Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5d21ecbf-b460-3ed6-943d-a8b80df4744b.roa
File:                     5d21ecbf-b460-3ed6-943d-a8b80df4744b.roa (raw, json)
Hash identifier:          gApmwoZkmYb3E9fwP6fjSfgqC+bBs52mDRHhsJapQAc=
Subject key identifier:   71:FC:0D:47:37:0C:9E:F5:AB:AF:AD:FB:AA:CC:38:5D:62:81:FA:8E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DCFC00E2EB37B19742BC29B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5d21ecbf-b460-3ed6-943d-a8b80df4744b.roa
Signing time:             Thu 05 May 2022 12:00:00 +0000
ROA not before:           Thu 05 May 2022 12:00:00 +0000
ROA not after:            Fri 10 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        130.80.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cf:c0:0e:2e:b3:7b:19:74:2b:c2:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  5 12:00:00 2022 GMT
            Not After : Jun 10 04:00:00 2022 GMT
        Subject: CN=f0ac50f7-bf52-4c49-8d17-18b284c8555a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f1:a5:13:8d:2a:c0:d7:63:52:15:95:b2:e8:
                    55:1a:b9:24:49:9b:43:f4:cb:06:29:d1:f4:da:a2:
                    e1:28:84:ec:a2:aa:51:82:60:36:d8:93:bf:eb:44:
                    c8:e6:ca:29:e8:83:34:5a:e0:fc:11:7b:f7:bb:5b:
                    fa:bf:88:e6:c0:17:a4:9f:77:b2:ea:ef:4e:66:84:
                    71:04:87:96:c0:48:e4:e6:d6:12:b9:53:c9:97:ae:
                    3e:84:0e:35:2f:dd:93:1c:70:f1:0b:68:90:98:6b:
                    d3:81:dc:07:f1:dc:bc:5f:a1:66:c3:5c:af:35:1a:
                    14:8c:9f:d8:30:ba:90:a0:b1:7e:5d:da:39:fb:c7:
                    bf:26:cf:36:f2:85:e5:a6:39:43:08:31:65:62:91:
                    5e:da:b4:d6:e1:91:d7:f8:ce:9f:fa:77:e9:fc:f3:
                    c5:27:42:3c:ce:cb:b3:d8:2c:01:81:21:25:02:1e:
                    8b:82:4b:73:06:53:2f:f2:67:c3:3a:86:d0:f1:79:
                    75:c1:12:b4:a2:d8:79:90:b9:6f:2e:eb:f6:bf:11:
                    3a:2e:f4:1e:b2:63:9d:84:ce:ea:a9:f9:fd:99:c3:
                    b2:44:3c:1b:90:ea:48:8a:81:87:1d:a9:35:32:07:
                    9f:78:9c:46:8f:9d:ad:c1:9c:02:9d:e2:57:e2:f7:
                    9d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FC:0D:47:37:0C:9E:F5:AB:AF:AD:FB:AA:CC:38:5D:62:81:FA:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5d21ecbf-b460-3ed6-943d-a8b80df4744b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.80.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:a8:52:50:b7:8d:0f:03:7c:8c:c4:19:c5:13:e6:16:c5:d5:
         fd:6a:a0:b7:91:7b:32:5f:41:e2:0a:31:9b:f7:53:13:32:19:
         be:a5:6c:6d:b9:5e:91:3f:65:10:11:25:5b:d4:ed:66:cd:8f:
         12:ad:f8:4b:e2:a9:db:1d:81:cb:ce:8d:bb:b7:4e:b1:cc:0c:
         e1:7f:d3:47:ad:ec:85:1c:29:8f:b4:dd:da:fb:06:d5:cf:d7:
         ca:f3:7c:e9:9c:79:0f:ad:92:76:4d:23:35:f7:9b:32:6f:5d:
         e6:1a:42:d7:70:ca:38:24:7b:cc:b5:ff:4e:93:4d:67:54:70:
         ec:dd:12:17:69:67:88:7f:98:0f:81:9c:00:04:60:d2:e1:9f:
         be:c9:95:6b:81:e0:7c:d7:2a:a0:75:2a:79:ad:d6:77:31:af:
         63:40:ba:2d:50:ed:29:e5:97:9a:61:1a:2c:cb:fa:ff:63:7b:
         22:6c:b0:d1:c1:1b:bc:ee:13:f8:6b:37:d1:c5:6a:9e:49:e7:
         68:96:98:8c:54:79:0b:00:d3:04:7f:ef:90:17:04:21:95:35:
         21:08:be:ed:0e:9b:62:93:91:0d:de:f0:8c:09:9c:f6:80:62:
         49:0e:44:10:67:fe:6e:58:87:fb:50:ba:d6:b6:7d:05:43:80:
         6b:af:a7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:58 2025 by rpki-client