Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/72a37cae-ca88-3d52-bb42-a773251082a7.roa
File:                     72a37cae-ca88-3d52-bb42-a773251082a7.roa (raw, json)
Hash identifier:          0ak6ka6f/JrDx9TSvvER7MmmO2Kx4ks0WEnQFP8RqnA=
Subject key identifier:   AD:3E:3A:5A:1F:87:65:AA:75:C2:1E:05:4D:07:84:07:D3:D9:77:CE
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EC32185066B54AAD6CAB2AC40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/72a37cae-ca88-3d52-bb42-a773251082a7.roa
Signing time:             Sun 31 Jul 2022 12:00:00 +0000
ROA not before:           Sun 31 Jul 2022 12:00:00 +0000
ROA not after:            Mon 05 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        192.26.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:c3:21:85:06:6b:54:aa:d6:ca:b2:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul 31 12:00:00 2022 GMT
            Not After : Sep  5 04:00:00 2022 GMT
        Subject: CN=8891fbbe-691e-46c2-b012-b53f7104b5d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:30:53:a2:1a:27:02:05:66:85:02:2c:22:22:
                    47:20:47:9e:32:62:87:91:6d:05:2a:66:ef:ad:3c:
                    f8:7e:6c:7d:ef:7d:9b:1e:c6:96:ae:2b:33:79:8e:
                    81:da:6d:72:50:0b:9d:4a:3c:e0:7b:b7:05:22:0d:
                    ca:52:06:13:a9:89:f1:0d:af:2e:ff:0b:d4:dc:92:
                    d6:10:ad:ac:7e:b9:93:61:97:bc:58:b4:28:0d:e3:
                    c7:36:a1:7a:fa:0e:0a:4a:18:65:1a:5e:79:c7:7b:
                    ba:80:9d:e0:04:1b:ca:36:70:92:8b:3b:57:cd:7b:
                    07:72:b9:f5:6b:c5:ee:4f:18:57:06:cd:04:17:1f:
                    23:5a:38:b2:90:fa:7d:98:b7:d6:59:cf:ed:67:7a:
                    54:8c:0b:29:02:1e:3c:d0:f6:1f:90:aa:8d:f5:d5:
                    d2:02:82:82:ce:4f:b7:6d:6c:ee:e5:7f:fe:93:55:
                    2f:b5:2f:f8:30:17:bc:67:b3:29:e1:67:7e:ef:03:
                    fc:e5:30:98:76:3a:31:73:05:3a:7f:3b:06:45:ee:
                    87:a5:0f:53:d9:63:e8:fd:e4:53:30:9b:7b:f6:07:
                    71:56:df:b5:1d:a9:97:2b:09:d5:a4:79:59:1f:8a:
                    f4:80:89:70:65:64:e2:62:b8:78:eb:cb:85:48:d2:
                    af:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3E:3A:5A:1F:87:65:AA:75:C2:1E:05:4D:07:84:07:D3:D9:77:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/72a37cae-ca88-3d52-bb42-a773251082a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:cd:49:c9:f0:c0:9b:65:67:74:22:2d:fe:35:b7:77:9b:68:
         6d:d5:63:ac:06:0a:08:b4:65:62:b4:e2:7e:18:d1:69:e0:40:
         a0:23:8e:62:d8:2d:e6:d4:28:f8:2f:57:ff:9f:2a:ba:84:17:
         d5:91:d3:bb:56:4c:5e:2f:b9:e2:6e:e9:5c:51:7d:6a:e5:85:
         b9:ac:dc:9f:99:0e:6c:df:43:3e:80:e5:cf:b3:af:49:6a:5c:
         bc:08:59:14:ef:48:a4:af:d7:2e:7b:ef:3d:50:50:84:93:96:
         f2:ba:d8:56:77:b6:cb:6f:17:9e:9b:fe:5a:00:00:98:21:b1:
         38:38:81:4f:f9:3b:68:50:d8:fd:63:df:d8:a2:bb:f8:12:ea:
         7c:98:ba:fa:33:b0:93:e2:24:f4:54:cb:40:4b:99:d7:1c:ef:
         33:1f:8f:a9:61:c5:7a:04:ca:b8:74:18:30:7d:79:bf:e7:2a:
         e9:13:66:69:c9:81:7b:79:10:32:b2:86:3a:55:fb:bd:bc:8a:
         c8:5b:a0:13:ca:c0:93:67:e7:02:a7:37:19:5e:87:5d:ed:47:
         c2:be:77:38:69:7d:de:e9:d3:bf:22:48:83:2c:5b:cd:23:16:
         bf:29:10:68:cb:38:3a:7d:8a:12:77:d6:52:ae:9d:c7:63:16:
         cd:d4:b6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:32 2025 by rpki-client