Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6563b801-5b35-3870-94ac-bb919d5112de.roa
File:                     6563b801-5b35-3870-94ac-bb919d5112de.roa (raw, json)
Hash identifier:          pM08f3eOt74BkRtmhlc1gEEAHazfB+A3bpXXRJ2jXF0=
Subject key identifier:   FA:69:00:F2:5D:69:D6:00:0A:DF:11:15:6C:2D:E2:93:B9:7F:58:22
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FEC973F28B1078352F25FCF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6563b801-5b35-3870-94ac-bb919d5112de.roa
Signing time:             Tue 15 Nov 2022 15:06:07 +0000
ROA not before:           Tue 15 Nov 2022 15:06:07 +0000
ROA not after:            Wed 21 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        146.167.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ec:97:3f:28:b1:07:83:52:f2:5f:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 15 15:06:07 2022 GMT
            Not After : Dec 21 05:00:00 2022 GMT
        Subject: CN=71693469-58dc-4811-a039-5710f97ff5f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d1:96:90:07:fd:ac:6a:73:c9:ac:f7:2a:ed:
                    5d:31:3f:5c:b0:77:b2:e0:ca:24:14:e3:47:c2:15:
                    34:fe:32:df:75:50:b5:17:da:68:6a:00:1e:be:04:
                    30:b3:9b:04:e9:c8:34:3e:c3:1c:a8:4c:1f:5e:9b:
                    48:6b:6f:24:28:8b:53:12:56:f0:c4:f5:a6:8d:d8:
                    6a:d9:f6:30:94:70:0a:f3:d0:ed:1d:4c:a0:31:bd:
                    c0:a7:37:17:e4:67:b2:48:4f:7f:cb:a4:bd:f4:de:
                    97:21:f9:8d:7a:54:d4:08:83:4e:4f:93:05:e8:16:
                    1c:2e:ce:67:a5:2f:6b:df:54:8c:48:0e:3f:60:99:
                    9d:4f:f1:c4:36:e4:4f:24:ec:4e:da:07:c7:81:fa:
                    21:78:d1:8e:b2:ca:82:42:9d:20:ec:98:74:3b:07:
                    52:a5:1d:8e:5d:28:e7:13:6e:af:c9:e9:ea:33:e0:
                    cd:03:41:ec:2d:1d:40:19:61:69:06:66:ba:97:da:
                    8b:6a:e5:42:94:8c:13:22:06:a9:54:63:91:8d:e9:
                    45:d3:6e:f3:4d:1d:0d:e1:3f:84:08:bc:41:94:bc:
                    8a:c2:0c:7d:9f:03:35:84:92:7e:10:7b:59:9c:90:
                    f9:45:97:56:b1:81:92:78:97:8d:67:92:bd:45:4c:
                    69:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:69:00:F2:5D:69:D6:00:0A:DF:11:15:6C:2D:E2:93:B9:7F:58:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6563b801-5b35-3870-94ac-bb919d5112de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.167.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:45:04:66:d0:54:ef:31:5f:03:53:11:a5:2f:90:a8:f1:f4:
         f9:17:af:31:3d:c2:47:56:ff:68:2f:89:7b:13:90:bb:11:79:
         bb:7b:be:b6:eb:9f:9c:36:77:7e:0e:93:56:0a:9f:98:00:56:
         26:71:ff:d0:a6:40:3f:73:17:79:30:f8:ed:02:43:c5:22:d0:
         4a:94:9f:46:36:77:b0:b5:65:42:c3:37:a8:9e:75:5a:5b:55:
         b9:cd:39:d1:f6:2f:89:e6:00:e1:dd:19:7b:7a:e9:51:98:82:
         62:7e:a6:f9:18:23:f3:ed:fe:79:c4:b6:10:a3:82:45:82:ae:
         68:41:b9:43:78:96:6b:43:fe:60:d4:9d:73:04:0d:2a:56:76:
         e3:97:e0:17:da:9c:11:d1:91:f8:d0:43:9d:80:71:c8:75:69:
         6c:64:77:85:30:ff:32:f8:37:8a:57:74:80:52:aa:e9:01:96:
         27:3d:3b:83:97:e5:9e:5d:9a:65:c0:cf:3b:84:ce:10:b6:e0:
         55:45:de:0c:c8:23:f5:1d:bb:7c:ab:96:d6:9c:fc:b2:72:da:
         c4:64:84:38:da:ce:84:35:c6:b7:7a:4c:93:f0:77:ca:ba:6f:
         66:bf:af:2a:16:2c:a6:16:94:d7:10:bd:69:1d:d5:dd:95:5f:
         e4:83:69:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:44 2025 by rpki-client