Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/758b9803-4dc6-3e61-93da-77a6adc83097.roa
File:                     758b9803-4dc6-3e61-93da-77a6adc83097.roa (raw, json)
Hash identifier:          JfBX5mm1s1FEZNKmVJZ9/2OoB8shhr4V86NhFGGFzxU=
Subject key identifier:   7C:8A:14:BC:C2:F7:95:64:7B:0E:E3:21:30:29:FA:8E:1D:81:82:5C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F593D458E404080D796D4EEC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/758b9803-4dc6-3e61-93da-77a6adc83097.roa
Signing time:             Fri 23 Sep 2022 12:00:00 +0000
ROA not before:           Fri 23 Sep 2022 12:00:00 +0000
ROA not after:            Sat 29 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        165.129.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:59:3d:45:8e:40:40:80:d7:96:d4:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 23 12:00:00 2022 GMT
            Not After : Oct 29 04:00:00 2022 GMT
        Subject: CN=1db6713a-5e63-4073-a226-e83068234b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f9:bc:c8:9a:e9:52:f7:58:03:85:c3:43:fa:
                    aa:6e:fe:fa:84:c8:c8:f4:0a:1a:80:1f:3e:64:f8:
                    c4:13:e5:65:f0:25:c7:28:7f:a5:9d:54:7f:95:26:
                    fa:86:d7:4b:4d:3e:82:90:20:17:ef:e8:73:0e:55:
                    12:eb:a2:16:0c:95:3a:e1:21:63:58:6c:28:78:1f:
                    59:f4:9c:2a:e5:10:a8:f1:21:eb:c1:03:94:0b:2e:
                    d9:e4:a5:6a:f6:d2:a5:9e:cc:eb:77:da:3a:a1:58:
                    90:9a:a5:2d:68:9e:7b:32:6c:85:7d:27:05:59:56:
                    83:a8:0b:d1:88:c3:dc:aa:be:12:61:80:7b:44:3e:
                    b4:36:d2:b2:3d:e9:ab:f1:08:b7:3e:cf:36:92:ab:
                    d3:e8:b7:74:24:11:3f:48:d4:98:71:b8:c2:7f:ca:
                    6c:50:a7:eb:d4:b7:35:76:bf:58:27:01:71:46:41:
                    91:25:7e:94:f1:ad:f1:d7:62:38:7b:fd:56:35:59:
                    26:d1:e3:94:c9:13:6c:90:41:f7:b7:96:58:03:7b:
                    7a:44:dc:1d:14:2e:e1:df:5c:88:01:03:15:ec:93:
                    ed:2d:51:1d:8c:65:b9:d9:31:ce:e4:6c:98:30:4a:
                    31:fa:e5:cd:e5:e7:df:a7:86:e7:15:3b:7f:4d:f7:
                    09:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8A:14:BC:C2:F7:95:64:7B:0E:E3:21:30:29:FA:8E:1D:81:82:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/758b9803-4dc6-3e61-93da-77a6adc83097.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.129.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:2e:be:ab:d4:82:4b:b1:8e:5a:e5:d4:6a:e6:71:1e:86:ed:
         1c:55:3c:8b:44:0e:cb:85:de:01:2b:a7:8e:9d:03:55:96:4b:
         18:2e:6b:31:cc:02:af:4e:3d:9a:a8:a2:34:5a:51:61:da:c3:
         46:a2:ba:e5:8e:67:43:ab:de:b8:7f:21:0b:95:4c:a0:bf:4f:
         de:48:0f:13:eb:12:14:22:cb:e6:28:1f:4c:7a:2d:d6:2f:f4:
         8b:8d:94:fe:33:f9:45:45:6d:e5:02:f6:a4:b1:b1:3b:5f:f6:
         22:d2:c1:60:62:c4:b7:d0:a4:9b:83:b1:05:40:d7:2b:0d:43:
         e3:fb:e7:a4:52:e6:c0:3e:b7:c3:0a:db:48:f2:a5:05:e5:65:
         86:68:18:79:bb:91:a5:b9:17:66:3c:06:8c:f9:52:cf:6a:3e:
         8a:ed:d7:a9:e1:4d:19:82:63:ed:8b:c6:14:7f:b0:72:e4:1e:
         0f:01:75:2d:f1:6e:99:92:fb:7f:ef:68:b0:a9:9c:59:85:60:
         35:c2:6b:12:62:68:16:c0:64:eb:c4:a5:ab:4a:82:c4:c5:a2:
         3f:02:00:67:f9:1b:32:87:b8:c1:9c:27:dc:bf:f1:67:9f:d9:
         41:8b:ae:70:70:4e:c9:b5:2a:5d:30:dc:a8:3b:50:a8:17:c0:
         8d:e1:ee:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:24 2025 by rpki-client