Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/73d9740e-1ad0-3d18-bde2-3dace5ee64e4.roa
File:                     73d9740e-1ad0-3d18-bde2-3dace5ee64e4.roa (raw, json)
Hash identifier:          MdQOHygDJpdUGFcBRrLwQ1K+uCGf3PRObUgpLeklD6U=
Subject key identifier:   C2:C4:B9:7F:7C:6D:A2:D3:0D:BC:52:D5:B9:8D:EC:DD:E5:EA:25:17
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D5ABB4B4EE69C226C3E152B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/73d9740e-1ad0-3d18-bde2-3dace5ee64e4.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        138.240.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5a:bb:4b:4e:e6:9c:22:6c:3e:15:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=64ed4623-9926-43f1-8492-5df6f93a6023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9e:8b:98:33:de:90:98:ce:68:1c:3a:7f:fe:
                    4b:cb:1e:b3:9d:f6:e9:10:a0:c2:58:37:9f:bc:5c:
                    14:a2:67:68:1a:8d:46:07:fb:3e:0a:a1:76:a4:d5:
                    7b:d0:c9:03:ac:a2:4b:82:49:bf:8a:af:8d:9a:86:
                    6a:de:25:91:53:b4:ad:0a:4c:67:89:4c:cb:5c:c2:
                    88:19:a6:d9:64:c1:a5:c9:02:38:1f:88:8a:33:43:
                    1c:e6:22:50:ad:b4:d7:69:c7:bc:c4:a4:e6:5f:c3:
                    da:fe:37:f1:5c:51:c1:2c:de:02:50:65:b8:df:65:
                    7a:ba:8b:52:2d:26:d2:56:06:7f:1c:b8:13:82:45:
                    fa:2e:db:3c:17:68:8b:ee:d8:91:9b:f5:c7:d6:2f:
                    45:ee:27:b6:06:64:21:2c:3c:47:b3:88:f4:c9:39:
                    08:1a:a7:d8:21:fd:9c:c1:27:73:36:76:3f:00:9e:
                    87:19:e5:d4:c6:10:0e:15:1a:da:12:76:69:10:ce:
                    08:d6:a7:30:cb:f8:f6:10:d3:02:38:03:f3:e4:82:
                    df:ce:6d:c7:ef:b9:43:4e:a1:74:72:41:b9:6a:83:
                    dc:06:12:15:3d:05:6d:1c:c2:3c:c0:df:7c:cb:34:
                    2d:19:2c:58:20:13:7b:94:72:ab:13:08:57:3a:85:
                    4a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C4:B9:7F:7C:6D:A2:D3:0D:BC:52:D5:B9:8D:EC:DD:E5:EA:25:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/73d9740e-1ad0-3d18-bde2-3dace5ee64e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.240.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:b2:38:95:36:f0:03:e8:ce:9b:56:51:a8:e0:79:c5:27:a5:
         b6:6b:99:8f:b2:c4:d9:dd:26:b3:d7:75:61:8e:ac:3c:e0:e2:
         36:28:6d:a1:f7:a5:0e:7a:03:ca:85:ef:2b:02:b6:d0:9a:90:
         63:86:47:9f:8d:32:f7:a4:8d:bf:5c:06:b4:83:53:64:ca:20:
         c0:29:bb:c7:68:c1:b8:07:60:2f:b2:f8:b5:af:2e:0f:97:88:
         4f:3c:aa:78:63:ae:91:28:da:16:27:0f:f3:cc:a4:a4:df:5e:
         fd:c1:05:25:34:e5:06:fc:21:77:13:0c:21:03:ea:df:32:03:
         5b:e7:96:5e:c7:c6:0b:70:bd:59:ed:8d:ee:e8:61:9c:b3:5e:
         a3:3f:c1:21:e6:e5:ac:46:22:9d:6b:d1:a9:fa:2c:cf:ec:4f:
         6e:1c:d1:97:cc:78:7b:59:a2:25:fb:69:85:53:ff:ff:2a:eb:
         77:2e:c0:54:6e:50:df:90:bf:8b:b2:9b:6e:c8:c3:0e:55:14:
         16:a2:4f:a6:0e:08:b1:02:d2:58:91:34:b7:8a:e7:a4:b1:cb:
         87:3c:53:df:72:81:fe:0a:cd:33:13:ea:90:0f:75:0b:81:c2:
         c6:2b:73:aa:57:1a:b1:74:e3:f4:80:45:2f:92:5c:cc:92:61:
         ef:d8:b7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:49 2025 by rpki-client