Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6a7ff60a-9e9c-337d-92c1-b146b2672e98.roa
File:                     6a7ff60a-9e9c-337d-92c1-b146b2672e98.roa (raw, json)
Hash identifier:          qVofoi8BnYxSyZkmyRVC5BrH/kES+02fxGOl6vXCvSk=
Subject key identifier:   F1:43:0E:99:5A:64:90:C5:AD:C0:26:2D:C1:70:05:A4:B9:77:77:ED
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F26B28C88ECC53E67B42C7000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6a7ff60a-9e9c-337d-92c1-b146b2672e98.roa
Signing time:             Mon 05 Sep 2022 20:24:08 +0000
ROA not before:           Mon 05 Sep 2022 20:24:08 +0000
ROA not after:            Tue 11 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        204.126.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:26:b2:8c:88:ec:c5:3e:67:b4:2c:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep  5 20:24:08 2022 GMT
            Not After : Oct 11 04:00:00 2022 GMT
        Subject: CN=669acbc3-278e-493e-a38a-44ade074a888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2a:71:d0:4f:51:b3:c1:ba:7f:6f:25:d7:3c:
                    a2:c5:38:b3:a5:62:5c:61:d0:47:85:df:7b:e0:c4:
                    a6:70:dd:ee:f7:86:87:46:37:9a:bd:3b:f0:69:0e:
                    f1:b2:66:38:14:8f:93:85:6f:7d:5e:da:da:23:58:
                    d9:1c:f4:d4:90:fa:93:b2:28:ad:df:86:b8:ce:b5:
                    2c:d7:53:3f:0d:10:5c:39:be:8a:27:77:6f:d2:9a:
                    42:ed:5b:4e:9d:80:2a:5a:1e:a2:9d:f5:b1:63:46:
                    8c:04:1c:8f:00:26:11:f2:b2:09:80:b7:e8:69:72:
                    bb:8c:ea:1b:b9:82:18:09:4a:62:a7:2f:74:fe:c8:
                    8b:39:24:6a:cb:72:f6:d9:6e:f8:21:d0:23:cd:a6:
                    db:47:77:09:3e:5d:27:4b:c4:c6:21:e4:47:05:c3:
                    1e:fe:8a:8f:de:5f:b1:a0:7c:68:9c:bb:c3:4a:f3:
                    44:73:2c:75:0e:96:13:b6:c5:e5:2e:5a:35:47:1b:
                    b3:ad:2f:88:fa:a1:67:e8:cc:d6:1a:9e:86:92:79:
                    2a:8a:86:0c:96:22:16:e3:ed:36:95:41:f9:9b:65:
                    96:54:2f:1a:26:ec:5c:34:d2:5d:60:a5:e2:85:93:
                    1a:94:04:60:da:b7:74:e5:46:d2:7d:69:8b:78:59:
                    7d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:43:0E:99:5A:64:90:C5:AD:C0:26:2D:C1:70:05:A4:B9:77:77:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6a7ff60a-9e9c-337d-92c1-b146b2672e98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.126.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:ca:8b:e1:84:4b:36:0a:e6:d8:82:c8:4c:df:1f:b4:51:05:
         fd:bb:86:c5:e4:7f:05:c0:92:47:2b:81:94:7f:5c:12:91:b6:
         de:ee:dc:33:52:99:84:24:9a:64:e3:d0:6e:70:e1:13:af:e7:
         0d:74:f5:08:29:b8:2f:75:32:11:cd:20:f2:e4:63:54:a9:78:
         ec:e9:d4:aa:22:62:d0:b0:04:59:88:4e:8d:64:43:4b:11:50:
         ac:b3:62:28:b5:0d:3f:43:24:ec:d9:2f:bf:0c:d8:f2:95:ee:
         eb:52:98:ed:79:01:be:f1:7f:37:92:68:ac:57:38:ef:31:9d:
         0f:34:a1:62:09:4e:67:fa:90:90:a9:8b:bd:38:82:cb:10:72:
         99:34:02:9a:f1:b5:0a:5f:34:3e:7c:1e:29:42:b7:04:aa:6a:
         2c:14:4a:fa:b8:3a:9b:b7:ab:94:44:fa:93:53:f9:04:16:a0:
         75:84:3d:a7:6a:5c:de:55:94:a8:85:df:47:2b:8f:ee:4c:89:
         cd:92:c5:95:10:bd:bc:4b:fc:ec:fe:5b:8c:35:09:ad:bd:77:
         95:bc:59:50:a3:94:e9:3e:12:0f:f1:b2:ba:95:ad:91:ad:49:
         54:77:e9:af:d7:d7:a8:0e:34:4c:0c:30:8d:67:7e:b8:a8:42:
         02:b5:c3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:05:41 2025 by rpki-client