Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/697fcb89-c14b-3e6f-9ad1-0915faece081.roa
File:                     697fcb89-c14b-3e6f-9ad1-0915faece081.roa (raw, json)
Hash identifier:          LRlb/tovUdVOsZY+M8n+n+OZ5CKzFAfQOJqHgyIw+bE=
Subject key identifier:   2C:DF:71:B2:25:0F:A9:85:6C:73:0E:BF:F4:36:23:0A:C8:FE:23:F3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EE227686F8C53512E898D1D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/697fcb89-c14b-3e6f-9ad1-0915faece081.roa
Signing time:             Fri 12 Aug 2022 14:42:08 +0000
ROA not before:           Fri 12 Aug 2022 14:42:08 +0000
ROA not after:            Fri 16 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        216.182.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e2:27:68:6f:8c:53:51:2e:89:8d:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 12 14:42:08 2022 GMT
            Not After : Sep 16 04:00:00 2022 GMT
        Subject: CN=d92579ea-33e6-46b2-bf11-425fd4da3c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e2:16:84:48:5a:45:8a:61:44:25:21:36:5f:
                    b3:fc:28:02:70:da:9e:2e:7a:3e:49:f2:56:81:47:
                    73:8b:d5:3e:70:ce:fa:bd:28:58:da:55:9c:6b:86:
                    c6:62:2a:5f:a9:91:fe:3a:3c:30:35:d3:f4:98:69:
                    ed:16:1f:b7:b6:f1:2c:33:46:d5:9b:fd:b6:b6:af:
                    ad:a1:ca:8f:37:7b:75:69:d2:c6:20:94:0d:bd:39:
                    7e:7e:22:25:6f:35:1f:b3:db:af:bd:a2:3b:8c:dd:
                    0a:b7:47:52:1d:ae:69:f9:22:cf:5a:00:33:35:f5:
                    1d:26:49:9f:cc:a3:4a:52:6c:a9:87:9b:78:a4:95:
                    18:5f:12:ee:61:6a:b6:e5:3c:1a:aa:cc:6a:b2:f0:
                    4b:20:b3:4d:34:40:62:db:c5:ec:ab:7f:ca:73:a4:
                    0c:e2:2d:0a:51:db:6c:e2:c8:88:8b:0e:15:a5:7f:
                    81:d6:7d:b6:42:f7:4c:70:1e:cc:07:67:0a:82:cb:
                    1a:b4:e8:3c:7e:65:b0:9d:c4:f1:50:ac:04:fa:87:
                    d6:13:85:71:e1:5b:0c:a5:bb:44:de:cd:b4:c0:50:
                    65:34:7a:80:fd:76:58:49:17:df:bf:f1:d6:42:d3:
                    b1:38:26:cc:8f:0b:ef:4d:69:60:ce:0b:fc:82:fd:
                    12:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DF:71:B2:25:0F:A9:85:6C:73:0E:BF:F4:36:23:0A:C8:FE:23:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/697fcb89-c14b-3e6f-9ad1-0915faece081.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.182.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:95:07:b3:9d:39:8d:5f:66:92:41:85:92:65:a3:d6:f9:99:
         ec:9f:f9:1e:f9:8c:9d:9f:21:06:82:0c:2b:81:52:b0:a3:34:
         9c:4e:80:3d:14:7d:60:49:2e:80:d4:61:20:77:02:ad:98:49:
         0d:e1:77:26:75:88:0b:21:0b:63:24:ce:49:f4:39:aa:02:c6:
         3c:ed:c5:c2:4f:55:e7:cb:5c:80:d6:9e:3a:9f:f1:23:82:d1:
         5b:6e:1f:e4:9f:30:58:0e:2b:91:f3:b8:4c:1d:75:60:39:ea:
         94:fe:dd:7b:23:74:8a:0f:45:87:5f:a7:c6:65:ed:22:2d:c1:
         e2:44:66:47:a6:45:10:d6:87:0e:c3:8e:e0:a4:30:f1:77:cf:
         01:96:82:69:ea:a4:0f:72:90:ea:2d:95:f2:20:61:c3:6d:be:
         3f:0c:f9:4c:39:8b:ed:36:9f:e6:25:f5:1e:03:70:39:ce:e4:
         c9:98:af:da:08:3b:49:f9:44:05:bf:22:99:8e:5a:ce:fa:d8:
         9e:2c:dc:4a:32:e5:f4:14:c4:11:78:15:c4:18:11:e9:2f:7b:
         97:fd:72:8e:b3:81:67:55:6a:aa:6a:91:5f:36:43:3a:90:5c:
         f8:d7:2d:ab:03:80:7c:ca:e9:96:aa:82:a0:ce:1c:fa:8c:f6:
         6f:94:6f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:02 2025 by rpki-client