Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6c936684-64d3-3534-bf01-93b7471b7440.roa
File:                     6c936684-64d3-3534-bf01-93b7471b7440.roa (raw, json)
Hash identifier:          nQUvuE3p3I4Kr6kLKMAaYAL6+YojadWWWLv/FraPvvk=
Subject key identifier:   8C:32:10:78:DC:7A:A1:BE:B0:B3:F7:E5:93:5A:21:AA:3D:89:16:32
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858403AABF2F28DAB4FD562DFDFA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6c936684-64d3-3534-bf01-93b7471b7440.roa
Signing time:             Tue 13 Dec 2022 12:00:00 +0000
ROA not before:           Tue 13 Dec 2022 12:00:00 +0000
ROA not after:            Wed 18 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        151.150.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3a:ab:f2:f2:8d:ab:4f:d5:62:df:df:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 13 12:00:00 2022 GMT
            Not After : Jan 18 05:00:00 2023 GMT
        Subject: CN=4585e91c-c3b5-4c0b-b688-60459b1bf932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b8:89:d9:e9:7c:d4:88:bc:36:0e:30:c6:0f:
                    65:68:eb:3d:72:92:c0:a1:0d:82:87:de:af:e4:f3:
                    d6:53:b7:4f:52:af:00:e1:23:1f:cc:df:39:3c:85:
                    cc:43:aa:b5:f5:da:bd:88:35:83:cd:64:14:2e:6e:
                    19:3d:19:25:82:90:04:ec:2e:94:9a:10:2b:64:05:
                    fe:1d:a6:97:bd:2e:5e:00:fb:a3:4b:4b:7f:48:3f:
                    d2:a4:89:7c:be:e8:5b:ad:94:af:f8:f9:d4:17:a1:
                    92:4b:b4:7c:d8:56:6f:c1:74:cb:f1:c2:6a:fd:36:
                    ab:1f:bf:c8:95:7d:ee:f5:f2:4f:59:8a:38:cf:bd:
                    95:1e:db:4c:d9:fc:28:a8:97:98:22:76:51:c6:2f:
                    63:c3:bc:0e:1f:af:47:ca:63:8f:65:d0:4c:50:3a:
                    c8:cd:d4:e9:8d:76:b3:a0:d2:63:ae:97:b9:82:f4:
                    dc:09:21:29:6f:65:57:0c:5f:6b:11:7f:43:ab:09:
                    c3:1e:24:40:5c:0e:57:b6:74:16:5f:49:48:ec:fc:
                    59:98:9f:0e:d2:de:b6:e7:a3:6f:5d:51:66:0d:fe:
                    ef:89:26:56:50:8e:01:1c:e8:16:eb:7b:89:10:fd:
                    dd:d4:bb:20:b6:ea:d3:ca:87:f6:ef:56:9a:4d:68:
                    c5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:32:10:78:DC:7A:A1:BE:B0:B3:F7:E5:93:5A:21:AA:3D:89:16:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6c936684-64d3-3534-bf01-93b7471b7440.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.150.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:1b:83:42:70:65:18:2c:84:12:c9:7e:2c:9a:ed:cf:09:82:
         83:55:54:36:36:ef:de:bf:90:17:d4:16:bd:04:1c:bd:a2:50:
         97:db:55:3c:4c:08:0f:96:3d:db:55:db:60:c7:7e:7d:22:80:
         96:d0:a4:aa:24:75:23:d6:a3:2b:ff:43:14:3b:34:7f:90:e4:
         f5:f7:d8:1c:e8:cc:8a:5a:41:bb:6c:94:0c:98:28:ee:85:36:
         07:1c:6f:13:03:30:ce:1f:7a:6b:79:71:0d:21:39:dc:09:07:
         97:a8:75:6d:fc:62:9c:77:77:f6:ce:ea:b2:23:38:17:40:83:
         c6:a6:6d:d9:a0:fc:49:6e:34:d4:95:f4:9c:cf:56:0a:51:27:
         26:c6:e8:41:cb:a5:b5:44:de:66:a5:47:42:d2:89:4c:f1:cd:
         ca:b5:ea:22:31:48:4a:88:f5:bf:48:ba:93:f8:7f:00:dc:8e:
         f7:e6:ed:08:ee:77:8d:0d:e1:4a:f1:17:6f:c0:e2:f0:ad:a3:
         35:cd:1d:18:21:e3:7d:ef:16:9f:b7:e2:dc:5a:cc:cb:0a:ec:
         fd:d6:ff:c5:3c:ea:00:ca:2a:95:7b:ab:93:0b:8a:00:98:43:
         46:4e:12:b9:54:d8:92:63:d4:f0:bf:37:fa:ef:c6:15:be:87:
         da:72:4f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:38 2025 by rpki-client