Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6920ed16-2c36-3210-ac30-09c0e43fcd7d.roa
File:                     6920ed16-2c36-3210-ac30-09c0e43fcd7d.roa (raw, json)
Hash identifier:          SGoeiIaesieb0+ki6apQpTMfW28fBHLomqwWC+kPxuw=
Subject key identifier:   FC:27:E8:23:74:CB:21:03:2E:A3:B8:1E:72:E2:F1:3C:0B:2A:5F:FB
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D8E609F7704766D22E014E980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6920ed16-2c36-3210-ac30-09c0e43fcd7d.roa
Signing time:             Wed 13 Apr 2022 04:00:00 +0000
ROA not before:           Wed 13 Apr 2022 04:00:00 +0000
ROA not after:            Wed 18 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        170.15.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:8e:60:9f:77:04:76:6d:22:e0:14:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 13 04:00:00 2022 GMT
            Not After : May 18 04:00:00 2022 GMT
        Subject: CN=5ebd1da0-18e0-43a3-8dd3-5e3dfb20a286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e1:b4:a2:fb:0e:02:e8:39:79:92:0b:4d:05:
                    4b:91:d2:89:b8:87:b7:cd:0b:6e:db:da:0b:cc:da:
                    e3:8b:51:e1:f9:94:20:2c:77:a2:5f:e4:64:ec:a0:
                    d5:2e:f2:2c:4c:58:d3:85:a4:6e:3f:d3:ff:ed:e0:
                    17:4a:aa:d4:9a:7b:2e:a7:34:91:19:19:a5:1c:f9:
                    a0:b4:6a:b7:1a:a1:39:5d:6c:3d:6e:5e:35:1c:36:
                    29:e3:03:30:c8:f2:53:a1:4e:72:a4:f6:2e:f0:84:
                    22:c5:20:68:17:ba:72:86:30:07:62:7e:af:0c:1e:
                    d1:f9:6e:ac:47:ed:cf:09:2a:27:22:83:ed:7e:92:
                    4e:9a:78:ad:b2:3a:df:d4:31:b1:f3:2b:8d:31:28:
                    5c:9b:c3:12:2b:d9:76:8a:6e:a3:c3:46:1e:4e:4a:
                    9a:47:21:6b:3c:c2:f3:3e:22:ec:f0:13:0c:b3:c2:
                    a3:f9:eb:d1:dc:4c:a0:02:3e:e9:0c:58:5a:37:17:
                    0f:e4:c6:4c:5e:f8:7e:f6:14:8b:cc:17:d2:db:f7:
                    8e:c5:73:f8:98:82:bc:70:0d:05:2a:64:16:6e:21:
                    50:61:58:3e:96:23:c9:50:14:8f:87:48:2d:9a:4f:
                    e3:11:64:3e:86:c0:cc:90:b3:a0:4e:f1:8d:a4:80:
                    03:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:27:E8:23:74:CB:21:03:2E:A3:B8:1E:72:E2:F1:3C:0B:2A:5F:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6920ed16-2c36-3210-ac30-09c0e43fcd7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.15.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:40:f7:af:f2:fb:52:b4:77:4d:9b:e0:17:25:e6:6f:51:e7:
         cc:8d:92:94:46:98:95:5a:4d:da:6d:a3:4b:1c:05:e8:a0:6a:
         70:06:b9:4c:74:0e:60:84:f5:a8:16:26:91:59:6c:1e:19:31:
         f9:b8:35:0d:df:2a:18:44:c9:f1:cc:30:34:11:fa:ee:a1:b1:
         ac:c4:90:6f:74:16:34:91:77:59:b6:6d:c8:f0:72:f9:0a:f3:
         69:ae:70:7b:2a:75:88:d5:60:3c:72:08:06:f1:fa:54:1b:87:
         29:6f:e1:03:8a:44:0c:f9:5f:b2:8e:e2:2a:f7:b1:e0:3c:98:
         fe:f7:5c:a4:14:98:95:c2:b1:ce:51:a1:f7:73:af:5f:22:33:
         71:b2:f2:ae:c4:d8:29:c0:45:50:68:9f:77:6a:ea:51:d4:f4:
         a8:71:84:2a:06:9b:97:f5:a1:9c:ba:11:68:72:50:98:8b:8f:
         6a:b7:fe:eb:8c:97:3f:f8:86:92:41:b1:e3:5e:e7:34:54:37:
         26:a0:90:0f:54:57:02:f8:09:95:3b:4e:cc:6c:d4:74:d1:be:
         3a:72:4c:95:11:cb:e1:07:af:72:19:6c:b0:36:a6:97:e1:e6:
         2a:36:c4:ac:e9:8a:35:5c:03:8b:fe:aa:d0:35:bb:76:15:44:
         57:dd:85:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:26 2025 by rpki-client