6:ad:4c:e5:36:73:f5:
         b7:87:66:e8:69:74:02:20:f5:c8:00:b4:2b:94:54:9b:aa:55:
         1c:22:cd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:48 2025 by rpki-client