Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6f7c83e9-a739-368e-823a-f2936079b109.roa
File:                     6f7c83e9-a739-368e-823a-f2936079b109.roa (raw, json)
Hash identifier:          Mt70UjXNgpXSbItV+mIWYYGnLHeOnKnZCxn8qSFB4dM=
Subject key identifier:   9D:20:03:70:DC:D2:A3:6C:23:B9:51:AE:91:F8:07:68:60:9E:B3:57
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858406B5A766F0684B2607A996760
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6f7c83e9-a739-368e-823a-f2936079b109.roa
Signing time:             Fri 30 Dec 2022 19:54:08 +0000
ROA not before:           Fri 30 Dec 2022 19:54:08 +0000
ROA not after:            Sat 04 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        165.178.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6b:5a:76:6f:06:84:b2:60:7a:99:67:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 30 19:54:08 2022 GMT
            Not After : Feb  4 05:00:00 2023 GMT
        Subject: CN=7385a12b-203e-4add-9d26-d078db4fb25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fb:b4:b8:5f:d9:d2:aa:99:a7:1b:4a:39:5f:
                    23:64:ae:02:38:f7:cd:b1:50:de:9c:29:d4:9a:00:
                    51:0d:9f:03:30:48:8c:a7:4a:b1:e5:54:f7:7d:0e:
                    fe:f1:74:49:95:80:ab:e5:e1:d3:41:cb:cd:73:f8:
                    f5:7d:95:d2:c6:31:18:93:29:20:bf:bf:8a:51:95:
                    dd:1b:e4:03:2d:25:8a:51:1e:c2:43:db:fe:28:37:
                    0a:31:76:81:fa:6f:c7:c7:8e:7f:c6:45:8f:f4:41:
                    08:ca:95:db:83:b2:32:25:e7:60:a9:71:8a:42:b2:
                    f2:a5:88:89:02:82:17:3c:b9:9b:f6:cd:84:d6:cd:
                    21:f1:bc:0f:e1:4e:b1:1d:d8:4c:48:8d:30:7d:38:
                    47:1e:e0:f1:2d:c8:d3:c7:a9:f2:ab:e1:25:cf:c4:
                    37:08:35:d9:77:a5:0b:a9:f5:01:3d:b9:2e:35:09:
                    8e:59:38:98:6e:eb:a4:f1:c9:e5:22:f1:81:51:71:
                    6f:64:ac:7a:fc:95:41:53:59:10:48:e6:c3:d2:d7:
                    19:f9:2a:7d:cd:10:54:0c:9e:ca:93:25:fa:b2:2d:
                    b1:c2:20:66:4e:c5:dd:49:eb:c4:c0:58:e4:0c:ba:
                    0a:43:e6:28:7d:5e:4c:6f:ab:ae:91:f1:d4:25:cb:
                    a1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:20:03:70:DC:D2:A3:6C:23:B9:51:AE:91:F8:07:68:60:9E:B3:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6f7c83e9-a739-368e-823a-f2936079b109.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.178.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:c0:23:91:46:27:d2:15:a7:36:3b:f3:39:04:c0:1c:35:7c:
         e2:f0:af:07:8b:e0:c4:da:4a:72:0c:e3:e7:62:dd:82:38:49:
         cc:64:f8:4f:22:32:d7:04:68:03:b7:40:c4:2c:dc:c8:9d:0c:
         6e:c0:08:2c:95:81:40:00:f7:70:92:79:00:48:f8:86:96:f1:
         f6:5d:83:32:44:03:17:4c:a4:3e:a5:7e:34:68:49:15:e4:b4:
         89:d7:ce:97:b1:60:fc:ee:57:60:da:0e:ea:54:44:05:b5:bf:
         30:83:8c:3d:a9:15:dc:cd:26:3d:a3:29:ca:a4:22:d0:bf:36:
         72:89:8f:05:98:67:34:50:30:8c:e8:f0:26:54:0f:48:7a:1b:
         ce:44:c5:ab:5a:cf:13:7e:6a:4e:c6:da:f2:f6:05:e5:2c:44:
         15:92:63:08:11:2b:76:bb:d1:bc:bf:4d:eb:43:ff:89:71:d5:
         12:9f:1d:46:ed:7d:fa:4f:98:77:b7:82:ff:25:2c:a2:fc:bc:
         c8:61:a9:d0:f2:d4:9b:4f:bb:a5:56:ff:a4:a7:75:17:be:38:
         d7:ed:fa:9f:25:ec:2a:e5:d6:dd:4d:03:57:3e:dd:35:88:a7:
         97:44:29:43:ad:d7:d1:51:d3:8a:29:01:43:13:32:7e:73:b4:
         46:12:ee:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:18 2025 by rpki-client