Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/75630257-35ba-3f68-ab65-656bec95d357.roa
File:                     75630257-35ba-3f68-ab65-656bec95d357.roa (raw, json)
Hash identifier:          wDMZG2Zk7w82OYES+ONJBFOV+MQ74g+YC9rVBtImIYQ=
Subject key identifier:   B4:8C:0F:6F:05:DF:5F:18:A1:83:2A:A3:1D:BF:11:B3:45:46:D5:A8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EFEC522D35B1D380EA39657A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/75630257-35ba-3f68-ab65-656bec95d357.roa
Signing time:             Mon 22 Aug 2022 15:39:07 +0000
ROA not before:           Mon 22 Aug 2022 15:39:07 +0000
ROA not after:            Tue 27 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        143.227.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:fe:c5:22:d3:5b:1d:38:0e:a3:96:57:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 22 15:39:07 2022 GMT
            Not After : Sep 27 04:00:00 2022 GMT
        Subject: CN=243a6049-872e-4e62-80a4-64c163191af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:57:88:23:02:7d:83:27:ec:50:5f:52:a1:39:
                    cf:33:ad:62:01:4f:3d:a0:51:b9:43:1e:67:a1:bd:
                    65:9f:42:ab:37:e3:b5:6f:1d:23:b3:fd:33:35:4d:
                    4d:67:f0:70:df:71:4f:a5:e4:f6:13:7b:22:41:a6:
                    c5:d8:4f:cc:dc:94:c4:98:eb:2b:2c:33:2e:0c:32:
                    b6:a8:f4:ba:34:5a:d9:64:0b:24:45:80:14:ad:e2:
                    07:8d:3e:38:1d:70:7d:d4:e3:ad:74:9e:6d:1d:3f:
                    d8:0a:bd:9f:27:39:a4:a5:54:b8:6e:8c:1c:87:c8:
                    34:76:c1:01:db:4f:f0:c9:e7:70:ce:aa:62:fb:41:
                    f6:23:5e:b9:1a:86:4f:19:26:73:1a:47:f1:ef:6b:
                    a3:2c:49:26:3e:33:a2:42:d5:66:f0:a4:1f:68:5c:
                    b2:17:49:95:7a:f1:83:b6:f6:26:31:f4:ef:8a:9e:
                    ed:1a:e9:ca:c3:6e:2d:b8:b1:e3:80:18:67:2d:1d:
                    79:23:57:20:41:97:f7:07:89:0f:1d:22:78:07:b6:
                    85:59:2e:40:79:8a:0f:c0:22:f3:2d:cc:6f:ab:f1:
                    d8:8c:f0:61:d4:89:9c:12:06:0f:f9:bc:e2:b6:d8:
                    a1:57:0f:83:7c:95:17:de:68:50:39:00:bd:a7:7c:
                    c8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8C:0F:6F:05:DF:5F:18:A1:83:2A:A3:1D:BF:11:B3:45:46:D5:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/75630257-35ba-3f68-ab65-656bec95d357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.227.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:42:1b:f6:19:78:84:bb:d0:2c:84:81:22:96:16:2a:63:ec:
         67:3f:78:72:8f:e0:e4:10:ef:99:10:78:61:0b:85:e5:f5:85:
         6e:71:72:26:ac:ab:27:8d:79:ed:f9:19:3b:04:14:ed:cb:1e:
         93:51:c9:69:2d:b3:7d:d3:65:d5:b0:e4:7a:0b:54:e2:49:4c:
         34:1b:2b:16:e4:f6:b8:c5:8a:4c:64:a0:9a:99:75:32:35:f6:
         f7:44:6c:3d:a6:30:d3:25:af:2a:dd:06:9f:e3:26:29:0b:15:
         2c:7b:a1:d5:df:5b:25:ec:bd:7c:9c:37:08:d8:02:ee:73:3a:
         fe:34:90:f8:5b:6d:1e:4e:a3:2b:01:bd:8d:53:ff:80:23:e8:
         a8:6f:ad:9c:ec:7c:0f:7d:10:c7:be:c6:e4:39:be:6c:2b:36:
         ba:4e:88:cf:87:8a:c4:ad:cb:7c:57:c9:4c:80:bc:27:67:79:
         9c:e7:9f:de:48:07:df:04:1f:83:aa:ad:7d:9c:28:ba:d6:b1:
         a3:d6:6c:8f:42:10:f3:54:25:f5:42:12:6c:ce:11:3d:23:a3:
         9c:3c:54:d1:e5:f1:f7:cc:17:88:a8:47:b1:a4:d2:ef:cd:33:
         d9:c7:be:2f:b9:92:7f:4d:3f:ee:67:36:5a:76:d8:f6:75:f4:
         c6:10:42:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:16 2025 by rpki-client