Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/60b27457-90f1-3d94-9a19-4033f51c2821.roa
File:                     60b27457-90f1-3d94-9a19-4033f51c2821.roa (raw, json)
Hash identifier:          SDbpYJ4xDqh5XvvI99cbuB7WG2DtCGwsqQiLDJlRldY=
Subject key identifier:   73:B0:7A:E1:3E:23:FA:6D:81:56:C2:EF:2B:23:5A:49:B3:5F:E1:0D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FC93A725110349D08C1700F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/60b27457-90f1-3d94-9a19-4033f51c2821.roa
Signing time:             Wed 02 Nov 2022 12:00:00 +0000
ROA not before:           Wed 02 Nov 2022 12:00:00 +0000
ROA not after:            Thu 08 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        153.47.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c9:3a:72:51:10:34:9d:08:c1:70:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  2 12:00:00 2022 GMT
            Not After : Dec  8 05:00:00 2022 GMT
        Subject: CN=3de925d5-635d-44e6-a594-e601780faaec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9b:9d:0e:6b:71:f0:a9:72:81:9f:48:9d:0e:
                    4a:8f:cb:77:5a:04:29:00:9b:61:52:f4:b1:7b:b7:
                    20:71:63:2e:b4:19:43:be:55:7b:1b:c9:45:73:15:
                    21:b6:cd:66:2b:45:1f:49:38:c6:cd:66:d5:eb:0c:
                    66:d8:1a:da:de:29:99:1f:6f:da:3d:d2:4e:19:d1:
                    7e:1b:ed:a6:18:11:2f:ee:98:8b:c2:af:d2:27:d5:
                    6d:50:a0:3e:a3:23:76:fb:e4:fc:4c:77:c5:49:87:
                    5e:54:b0:df:46:ed:88:7c:b9:6d:46:b9:fa:71:3e:
                    db:6b:24:34:ac:87:6e:20:87:1d:6f:d9:39:9e:98:
                    a3:e5:d5:0c:f1:d7:52:8b:41:c5:dd:4a:68:f4:95:
                    6c:c5:a4:a9:0e:e3:eb:b7:5a:e9:f1:f9:d6:9b:68:
                    c9:61:5e:31:66:ee:ca:8d:90:49:9e:50:65:ec:38:
                    1e:94:e6:46:38:d1:27:44:60:c4:d7:93:58:a9:ad:
                    5a:21:b8:f4:1a:71:ed:00:ca:72:46:fd:df:84:95:
                    8e:7c:2b:64:03:1e:ab:18:3d:a0:c9:e8:1a:27:3e:
                    3d:d4:0c:cf:28:28:60:11:3f:d8:d9:0c:4a:92:65:
                    ed:ce:a2:a1:d6:0b:d0:5f:24:e3:99:08:22:6a:2a:
                    76:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B0:7A:E1:3E:23:FA:6D:81:56:C2:EF:2B:23:5A:49:B3:5F:E1:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/60b27457-90f1-3d94-9a19-4033f51c2821.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.47.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:57:10:23:e4:ba:92:0d:2e:aa:dc:d8:76:e9:62:ee:20:fc:
         8a:99:6c:44:0d:04:ae:2a:88:2b:36:b9:15:8d:97:f8:b8:19:
         49:bc:0f:98:fa:e5:1d:b2:2c:05:a5:b3:67:99:85:20:5b:5a:
         61:c6:b9:0b:5a:52:02:36:a9:97:7b:aa:77:2f:6f:75:de:eb:
         2e:2b:45:f2:a3:80:0e:59:27:da:05:f6:7f:e1:8e:00:12:38:
         b8:43:23:80:c4:cf:1b:a6:17:23:5b:f9:e3:6a:09:4f:9e:d9:
         ba:3f:74:6c:b0:62:92:8a:8f:94:10:a2:a0:34:d8:96:2f:e2:
         cb:d7:34:33:a9:0b:de:a0:0a:60:eb:c9:a5:89:a9:ca:5f:a1:
         bf:65:d8:c4:43:77:98:c9:45:64:c2:05:20:8c:b3:ab:dc:ac:
         f7:7b:31:51:86:0d:c6:fa:76:86:4d:7d:53:97:88:b3:37:91:
         f7:22:37:1d:87:df:2d:a6:9f:47:5b:59:da:5a:c7:fa:55:7e:
         54:3f:0c:8a:66:e7:a4:9d:b5:55:09:14:a4:1c:0b:af:07:2a:
         00:9b:22:b8:56:01:c1:50:93:cf:43:8a:bd:21:7e:2f:b2:ec:
         ef:e0:26:27:28:fb:cc:4c:2a:57:05:35:6a:f9:57:54:44:f1:
         47:d1:68:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:52 2025 by rpki-client