Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7339abd5-1152-3eae-bac4-892ba6ba273f.roa
File:                     7339abd5-1152-3eae-bac4-892ba6ba273f.roa (raw, json)
Hash identifier:          pXZz4bty4qI3/Ryxo9+GuIBY5s9Y44EAKtZI86nBzFY=
Subject key identifier:   E7:3A:36:24:9B:4B:FD:40:20:06:6D:C6:2B:36:04:30:12:A5:BC:27
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FCFAF5D1459730131FFA5EB00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7339abd5-1152-3eae-bac4-892ba6ba273f.roa
Signing time:             Fri 04 Nov 2022 12:00:00 +0000
ROA not before:           Fri 04 Nov 2022 12:00:00 +0000
ROA not after:            Sat 10 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        44.192.0.0/10 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cf:af:5d:14:59:73:01:31:ff:a5:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  4 12:00:00 2022 GMT
            Not After : Dec 10 05:00:00 2022 GMT
        Subject: CN=b047f96e-55c5-42d7-8054-bf667f428b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ac:4b:95:81:7f:56:dd:56:ac:ca:92:21:f9:
                    0b:ec:1b:80:c3:dc:ad:5d:1d:bf:6e:aa:d1:e5:35:
                    07:54:74:54:18:63:97:21:a1:7c:34:18:b0:d8:63:
                    82:39:fe:3b:ef:b2:eb:90:01:5c:76:66:e7:3f:20:
                    15:ec:3c:01:7f:af:5d:da:70:d0:51:70:91:b9:8b:
                    9a:b1:de:af:c3:17:89:6a:fd:21:57:fd:f3:65:fd:
                    e6:1f:7b:09:12:88:ba:4e:e9:d8:78:03:bb:bc:8c:
                    e0:cd:de:48:a8:39:89:79:37:fd:10:b0:25:33:af:
                    4b:cd:ab:47:a6:3a:b2:de:94:28:17:3f:96:9a:0b:
                    b5:c4:74:cb:4b:3f:5e:1b:1b:03:a6:48:ba:5d:e5:
                    66:3f:15:25:51:6c:8f:a8:63:5d:77:01:29:1a:49:
                    d4:11:15:68:94:ba:4d:7c:bc:f0:ae:63:ad:c4:6c:
                    8b:9e:28:56:1d:48:6e:a6:2a:2e:5a:db:25:cb:f7:
                    57:8a:a9:0d:c2:1a:2b:e8:b7:6e:85:24:96:3a:5c:
                    50:be:f0:61:fa:b2:ba:0a:d2:e5:b6:86:b9:9f:05:
                    88:6c:60:6e:0b:9b:5f:4b:e8:8f:de:a7:de:b0:d5:
                    d8:69:55:a1:f9:ba:43:09:6f:17:4c:a7:22:37:11:
                    4a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3A:36:24:9B:4B:FD:40:20:06:6D:C6:2B:36:04:30:12:A5:BC:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7339abd5-1152-3eae-bac4-892ba6ba273f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  44.192.0.0/10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:50:55:66:66:bb:7c:c6:0b:c4:79:80:32:b2:06:2f:b9:2c:
         1e:c1:a2:ed:29:9e:91:d3:98:2b:aa:2f:42:a5:99:e9:6a:99:
         d4:9a:00:86:8e:fb:1e:d8:4a:a0:b7:33:49:56:1d:0f:bb:38:
         1f:c0:25:b7:34:52:99:0a:55:37:8d:85:4d:c1:c9:d0:34:f4:
         28:3f:7f:3a:09:39:47:84:b3:c1:3f:16:1b:21:30:a0:dd:82:
         39:23:73:60:36:2d:b1:26:87:5c:24:05:c1:3d:a9:6c:ab:ad:
         9d:ab:35:3d:c7:46:a3:2f:cd:af:cb:f1:27:ff:b2:24:bf:67:
         29:6e:04:ab:c1:69:66:aa:08:ba:2b:3b:31:ff:55:1b:5d:1f:
         e1:f6:f6:4d:db:1c:ab:39:ca:1e:bc:5a:cd:05:3d:4e:ae:1f:
         3a:42:1e:ea:c6:6a:87:f7:58:e5:1e:cf:c0:bf:fa:d7:58:7c:
         58:9e:39:f5:78:58:22:45:79:43:f9:43:08:00:10:aa:79:8d:
         6c:d2:75:6d:5d:90:64:12:d9:3f:e5:e9:48:41:28:4c:43:21:
         8e:87:15:b8:13:88:50:b0:9f:c8:ed:ed:12:76:c0:91:0c:0f:
         9d:a5:98:e4:c0:7a:46:81:27:56:7c:db:55:2d:1a:56:1d:61:
         55:28:62:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:14 2025 by rpki-client