Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/740b9daa-5321-3019-b4ee-fb93fa6920a9.roa
File:                     740b9daa-5321-3019-b4ee-fb93fa6920a9.roa (raw, json)
Hash identifier:          VtCtZJtqU5smC1pconlzluH9kykLR3DcpflRt4H509A=
Subject key identifier:   47:3B:82:FF:21:8A:CD:5F:B0:66:D4:7B:2F:6A:CB:C8:06:74:92:3C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840058A9C95A5893ECA31D3C1C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/740b9daa-5321-3019-b4ee-fb93fa6920a9.roa
Signing time:             Thu 24 Nov 2022 12:00:00 +0000
ROA not before:           Thu 24 Nov 2022 12:00:00 +0000
ROA not after:            Fri 30 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        134.127.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:05:8a:9c:95:a5:89:3e:ca:31:d3:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 24 12:00:00 2022 GMT
            Not After : Dec 30 05:00:00 2022 GMT
        Subject: CN=8a209836-25e5-4432-8ee3-387822b6f1da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3a:40:e5:94:b4:1d:7a:3c:f8:f2:d0:6f:1f:
                    6c:df:14:cf:64:39:cf:b6:30:49:d4:05:65:12:f5:
                    da:ce:13:a8:51:bb:23:2b:24:ef:94:5a:b6:70:00:
                    94:a1:fe:d8:49:47:dd:4d:42:b0:65:b9:49:4a:3f:
                    16:95:ff:0e:d0:10:f1:1c:65:c9:d6:02:45:29:a0:
                    0d:c7:39:ae:f6:8d:c3:e0:15:e5:a8:a9:c2:c3:24:
                    8f:d4:cb:92:93:78:d2:2a:5a:c7:09:2a:06:35:cf:
                    61:33:ac:06:34:2a:39:f8:f1:73:75:13:99:75:63:
                    2f:f7:aa:37:ca:36:cb:ed:ba:fe:0b:d1:9d:5b:97:
                    a3:86:7a:09:a5:e0:f2:20:16:a8:c1:82:fb:b5:7d:
                    e6:da:b6:20:c7:ce:34:3d:7a:20:0b:7f:a0:81:47:
                    9f:d5:b7:39:38:ea:b3:0d:e6:f9:2b:87:0a:c8:3f:
                    00:11:90:0d:ed:31:35:bd:cb:7b:f4:bd:63:3a:ae:
                    69:c6:ce:0f:f1:b1:57:79:b7:92:99:c9:e6:7a:9c:
                    ce:75:17:6b:28:9d:97:6c:23:07:99:1b:b1:87:03:
                    50:61:6e:79:3d:ce:e7:7d:ef:37:2c:98:76:1c:ef:
                    3f:cd:06:ba:47:57:a4:04:3c:0a:2d:46:6a:c4:40:
                    0a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3B:82:FF:21:8A:CD:5F:B0:66:D4:7B:2F:6A:CB:C8:06:74:92:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/740b9daa-5321-3019-b4ee-fb93fa6920a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.127.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:69:38:18:bc:c0:f0:dd:a5:c7:64:5c:3b:d4:76:1e:19:0a:
         17:24:aa:3c:8b:f4:88:58:bb:16:e5:6a:4f:2f:3a:82:71:50:
         54:00:05:bb:af:e1:d2:6b:1b:66:7d:0c:78:58:a4:43:97:ea:
         e7:81:44:1b:0c:10:b7:a4:b8:56:4e:79:a1:65:0d:49:ec:a2:
         49:80:55:c2:62:f2:9a:7e:b4:c5:91:af:2d:8c:f7:e5:1b:cf:
         05:b8:e8:49:de:0f:c2:8c:d5:f2:06:72:cd:a9:63:d8:b7:48:
         f5:20:61:89:b4:2a:c9:09:e0:83:ce:ec:2e:ed:05:e0:1c:00:
         41:4e:84:4e:fb:01:fa:09:f8:3c:4a:09:21:bc:81:e2:87:92:
         75:74:e9:d0:82:c5:c0:6c:f4:5f:ba:dd:89:13:a7:b7:1a:60:
         9a:0e:44:e4:f3:66:90:b7:0f:90:1a:d8:de:05:68:40:97:4f:
         34:06:a5:c5:77:5e:db:91:51:ce:54:fe:0a:67:a1:f4:2f:b5:
         12:81:f8:dc:25:24:7a:71:91:39:ba:3e:38:e9:82:fe:69:23:
         b7:e3:fd:fb:5f:c6:40:b4:65:0b:71:9f:3e:d9:4b:cb:47:af:
         d5:5a:68:9a:fc:b8:ef:4d:fd:75:08:e8:b6:20:d2:7c:9e:f3:
         4e:ed:d1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:57 2025 by rpki-client