Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/62856262-cf10-30ae-ae9a-363db3cd391d.roa
File:                     62856262-cf10-30ae-ae9a-363db3cd391d.roa (raw, json)
Hash identifier:          7hoVUQC/r2ktgYZDtE7CsCvsMR5OYtYE9tVEGfXTri4=
Subject key identifier:   E8:12:4A:33:14:FF:66:B6:F2:2E:73:5A:1E:A9:B0:72:BB:22:49:C3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583ED7130F8D226513C9840CBA80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/62856262-cf10-30ae-ae9a-363db3cd391d.roa
Signing time:             Sun 07 Aug 2022 12:00:00 +0000
ROA not before:           Sun 07 Aug 2022 12:00:00 +0000
ROA not after:            Mon 12 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        168.203.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:d7:13:0f:8d:22:65:13:c9:84:0c:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug  7 12:00:00 2022 GMT
            Not After : Sep 12 04:00:00 2022 GMT
        Subject: CN=2d739282-df49-49c2-b5e9-83aa8d430049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c3:4d:f4:4c:12:df:e9:83:29:df:e1:49:16:
                    f7:3c:91:85:f7:d3:61:c6:c3:a8:d8:37:47:76:41:
                    73:84:ed:86:b2:2c:8a:e7:8b:13:9b:0c:95:97:80:
                    33:de:60:5d:e4:a2:22:52:fb:79:02:ad:d1:a1:77:
                    f6:5b:42:8e:7a:d4:b4:87:b3:1f:1d:9b:c9:cb:da:
                    7e:2f:58:1a:3f:27:2d:f0:67:da:8e:8b:1d:87:20:
                    ee:4e:56:b7:48:61:b1:43:ff:08:e5:e5:06:0f:73:
                    87:dd:d0:50:df:9d:c6:cc:2c:bd:60:5b:d5:92:11:
                    3a:a9:b5:bd:02:5d:b4:5f:5e:85:5a:fc:48:a1:86:
                    45:a0:95:99:32:3d:02:fe:1e:59:31:74:2a:0c:7a:
                    d9:19:06:f0:b8:f5:25:a8:2a:4c:06:25:de:19:7f:
                    3b:59:93:56:62:df:34:f4:c9:a5:ff:0c:84:33:e2:
                    b0:d2:ff:8f:e8:8d:34:02:1e:27:af:bb:61:6d:2f:
                    36:38:3c:7b:d3:16:4f:09:db:37:0e:4f:de:b9:6f:
                    31:3c:e3:d2:43:d9:ed:6c:ab:0f:0f:1d:bf:ae:3b:
                    9e:3d:16:e2:a0:24:27:32:c6:7d:2b:e9:a3:0c:4c:
                    d6:0e:a0:52:34:4c:59:47:76:e7:d2:01:13:9f:d1:
                    84:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:12:4A:33:14:FF:66:B6:F2:2E:73:5A:1E:A9:B0:72:BB:22:49:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/62856262-cf10-30ae-ae9a-363db3cd391d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.203.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:bd:61:84:2b:10:83:84:0f:28:39:c2:6a:2a:01:ce:0e:94:
         d4:3c:fd:fa:9a:bd:81:8f:8b:6a:3c:6a:98:41:75:bf:a4:cf:
         79:c7:93:6f:99:af:e1:76:e4:61:3c:31:04:b4:a0:d5:af:c3:
         2d:50:ee:b9:bb:93:f4:65:23:92:5d:d8:48:74:e1:0c:d2:4f:
         98:06:c4:b4:bb:68:35:dd:09:24:a7:b7:db:c2:3d:38:59:ff:
         d9:e5:db:e2:4f:87:38:2f:6c:6e:3a:76:6e:8a:4e:56:bf:5f:
         7c:b6:dd:da:ef:06:63:a1:4f:ea:7b:eb:16:87:bc:d5:22:e1:
         55:a4:90:65:b4:08:f4:fb:90:6d:b9:bf:9e:f7:11:cb:8f:b9:
         62:c3:07:b1:0d:cd:3c:90:47:75:b2:5b:a7:f8:21:2b:5b:71:
         35:60:b4:54:7a:3a:9e:d5:3c:39:6c:13:9c:aa:1a:2c:36:36:
         1c:4c:2c:cd:82:c4:ef:ba:aa:7a:51:98:9c:49:26:c6:1b:56:
         81:37:af:2c:8f:a1:a2:89:d4:c9:58:3a:20:b0:34:0b:03:59:
         5e:e8:69:e0:1d:87:a3:9d:7d:da:9c:8a:70:e4:eb:46:1a:15:
         ce:b7:5f:6c:7f:61:78:12:e0:16:64:67:05:68:a3:fa:33:0f:
         e3:7f:8b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:12 2025 by rpki-client