Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/602e9448-5f5c-3073-94a6-03e144f6f844.roa
File:                     602e9448-5f5c-3073-94a6-03e144f6f844.roa (raw, json)
Hash identifier:          O+aUBfRuOiUdWYbeVXpGhzVuc+K2lRR0t1IrxIZw4xQ=
Subject key identifier:   09:6B:75:B0:9B:E2:CE:03:C8:B0:D5:23:A4:76:00:9C:53:BC:82:52
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F904A139D8CF7EC24BE13CCA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/602e9448-5f5c-3073-94a6-03e144f6f844.roa
Signing time:             Thu 13 Oct 2022 12:00:00 +0000
ROA not before:           Thu 13 Oct 2022 12:00:00 +0000
ROA not after:            Fri 18 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        167.97.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:90:4a:13:9d:8c:f7:ec:24:be:13:cc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 13 12:00:00 2022 GMT
            Not After : Nov 18 05:00:00 2022 GMT
        Subject: CN=8710ed4b-bdc5-4ca3-b950-1b8d9e5bcc0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9a:1e:27:61:72:b0:31:8a:6a:91:3b:b3:5f:
                    c3:23:60:4e:b5:5d:36:f0:40:3c:bc:1c:7f:ab:b3:
                    f3:ae:64:49:ae:cf:d8:80:32:a0:c3:7b:b4:a9:d2:
                    da:ef:f1:2a:4c:ad:22:19:c4:7d:ad:db:b1:ed:3c:
                    0e:4b:85:50:b5:b4:e7:1e:0b:71:69:e9:5d:5f:cc:
                    f6:6f:a4:72:65:e0:6f:3f:36:72:6a:51:c7:00:9b:
                    af:25:1a:4b:0a:c4:34:dc:30:36:00:22:a3:68:d8:
                    cd:32:4e:d2:e0:8d:4f:dc:b2:cb:e9:8e:bc:df:f9:
                    03:45:37:dc:ef:82:5d:61:77:21:41:c2:a4:9a:60:
                    41:5e:e5:4d:c9:75:47:b6:f8:2a:52:6a:50:4d:f2:
                    0e:dc:81:6e:45:4d:16:19:83:28:fe:99:c7:de:30:
                    da:d1:44:da:a1:26:7d:95:66:86:f9:38:c0:3d:dd:
                    da:b1:9d:d6:2c:ed:25:05:82:26:9e:cd:a9:f1:92:
                    4c:2c:9e:db:14:34:28:07:8c:8b:75:be:f8:44:f8:
                    31:ef:7a:36:05:9b:9a:54:39:28:b8:21:90:aa:6e:
                    16:bc:99:95:6e:7e:26:94:e3:fa:4e:e9:60:79:e2:
                    82:82:2d:a7:54:88:9c:90:d2:6f:a0:df:c5:8e:0d:
                    a9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6B:75:B0:9B:E2:CE:03:C8:B0:D5:23:A4:76:00:9C:53:BC:82:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/602e9448-5f5c-3073-94a6-03e144f6f844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.97.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:2c:a7:64:64:b3:6b:41:85:8d:4b:9b:f9:62:d0:c9:8a:5e:
         d6:65:9e:f8:0a:8a:62:ac:8f:7c:e0:e1:41:78:52:8c:c8:b5:
         f4:9f:14:99:ae:cd:ee:4c:1b:28:8e:fe:e5:22:17:12:ec:b8:
         73:eb:c6:3a:22:45:2c:b0:c3:3d:c2:5c:39:aa:52:e1:54:4d:
         36:8c:a6:ab:88:90:09:6a:43:a6:8a:7b:1a:b7:46:b4:d0:17:
         ca:c9:1a:a5:dd:fc:2d:e9:d1:ab:db:58:d3:fb:10:7e:1d:9e:
         0c:a8:11:42:2f:dc:8d:19:cf:f6:9b:a9:03:6f:3d:77:17:69:
         46:44:83:58:de:b0:00:6f:f9:f7:bd:34:39:1a:9f:fd:83:01:
         cf:7b:e5:e9:80:fa:69:c5:bd:fe:5c:10:4d:00:18:00:75:d8:
         5d:36:e7:4e:89:2c:90:cc:c4:6e:bb:98:16:e0:52:9b:1a:59:
         87:3f:cf:56:7d:91:39:67:e9:00:64:77:0d:39:ba:32:43:b3:
         a8:b0:c3:3e:a5:4f:96:2f:84:b1:09:2e:ab:7d:9f:91:83:d8:
         77:99:0f:56:61:6d:ed:48:46:30:a5:a5:9d:b1:75:c9:52:60:
         df:35:c6:86:b7:76:64:af:55:78:17:bb:79:18:e3:2f:80:37:
         70:28:bc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:07:53 2025 by rpki-client