Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5daeff8b-7416-329e-b71c-df7a2a286abe.roa
File:                     5daeff8b-7416-329e-b71c-df7a2a286abe.roa (raw, json)
Hash identifier:          wbfoSJaks2G1dELk2kr4tvsv4gg849HOc3xNLEgho+4=
Subject key identifier:   4B:57:D8:BE:1A:B8:69:A3:7E:A2:8F:83:43:EB:EE:E7:5C:28:B9:56
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F9B74DB8223A78A94A9C3BA40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5daeff8b-7416-329e-b71c-df7a2a286abe.roa
Signing time:             Mon 17 Oct 2022 12:00:00 +0000
ROA not before:           Mon 17 Oct 2022 12:00:00 +0000
ROA not after:            Tue 22 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        162.208.122.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:9b:74:db:82:23:a7:8a:94:a9:c3:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 17 12:00:00 2022 GMT
            Not After : Nov 22 05:00:00 2022 GMT
        Subject: CN=f6b6c799-477c-43df-8a6f-a0e698363a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2f:ce:8a:33:aa:5e:8d:0a:ae:64:a5:a7:ab:
                    74:da:03:73:c8:d5:f8:54:30:97:cd:47:20:86:ce:
                    dd:0b:51:89:11:0a:03:c0:67:aa:74:3b:0d:a4:a0:
                    01:c5:ee:30:16:05:c3:18:09:02:53:03:14:34:f5:
                    45:9d:ce:fe:d7:37:bf:cf:4f:aa:b9:f2:a2:56:e9:
                    e5:69:ef:af:bf:91:11:68:f6:79:9d:e7:1f:77:8f:
                    79:14:87:17:6e:cc:90:82:1d:15:4e:e2:ee:3d:68:
                    dd:dd:56:88:77:e0:98:cb:84:a7:f6:fd:1d:8a:3d:
                    99:0f:3b:c7:0a:19:ea:3f:e7:9c:21:07:10:b4:b6:
                    4d:f1:1a:75:d6:8b:4a:12:a1:01:f2:3e:a4:db:f7:
                    70:82:bc:8d:26:71:5f:6f:57:21:54:58:c0:96:a2:
                    9b:4b:99:54:b8:a1:e2:76:82:ff:af:1c:89:e5:ea:
                    0e:99:a8:1a:d4:39:f9:46:a4:1c:40:5e:0f:b8:cb:
                    81:be:42:16:15:70:75:4e:1b:5a:c1:00:79:e6:bb:
                    20:01:6b:0c:59:2b:94:a5:c8:6b:52:a2:61:70:28:
                    d9:46:e3:d7:9e:bd:9d:41:7a:e5:88:66:b9:ba:2d:
                    19:41:5e:55:a1:16:b4:0c:28:d9:cf:36:32:52:67:
                    49:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:57:D8:BE:1A:B8:69:A3:7E:A2:8F:83:43:EB:EE:E7:5C:28:B9:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5daeff8b-7416-329e-b71c-df7a2a286abe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:49:ab:e8:41:23:aa:33:d8:7e:61:e3:6c:0b:dd:02:af:a4:
         f3:78:69:36:0d:09:7a:8d:03:a7:9e:e1:7b:25:99:0d:9e:1d:
         8c:fc:a8:87:d6:61:61:ce:18:c8:36:84:6f:9c:5f:86:df:5b:
         d3:9d:62:49:8d:eb:56:9c:ae:17:9c:64:4b:48:85:cf:18:45:
         52:98:24:ac:47:0f:93:24:d8:d6:1e:2c:5b:a8:e1:7c:e5:a5:
         03:af:53:84:14:33:80:93:3c:11:34:25:98:44:7e:85:21:4a:
         d7:e2:7c:1b:35:e8:b0:e0:c4:3f:dd:4c:cb:27:6a:f7:5b:84:
         94:68:ca:4e:c6:70:39:2e:c0:14:25:9a:19:ea:5e:e2:1c:ec:
         1e:de:07:c4:55:8b:ec:16:79:61:85:e1:74:b2:c8:97:4e:f0:
         19:b3:22:63:cf:bf:d4:c4:08:ee:55:3c:52:ec:a6:68:1b:c1:
         2a:09:09:d6:5a:0e:6a:cd:a5:84:e8:4a:7e:3a:be:a4:04:40:
         05:3d:e4:5f:ab:5b:01:d9:1c:38:9a:34:d0:8d:ae:af:01:ba:
         06:39:a4:7c:f2:ac:d1:92:a8:fd:bd:9b:64:e9:3b:93:b3:83:
         38:8b:85:f8:90:b5:fb:28:17:d1:c8:32:79:ba:6f:b0:9b:de:
         f3:a3:65:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:35 2025 by rpki-client