Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/724a5b38-444a-3705-89ab-ad110ad96139.roa
File:                     724a5b38-444a-3705-89ab-ad110ad96139.roa (raw, json)
Hash identifier:          oaFKCTBjY9vFOS/8AvHutCwKbWdbHGqY9DKpsAj9rXQ=
Subject key identifier:   F2:DF:AF:26:61:05:F9:B5:2A:BA:4B:DA:DF:D6:07:82:4D:DF:E3:73
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F3FA5FFB31B34B5EBB2F4FC40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/724a5b38-444a-3705-89ab-ad110ad96139.roa
Signing time:             Wed 14 Sep 2022 12:00:00 +0000
ROA not before:           Wed 14 Sep 2022 12:00:00 +0000
ROA not after:            Thu 20 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        134.251.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:3f:a5:ff:b3:1b:34:b5:eb:b2:f4:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 14 12:00:00 2022 GMT
            Not After : Oct 20 04:00:00 2022 GMT
        Subject: CN=23fc12fc-f007-4543-9cb9-b01ceb503410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:33:a0:ab:e0:e4:f4:35:d8:77:cf:66:bc:f8:
                    4c:df:b4:ad:a0:2f:0e:d4:ec:9e:9d:eb:1f:d9:9d:
                    26:57:b7:e3:00:30:91:24:21:c5:df:6e:89:c4:2a:
                    31:33:02:86:58:5a:27:cf:6a:43:2a:78:51:95:0e:
                    1c:af:e9:95:68:97:bd:f3:12:e3:35:3e:aa:71:76:
                    b3:b9:70:ed:08:8e:de:69:39:7a:0b:ec:37:fb:bb:
                    12:7e:43:e3:a3:e8:70:55:af:5d:52:1f:a1:e0:f4:
                    74:72:23:a5:40:dd:5e:7f:e9:72:8e:6c:02:50:ea:
                    f2:c2:ed:2a:c5:2f:ed:a5:05:1d:9f:1d:76:bf:4b:
                    ec:cd:78:b3:55:21:02:b4:dc:2e:b4:e0:cb:6c:2c:
                    3b:39:f5:86:35:e7:67:4f:f9:9d:cc:ad:45:87:1f:
                    44:d3:f0:ca:c8:46:63:28:af:f8:86:8b:33:e9:67:
                    9f:41:cd:01:46:f2:68:0d:7a:31:f6:34:0f:e9:51:
                    d3:fa:67:a4:39:b1:b7:e5:00:0c:61:ae:be:dc:5e:
                    1c:ce:15:70:41:97:1e:01:bf:09:10:e6:d9:6c:4b:
                    67:ef:84:b2:72:19:61:50:14:18:ec:aa:65:0c:75:
                    43:38:17:f0:23:e9:fb:0e:55:56:de:41:ae:54:2f:
                    ec:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DF:AF:26:61:05:F9:B5:2A:BA:4B:DA:DF:D6:07:82:4D:DF:E3:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/724a5b38-444a-3705-89ab-ad110ad96139.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.251.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:17:bf:d0:66:d6:a5:95:c3:43:01:7b:5b:ac:0e:c0:9c:cd:
         17:2d:ed:fc:e3:38:a1:e1:4f:6e:aa:21:df:2e:ff:48:c1:2d:
         be:42:51:ec:37:72:6a:da:81:01:9b:1b:91:9a:fd:ea:b0:44:
         ff:17:98:b3:13:08:5c:6a:67:e5:2d:ae:80:82:ce:4f:f5:9f:
         fd:6b:2d:6f:d8:98:02:df:f0:e8:ef:f1:a3:61:95:12:db:39:
         5a:bd:28:12:2a:c1:1b:81:0f:b3:8f:40:8d:a2:6c:67:6a:c8:
         42:03:57:05:67:e5:35:6a:c5:bb:87:7d:35:6a:c9:33:a0:dd:
         49:2e:df:ea:68:00:ae:90:38:36:87:58:dd:76:49:06:21:d2:
         1b:2d:64:10:d9:09:4c:89:95:e6:03:ac:1f:29:09:eb:af:47:
         1d:9d:c2:34:62:98:3b:5d:78:22:97:53:2c:9f:e0:ad:e3:ff:
         22:96:71:b4:eb:8d:43:06:26:2d:a4:92:60:ab:0e:6e:92:83:
         34:91:14:c3:c4:47:a6:3d:8f:f4:4d:2d:be:4e:cb:42:f5:f9:
         a4:a6:25:b4:b5:5b:5d:7d:c0:9f:71:1a:93:34:d2:65:0a:08:
         b6:f0:b6:f4:91:17:00:be:62:58:50:92:84:4d:dd:b6:9a:df:
         41:ea:c1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:41 2025 by rpki-client