Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6967905d-ea85-327d-9292-2bc89c11db09.roa
File:                     6967905d-ea85-327d-9292-2bc89c11db09.roa (raw, json)
Hash identifier:          kspWMFF2Hna1Z9piK7kAqmow02+Hg9UtmQyl8RKxwgk=
Subject key identifier:   4A:B3:32:39:6B:A6:9F:EE:C2:02:64:C4:B4:83:F2:29:BF:C6:BE:77
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C8DB725EADA9A57AC4603C900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6967905d-ea85-327d-9292-2bc89c11db09.roa
Signing time:             Tue 11 Jan 2022 05:00:00 +0000
ROA not before:           Tue 11 Jan 2022 05:00:00 +0000
ROA not after:            Tue 15 Feb 2022 05:00:00 +0000
asID:                     22394
IP address blocks:        204.126.24.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:8d:b7:25:ea:da:9a:57:ac:46:03:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 11 05:00:00 2022 GMT
            Not After : Feb 15 05:00:00 2022 GMT
        Subject: CN=1fc76012-12a0-4840-a195-a0999b1fb20b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9a:36:c8:70:34:ec:c3:65:55:a4:40:f9:f7:
                    89:f0:06:b5:d2:ec:47:90:98:8a:1e:35:0b:7a:34:
                    06:33:67:c8:fd:54:a6:7e:33:bf:91:fe:66:57:6a:
                    c6:2e:57:d6:e8:c8:ed:54:b2:59:89:64:a8:cc:2b:
                    47:b2:a5:82:2d:ec:c6:20:9d:05:01:6a:df:01:0f:
                    7f:9a:ff:47:e8:7e:03:7f:4c:50:24:43:49:f8:38:
                    d5:93:57:cc:57:57:ec:fb:43:a5:67:aa:96:30:22:
                    e6:08:db:bd:71:25:e8:d0:ac:a7:c0:66:26:de:04:
                    14:a5:b0:c0:c0:60:ff:47:a5:49:c7:81:16:6f:98:
                    f4:3e:8e:e3:6b:fc:72:53:8d:c0:d0:cd:34:09:d8:
                    f9:70:1f:74:f8:64:75:5c:70:f8:37:b6:c7:2f:f3:
                    6c:6b:eb:4e:91:73:99:27:28:90:87:21:89:2e:c8:
                    02:74:16:4b:2c:ab:3d:e3:0b:8f:72:9d:58:82:1f:
                    d4:2a:a0:55:de:d9:ab:a2:d8:2d:72:58:bb:28:00:
                    59:97:3a:16:e8:95:68:6f:cb:2b:26:cd:f7:cb:8a:
                    31:d0:d9:3d:cf:89:7c:de:fb:da:14:a7:5b:0e:c6:
                    3a:f7:5c:22:68:55:d6:8d:46:e5:95:83:ac:b7:1b:
                    0b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B3:32:39:6B:A6:9F:EE:C2:02:64:C4:B4:83:F2:29:BF:C6:BE:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6967905d-ea85-327d-9292-2bc89c11db09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.126.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:74:d6:1e:d4:ec:ba:e3:7a:76:04:89:83:f1:0e:8c:0c:36:
         ab:68:4c:db:27:94:97:61:45:3e:9e:eb:18:af:0a:d7:70:f9:
         43:0e:51:83:81:9b:e4:4c:97:06:ec:f0:12:55:6d:de:a8:1f:
         5f:33:9e:99:03:de:ca:3b:44:11:0e:38:d1:ee:87:79:c7:10:
         7d:86:52:ba:6f:59:3e:01:a0:a3:ab:0a:08:ac:83:42:7e:90:
         4f:ca:88:ce:be:cf:da:15:fa:ef:a0:db:73:a4:12:37:43:1f:
         97:1f:68:58:0e:ad:72:52:a4:49:ca:bc:9a:08:0d:0f:99:3c:
         68:36:43:ef:33:33:94:ea:19:fd:f9:7e:f0:f8:0d:4a:03:87:
         25:71:7e:bd:fa:bc:62:a7:de:3c:1f:16:69:5c:16:d1:ad:d0:
         63:b4:45:37:21:03:69:a1:49:ed:10:04:02:7e:26:6b:2e:e5:
         6a:b2:07:49:35:cc:51:84:58:a8:1a:58:9f:6c:68:66:2a:79:
         6b:61:d1:34:54:90:d7:a2:5d:4d:5e:9c:6a:f4:0c:25:db:72:
         52:07:65:fa:db:19:4f:b3:8c:78:d3:64:39:de:64:9a:b8:88:
         a5:80:86:33:cf:58:b1:9e:4e:f8:1e:7f:e2:d5:06:50:8d:2a:
         8d:33:b3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:34:57 2025 by rpki-client