Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6d767a73-8c4b-339e-8553-e7ea16d2943d.roa
File:                     6d767a73-8c4b-339e-8553-e7ea16d2943d.roa (raw, json)
Hash identifier:          9hbqfc8tBC6O+uNXC6DdW1+VcYvoXGs/MHFu+BQCvWQ=
Subject key identifier:   EA:BD:07:51:F5:D2:17:21:07:39:F0:C8:67:18:86:E7:C9:80:2A:73
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858400E2DD904D86C0A0E685BCE80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6d767a73-8c4b-339e-8553-e7ea16d2943d.roa
Signing time:             Sun 27 Nov 2022 12:00:00 +0000
ROA not before:           Sun 27 Nov 2022 12:00:00 +0000
ROA not after:            Mon 02 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        156.4.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:0e:2d:d9:04:d8:6c:0a:0e:68:5b:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 27 12:00:00 2022 GMT
            Not After : Jan  2 05:00:00 2023 GMT
        Subject: CN=e517acab-2c81-44fd-93c1-4cc41f91bf15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:01:3f:c3:8d:bb:a0:4c:d1:81:7f:e0:67:06:
                    20:8a:fa:f7:93:90:f1:12:74:3c:f7:05:d8:1c:df:
                    02:8c:08:67:b4:82:f5:60:b4:15:4d:03:49:bc:9a:
                    de:c3:90:61:a1:0f:a0:e4:6a:7e:99:87:fc:f2:07:
                    b7:ac:74:3e:8d:c4:67:2c:fc:64:78:c3:44:e2:43:
                    89:c9:24:ea:e0:e0:31:6f:94:05:b8:8a:24:d4:e7:
                    54:39:51:8a:cf:c7:3d:1a:c3:34:13:32:1c:db:39:
                    49:1b:3d:b1:9b:7a:92:3d:54:7e:78:c1:ac:18:fd:
                    d9:45:1d:8c:7a:71:d4:d2:5c:09:f0:ef:3b:73:c1:
                    c6:58:de:a2:36:d3:54:84:a3:35:21:af:2c:55:84:
                    ad:b4:c6:b1:7f:1f:a9:07:f0:91:e5:45:7a:91:6e:
                    91:4d:10:03:9d:49:ba:46:2a:c2:ac:a3:e0:ea:d3:
                    bc:5a:24:ec:1b:75:96:83:cc:78:2a:3b:c7:ab:07:
                    84:59:9c:8b:44:3d:c4:f3:11:c4:62:c9:89:56:b6:
                    bf:8d:c3:6a:26:87:da:c0:ec:0c:b5:e1:85:fd:e6:
                    80:19:b4:08:ec:e3:f6:ee:19:76:cf:e7:6f:3e:1b:
                    c8:6e:11:91:2c:c7:6b:0e:e8:75:ae:c4:bd:99:bd:
                    b3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BD:07:51:F5:D2:17:21:07:39:F0:C8:67:18:86:E7:C9:80:2A:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6d767a73-8c4b-339e-8553-e7ea16d2943d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.4.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:c2:ff:e2:f4:ca:d2:40:87:09:77:c3:87:7d:3e:79:3a:f5:
         ff:aa:0e:dd:55:60:2f:59:76:8b:7c:8c:29:8e:dd:47:b7:66:
         56:05:7c:59:19:fd:61:7d:44:37:4f:9f:17:44:e4:94:3b:74:
         f1:cc:88:46:3f:48:75:18:74:8d:8c:70:84:c9:22:fb:86:2f:
         97:a8:67:42:d3:04:2f:42:a4:6e:01:30:aa:1b:c5:3c:39:3f:
         73:c1:58:f6:aa:66:c6:15:45:89:ec:4b:e4:d5:6b:de:9a:e8:
         81:f6:91:14:7b:6b:a0:4d:62:d2:32:d7:7c:98:ab:74:ef:12:
         99:37:8b:57:d2:2a:05:76:f6:dd:07:47:cf:17:61:db:27:a2:
         c9:9c:17:0c:70:00:bb:2d:99:bc:33:cf:01:35:39:ae:e0:e7:
         10:9e:b0:cf:9d:bf:d7:aa:ce:f9:03:8f:d9:33:8c:78:46:bf:
         c5:3a:b1:46:66:5c:82:ff:48:73:74:c5:98:45:55:0d:77:35:
         17:a9:eb:01:e8:4d:70:38:82:50:81:be:11:35:cf:04:46:c0:
         36:62:b9:72:54:fe:ee:24:76:e2:eb:7d:55:0f:74:b6:04:84:
         d8:4a:c5:5d:c3:8b:d3:ec:b3:d1:10:e8:3e:3a:0e:f7:1b:40:
         87:f7:4e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:38 2025 by rpki-client