Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6635b4d0-04c5-3872-854c-bc91fa157fc2.roa
File:                     6635b4d0-04c5-3872-854c-bc91fa157fc2.roa (raw, json)
Hash identifier:          bgKPv4Dov/NM7WQ9dHVpCo7HlxOauE6OsWZMI5GRI1g=
Subject key identifier:   E2:7B:74:6A:37:91:B7:89:1E:B8:FE:3A:04:5A:D5:71:33:91:21:71
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EC2E473464719FB23067067C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6635b4d0-04c5-3872-854c-bc91fa157fc2.roa
Signing time:             Sun 31 Jul 2022 12:00:00 +0000
ROA not before:           Sun 31 Jul 2022 12:00:00 +0000
ROA not after:            Mon 05 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        153.12.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:c2:e4:73:46:47:19:fb:23:06:70:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 31 12:00:00 2022 GMT
            Not After : Sep  5 04:00:00 2022 GMT
        Subject: CN=8cf73ab3-0877-4181-b95f-15e4eee64138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3a:aa:3b:b4:02:91:42:6e:2d:a7:fb:5a:ed:
                    5e:34:dc:45:d4:cb:4d:f4:1a:57:32:f8:b4:9a:ad:
                    09:0a:1a:47:82:e1:02:35:5d:d9:fa:91:f7:0b:e0:
                    81:e2:ae:e2:c4:aa:c0:04:89:a3:8e:cf:2a:94:b5:
                    24:23:e2:c8:f2:ae:84:7e:ab:fd:09:3b:55:8c:2d:
                    86:70:4c:87:e6:31:6d:5a:d5:91:e5:67:89:ab:69:
                    a6:c0:d4:9d:8f:0a:f0:19:c7:8b:59:2e:fa:89:e7:
                    9e:47:71:66:d9:76:02:d0:a3:fd:49:90:08:e0:f6:
                    7a:86:08:3e:ad:6c:fc:5f:14:de:c2:93:08:6b:e6:
                    5c:03:c5:bd:f1:5c:72:f7:ce:4a:73:17:1c:5e:76:
                    e5:84:97:a4:96:0b:2f:96:bf:34:8d:0a:4b:cb:7e:
                    80:5e:ce:61:e7:8c:13:45:53:d2:b0:50:1e:8e:b7:
                    19:43:30:53:d6:2b:e7:aa:d5:b5:61:69:7a:40:b4:
                    9b:e8:a8:cb:15:d6:be:76:de:46:dd:c2:d8:e4:db:
                    56:c0:cb:a0:d8:a3:4a:3a:02:80:b9:d0:6c:18:a5:
                    9b:49:cd:36:b7:bb:4a:c9:5e:7d:16:65:f9:d5:e9:
                    a6:ff:83:f9:70:b5:0a:98:ca:6a:6e:7d:2b:29:b0:
                    a8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7B:74:6A:37:91:B7:89:1E:B8:FE:3A:04:5A:D5:71:33:91:21:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6635b4d0-04c5-3872-854c-bc91fa157fc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.12.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:d7:87:a7:02:02:55:86:b1:57:84:04:37:fe:b2:d4:01:54:
         8c:a2:d0:35:71:83:4e:8c:26:f7:90:f9:ed:d1:be:0b:b5:c6:
         25:fd:c3:d9:58:a4:0f:1f:a1:91:67:f5:8f:d2:61:fb:5e:70:
         9b:d7:08:ea:01:65:c4:fb:ac:c2:6b:91:bc:5f:54:aa:2f:21:
         e8:32:14:f0:bd:62:36:39:18:c7:03:54:03:1c:10:77:59:f3:
         3f:39:62:8f:ae:f8:53:c5:bc:aa:0e:f7:9a:68:c9:cf:9a:95:
         53:0a:71:f4:6b:ad:f9:a3:9f:8e:d9:bf:b4:bc:ac:b5:25:92:
         d8:cb:7d:db:c5:6a:b9:24:9d:18:95:6c:52:72:fd:c0:a1:af:
         d3:88:e8:07:f6:5d:7a:f5:1b:c6:71:83:02:51:62:20:79:41:
         55:6e:61:e3:fd:ac:11:93:1e:f0:79:1e:11:c4:9c:95:1d:e6:
         01:64:aa:58:b2:48:ca:fe:36:99:b1:38:01:1b:48:1f:63:db:
         a2:df:59:a1:91:e2:04:81:be:6f:3a:d2:c9:39:93:fc:fe:15:
         75:90:ef:eb:23:d8:93:75:57:d5:29:52:37:f6:e8:d1:32:32:
         ee:27:23:cf:78:a2:f0:52:ad:56:db:55:a3:73:ab:d0:c9:fc:
         82:f7:fd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:55:02 2025 by rpki-client