Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/615603d2-4010-3b47-9be3-0c70dfd42899.roa
File:                     615603d2-4010-3b47-9be3-0c70dfd42899.roa (raw, json)
Hash identifier:          tfw+TOoyVwqGeNuHL9cKzeTVfsTOcJy+JQ1vo5lQ+L8=
Subject key identifier:   0E:D9:50:D8:B3:B7:75:A1:09:3F:70:69:D1:F7:90:64:1B:C4:07:0E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E1E9678455560799447212740
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/615603d2-4010-3b47-9be3-0c70dfd42899.roa
Signing time:             Thu 02 Jun 2022 12:00:00 +0000
ROA not before:           Thu 02 Jun 2022 12:00:00 +0000
ROA not after:            Fri 08 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        216.182.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1e:96:78:45:55:60:79:94:47:21:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun  2 12:00:00 2022 GMT
            Not After : Jul  8 04:00:00 2022 GMT
        Subject: CN=c17cb037-9a93-4d61-9ffd-d0940f0357de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0c:ff:e1:5a:7c:3c:e6:d4:bb:e7:7c:ca:13:
                    7f:46:95:ce:38:bb:e2:f9:35:4b:cd:6e:eb:eb:cb:
                    3e:b3:dd:a6:13:04:99:dd:7a:19:48:d3:75:3b:4e:
                    a3:91:4a:9f:9f:b1:ec:42:a3:f4:ae:e8:2e:67:f7:
                    57:ed:b1:f6:a7:63:3e:aa:b4:a0:c3:98:ee:2f:79:
                    61:71:68:e2:22:ea:d0:92:03:af:17:4b:cf:87:a1:
                    1d:02:f5:80:04:53:d7:8f:39:82:09:fc:25:38:fe:
                    db:2b:60:99:89:ef:c8:c3:55:55:c1:77:4b:79:e4:
                    e6:5f:67:ec:ac:1b:25:18:a1:b1:6d:33:31:8d:26:
                    80:95:dc:ae:b9:57:21:24:97:85:ab:21:e7:19:a1:
                    fb:2c:10:2f:26:38:82:da:20:51:ff:1b:7d:db:d4:
                    95:bf:ce:07:ce:df:89:7a:f1:bb:37:e9:ba:10:66:
                    5a:6d:df:04:40:6d:96:36:3f:d9:9c:c6:21:f5:1f:
                    26:00:c2:8c:a3:04:cb:96:94:54:e4:1e:44:72:9d:
                    a0:f6:14:c4:61:8a:c3:63:8b:56:84:bd:a2:5e:89:
                    6e:61:9e:8d:33:ff:08:fa:94:9e:0c:c8:90:9c:b3:
                    5a:94:bb:46:9f:4e:7c:e6:5f:41:07:0c:13:e2:8a:
                    dd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D9:50:D8:B3:B7:75:A1:09:3F:70:69:D1:F7:90:64:1B:C4:07:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/615603d2-4010-3b47-9be3-0c70dfd42899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.182.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:f0:5d:c3:b4:77:61:3e:a3:7a:c5:84:87:26:3d:a2:05:ff:
         58:98:82:dd:e2:0b:68:86:f2:de:bc:4d:2f:86:ef:60:e6:01:
         0e:74:b8:33:90:a0:56:85:7d:9f:c0:25:f0:d3:ba:aa:32:29:
         43:20:6f:ad:8e:52:db:ca:8b:05:20:ce:bb:69:fb:10:20:3d:
         06:5e:4b:cb:81:8d:95:ac:b4:19:ca:77:f2:10:63:2a:0c:31:
         06:9d:3b:6d:3b:92:74:fd:23:71:83:80:a9:7f:4f:7e:b8:8e:
         4c:aa:3e:dc:5b:7d:9f:c3:ef:fb:68:cb:6e:25:8b:80:42:6f:
         d8:67:47:c3:6e:6c:80:43:a9:b8:91:bd:b0:71:a8:58:ae:82:
         09:85:af:00:c6:71:0c:35:b6:08:f7:f5:8a:96:dd:fa:e1:af:
         35:c7:d0:d2:5e:f3:6b:b8:43:86:0d:a9:28:35:5e:e2:a9:4a:
         15:d6:a5:57:7c:af:ca:46:d1:4f:0a:ed:f4:e6:e8:38:f2:4b:
         7b:6d:04:44:68:ae:4f:6b:51:f5:1e:61:8c:14:11:a7:ad:ee:
         0d:db:69:57:91:2e:28:bb:65:20:04:73:79:4a:1f:90:f4:76:
         7c:86:33:e1:d7:a8:33:25:7a:e1:1b:b7:0e:9b:90:47:91:85:
         20:d3:60:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:00 2025 by rpki-client