Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/626656b1-2496-37e3-87c2-57c2ff833ca6.roa
File:                     626656b1-2496-37e3-87c2-57c2ff833ca6.roa (raw, json)
Hash identifier:          Wa2P72Hx6SaxrkPrtJqeGULwUm9m0I851TxkAItzvGc=
Subject key identifier:   08:A5:C2:3F:C6:95:12:EA:15:F6:5B:7C:A6:75:FA:BD:7B:6B:8E:8C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FCE425B0514246BBE76F129C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/626656b1-2496-37e3-87c2-57c2ff833ca6.roa
Signing time:             Fri 04 Nov 2022 12:00:00 +0000
ROA not before:           Fri 04 Nov 2022 12:00:00 +0000
ROA not after:            Sat 10 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        155.254.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ce:42:5b:05:14:24:6b:be:76:f1:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  4 12:00:00 2022 GMT
            Not After : Dec 10 05:00:00 2022 GMT
        Subject: CN=66c299e3-a9db-46d4-95d5-a8a2880cc79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9d:ac:aa:c4:ab:ed:6f:e0:94:9f:48:1b:92:
                    ef:57:07:37:e5:b8:5b:7e:9b:73:de:8d:0d:cd:2f:
                    5f:dc:2f:36:24:59:62:22:50:70:8f:48:f1:07:b2:
                    f6:e9:39:ee:62:8f:79:3f:72:f2:59:ed:f0:f7:db:
                    66:84:bd:49:71:64:80:d2:b2:ad:30:16:ca:aa:c4:
                    d9:36:ee:2f:de:1c:38:65:28:fe:47:61:45:94:62:
                    8c:6f:d6:ba:cc:9e:9f:cd:46:cb:0b:4e:db:76:99:
                    db:b5:ec:67:a2:3c:22:77:d4:cd:fb:a8:ab:58:3f:
                    5e:1f:6b:3a:66:ce:37:49:ab:4b:5d:66:59:f6:67:
                    0d:af:d1:de:ec:c3:14:55:77:fb:5d:8f:3e:61:9e:
                    99:4b:d6:7d:44:f0:0d:63:21:2c:55:e4:a4:11:b3:
                    73:12:21:fd:bf:0a:e1:bf:d0:8e:80:3b:1c:d7:95:
                    02:ac:39:47:65:97:b5:67:fb:4e:a2:cd:0a:ff:16:
                    bf:00:c4:2e:ee:93:9a:89:6e:d4:d9:e6:b8:d7:fa:
                    9c:70:ff:08:5f:06:66:5f:3f:1c:56:8b:ab:c4:15:
                    2a:97:86:1c:8d:cb:4e:2e:6b:b4:52:5b:31:ca:5d:
                    81:64:63:9b:d3:3c:34:8a:4c:a6:a5:7d:ef:52:3f:
                    f2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A5:C2:3F:C6:95:12:EA:15:F6:5B:7C:A6:75:FA:BD:7B:6B:8E:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/626656b1-2496-37e3-87c2-57c2ff833ca6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.254.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:c1:7c:e3:7e:e2:5b:bb:fb:e9:6d:f1:0d:5c:11:17:75:d7:
         14:01:82:5f:f2:6a:5a:ed:54:dc:26:1f:94:66:78:77:0a:7b:
         56:5c:8d:6a:12:32:4b:10:f5:83:80:43:3b:79:74:1b:f0:b4:
         b9:ba:59:83:78:20:09:ac:d9:54:7f:b4:b2:2b:2d:fe:5a:15:
         58:b5:6b:34:04:1a:96:b9:44:73:80:59:d9:be:bb:44:eb:e9:
         5a:ce:5f:c0:0b:1c:13:97:54:f4:68:d7:e7:32:52:88:36:7e:
         d4:4d:df:a1:69:f1:6d:aa:4e:56:c5:b4:98:6f:b0:7b:61:05:
         c5:a5:4a:7e:b8:8c:33:31:2c:09:41:8a:dd:71:0b:84:7f:a1:
         7d:c3:42:06:81:c5:f6:a7:15:19:f2:a9:ba:e7:2f:5b:7a:61:
         49:0d:f6:a2:e3:3d:eb:93:53:df:1f:e9:83:16:3f:f7:8d:22:
         23:87:b1:c5:65:f4:40:60:0a:f3:ba:c6:d0:ea:bc:48:94:23:
         fe:3d:f4:6d:06:b9:62:0d:e8:1c:6e:e6:f9:9a:8e:69:22:3e:
         df:c9:80:1a:b5:7b:94:dd:c8:0b:38:37:e5:e7:87:fe:88:79:
         c7:bf:c1:9d:7d:69:3b:75:5c:ff:5a:62:ee:2c:dc:90:15:61:
         f0:62:90:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:56 2025 by rpki-client