Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5dba1687-6944-36f2-a782-ca23a3411ecd.roa
File:                     5dba1687-6944-36f2-a782-ca23a3411ecd.roa (raw, json)
Hash identifier:          Eag88sD7byyou0ZG1w9qwV7Ov9zaJFhc6dO+/9M41fg=
Subject key identifier:   BC:22:7D:80:7D:BE:8C:83:FB:06:92:26:17:B6:6F:B6:C8:8E:F4:EA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D5A4C0F2F58C8A709CF152B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5dba1687-6944-36f2-a782-ca23a3411ecd.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        130.171.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5a:4c:0f:2f:58:c8:a7:09:cf:15:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=b09fc714-6d09-462a-8fa4-b5206611a055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0a:d3:2b:2d:43:cd:b0:68:51:bf:0b:c5:7d:
                    5c:d3:e9:3c:1d:d8:e2:c7:a6:11:99:83:21:94:3c:
                    8a:e1:82:2c:28:75:58:9e:19:60:25:55:7c:80:3c:
                    c0:4e:15:b5:de:d9:a2:8d:7d:0c:06:e0:47:eb:69:
                    24:1e:43:1e:56:b4:f1:28:8b:dd:d4:ef:b3:bb:5a:
                    b6:13:04:a3:b1:58:1d:99:f3:48:5e:91:12:3f:6a:
                    c6:7a:86:80:32:c5:5b:2e:11:b6:7e:e7:c1:22:a2:
                    db:fa:8e:87:7c:bf:44:77:bc:fb:9d:7b:bb:3f:30:
                    c0:ae:36:dd:9b:65:f4:0c:df:6c:ac:f8:1a:a9:3d:
                    6e:97:33:45:33:b3:26:84:f3:62:91:33:b4:76:d4:
                    fa:2b:c9:19:c5:25:f2:7e:95:3a:75:21:e5:83:4a:
                    1b:20:0c:19:54:e2:26:e2:c0:a5:d2:46:83:58:01:
                    14:9a:a3:2a:cf:c7:56:05:94:8d:5c:bc:65:28:6e:
                    df:cb:c9:a0:c5:db:66:87:4b:f0:d1:48:26:18:6f:
                    2e:c3:a8:8a:75:af:ba:30:bf:c3:4d:2e:b5:8d:23:
                    6c:31:44:6f:aa:99:79:1a:26:2a:68:29:7e:ab:81:
                    e2:f9:40:0a:aa:9a:8d:cc:93:bf:a7:3f:cb:94:b2:
                    e4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:22:7D:80:7D:BE:8C:83:FB:06:92:26:17:B6:6F:B6:C8:8E:F4:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5dba1687-6944-36f2-a782-ca23a3411ecd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.171.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:16:82:f6:b5:d8:4f:4f:f0:47:b8:c7:cf:60:e1:86:27:b9:
         c9:ef:95:06:7c:16:ec:a7:10:78:51:bb:af:af:8e:92:99:71:
         6b:54:e6:28:d9:2e:1e:b4:99:4d:68:cb:03:e4:d9:c9:08:5c:
         be:57:ae:8c:76:31:6a:59:fc:70:9c:ba:8f:dc:ae:7b:de:67:
         d0:0e:4e:b5:8e:e5:b7:b7:68:5c:bc:2f:30:2b:07:26:40:2b:
         e1:9a:6a:a7:40:47:1e:59:49:ca:14:d8:6c:5f:99:2a:c3:09:
         60:c2:9b:78:aa:e4:80:7e:70:d2:87:1e:a9:34:a0:dc:01:f0:
         36:cb:9a:86:4f:59:45:10:b9:f6:17:bc:04:e6:3b:d6:8f:ff:
         dd:47:51:ee:12:8c:74:34:5d:7f:d1:61:70:47:98:4d:17:fa:
         64:17:a3:a2:26:d9:3a:61:63:48:e4:0b:c7:78:95:aa:b2:ef:
         c2:f0:61:b9:f3:be:3b:db:82:dd:cc:15:fd:3f:3b:5e:06:0a:
         46:d8:d6:ec:c2:81:fb:50:f2:d8:0b:08:7b:e2:c5:6c:8f:1c:
         10:4d:19:0d:9d:dd:12:df:6c:80:38:64:5c:7c:9a:f7:ea:36:
         a0:53:cc:24:b0:fe:5c:30:a1:df:35:05:b4:52:23:6c:da:ea:
         ab:15:88:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:04:58 2025 by rpki-client