Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6e004fcb-8037-3fa2-9782-844ac39eff8a.roa
File:                     6e004fcb-8037-3fa2-9782-844ac39eff8a.roa (raw, json)
Hash identifier:          FKXDWgjqUzMk97nCKbNstUKz+AYssWTN1ljKCKp2Jac=
Subject key identifier:   3A:57:5A:23:36:08:D8:7D:0B:1A:20:89:F0:52:C6:0B:C0:79:D0:21
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858403E474C6F1DC2452AF4006346
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6e004fcb-8037-3fa2-9782-844ac39eff8a.roa
Signing time:             Wed 14 Dec 2022 12:00:00 +0000
ROA not before:           Wed 14 Dec 2022 12:00:00 +0000
ROA not after:            Thu 19 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        57.198.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3e:47:4c:6f:1d:c2:45:2a:f4:00:63:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 14 12:00:00 2022 GMT
            Not After : Jan 19 05:00:00 2023 GMT
        Subject: CN=fba13844-5111-4fd6-a3b5-3c4d2e4a34a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d2:f8:30:cc:5e:21:7f:a8:7f:a9:60:f3:83:
                    67:a6:a3:05:dd:43:ff:c3:7c:3c:58:28:3f:ac:ec:
                    68:68:e6:96:d0:b7:73:8a:fa:54:a8:f0:4f:da:1f:
                    1f:84:44:52:eb:65:95:31:34:d1:be:b7:4f:f5:77:
                    a6:1c:41:10:48:7a:2d:8c:1a:26:ea:99:c1:68:dd:
                    00:84:34:4f:c8:7f:49:40:cd:b3:64:11:55:1e:38:
                    32:bf:38:a2:80:78:96:06:50:ef:33:27:4c:c7:94:
                    29:59:fd:23:45:67:b8:d5:27:80:eb:07:16:1b:ca:
                    b1:d7:5f:9b:5c:18:03:64:15:35:24:cc:97:7a:d4:
                    a6:29:20:a9:e8:88:69:2f:79:de:97:5b:3e:60:1a:
                    fa:06:72:4a:a5:8a:dc:48:09:5e:ea:3b:de:05:26:
                    20:bd:7d:fe:a6:58:c8:13:a5:fa:53:df:c9:26:3a:
                    9f:86:72:5a:02:34:db:22:5c:f0:7a:f5:83:7c:9c:
                    c8:1c:4f:a6:57:17:30:d3:ac:6d:e0:c8:3b:ae:e0:
                    42:80:d9:11:da:3a:92:cb:54:d5:84:d5:d1:30:58:
                    da:c4:9f:3f:13:fd:de:84:9b:7f:14:48:72:d7:e9:
                    6e:4a:24:57:e9:b8:9f:16:f5:d6:c7:c9:9e:cf:68:
                    d8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:57:5A:23:36:08:D8:7D:0B:1A:20:89:F0:52:C6:0B:C0:79:D0:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6e004fcb-8037-3fa2-9782-844ac39eff8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.198.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:a7:e8:c3:b4:12:d6:97:1f:63:27:e4:c5:ba:25:44:63:47:
         de:0b:4c:06:7c:4c:4a:5b:33:dd:63:b9:41:39:54:b0:12:17:
         1c:04:1c:2c:d9:66:12:19:8b:ad:dc:13:30:6f:85:9f:86:72:
         5a:49:93:43:81:25:65:76:a8:31:09:e0:6a:89:aa:a2:5a:0d:
         19:ad:7f:86:1c:e3:00:47:78:d7:4e:29:e9:19:37:aa:50:e1:
         78:f8:71:a2:4d:4f:88:3f:2f:bc:cb:3a:73:d3:82:2d:53:d2:
         2f:64:65:c1:6d:14:a4:2d:78:e6:f7:90:d4:4d:6a:8d:cd:ad:
         40:ed:f0:74:60:f2:1c:68:3d:30:95:11:70:84:aa:08:51:cd:
         6d:cf:b0:b4:19:39:43:0d:9f:2a:eb:10:6d:26:14:7e:bb:e3:
         f5:47:c7:a4:60:30:f2:24:87:d9:1d:38:fc:06:cf:e2:7d:71:
         30:75:ee:21:bf:79:11:b4:fd:e0:5c:f1:d4:ce:56:fb:55:50:
         7e:ac:8e:e3:9c:82:9f:49:b3:c0:6a:95:86:d3:70:b4:a9:c3:
         17:8d:b2:97:80:04:a7:b6:83:9d:09:95:41:d7:ae:5d:6a:78:
         0d:db:34:ca:20:96:97:d3:e2:02:0e:3e:f7:db:c1:9a:72:15:
         fe:47:8f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:12:29 2025 by rpki-client