Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/79ef9b68-beed-3562-a080-f5d0efb846a7.roa
File:                     79ef9b68-beed-3562-a080-f5d0efb846a7.roa (raw, json)
Hash identifier:          0EYPam+5Z1Wla3vEo4BqgzhJFkMyncbr/gYhgfPqMe0=
Subject key identifier:   22:00:7C:0C:C9:98:FA:2D:4A:CD:23:08:CC:9C:01:29:9C:37:01:45
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E6E78F682A1DC830ABE1EA280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/79ef9b68-beed-3562-a080-f5d0efb846a7.roa
Signing time:             Fri 01 Jul 2022 12:00:00 +0000
ROA not before:           Fri 01 Jul 2022 12:00:00 +0000
ROA not after:            Sat 06 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        108.156.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6e:78:f6:82:a1:dc:83:0a:be:1e:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul  1 12:00:00 2022 GMT
            Not After : Aug  6 04:00:00 2022 GMT
        Subject: CN=be5cfe59-aae4-4c20-b677-63ba99ad0ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7a:73:fe:bf:82:10:35:7f:14:67:f8:8c:53:
                    a8:5e:68:fe:1d:3c:bc:4e:93:90:bf:bf:69:4a:bb:
                    bb:c2:5e:a0:85:f1:77:15:8c:15:70:54:f6:e4:18:
                    6d:03:bc:8c:be:10:04:5a:ac:2f:ca:c5:d1:28:83:
                    a1:21:11:1f:8c:45:52:d4:b2:27:8b:f6:7e:8e:ad:
                    44:12:0f:e7:4c:9e:35:bc:2f:fe:e9:89:15:ab:26:
                    a6:00:c5:53:7b:62:2b:4b:bf:bc:9e:e1:98:fc:10:
                    f8:73:53:46:e2:6c:49:a1:b1:49:13:1e:fe:8e:3c:
                    c1:0b:3d:3c:df:26:cd:5b:54:ed:94:03:60:ea:c0:
                    ac:51:77:9c:1b:d1:fd:f3:c6:4a:aa:fe:b7:ff:a2:
                    9b:f0:33:8a:ff:b6:bb:78:9b:e8:3f:36:0d:f8:10:
                    98:bf:e1:84:f3:66:74:18:1f:ca:53:ff:ce:04:fc:
                    ec:72:0d:9e:71:8d:7d:0e:d9:57:f4:51:ae:65:5e:
                    10:3a:0f:f8:35:bc:f5:4b:22:7d:57:a5:d5:b3:b0:
                    66:0d:c1:a6:bf:8c:14:95:97:a0:70:7e:c8:9e:f6:
                    49:f8:9c:13:b4:a3:3a:15:b9:f1:72:16:ec:c0:90:
                    b7:cb:1c:85:16:2d:88:92:21:3b:a3:8e:ed:0a:97:
                    ae:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:00:7C:0C:C9:98:FA:2D:4A:CD:23:08:CC:9C:01:29:9C:37:01:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/79ef9b68-beed-3562-a080-f5d0efb846a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:a7:11:7f:ef:28:e1:76:c4:68:29:eb:5a:5d:69:1f:bf:6f:
         69:8f:18:65:2a:40:95:93:28:0a:81:db:a2:cf:79:e9:74:be:
         c8:f5:b3:eb:ee:c7:09:0f:ba:86:16:7c:bc:69:d9:f2:2c:29:
         6c:e4:86:4f:67:9c:31:ad:0b:0d:bb:9f:9e:b4:4e:95:d1:6a:
         bf:50:2a:13:fa:ac:11:14:09:f5:cb:f4:f3:85:5d:a6:78:75:
         b4:76:a5:d9:72:16:f8:50:79:b7:5e:ea:86:2c:d8:af:17:b0:
         1b:ad:87:dd:98:32:9f:00:cb:0f:f4:fd:a9:76:62:ee:33:96:
         57:7b:c8:99:ff:e4:51:e6:ad:62:8d:83:b6:22:1e:5d:bd:99:
         92:ac:9b:a6:6e:76:82:20:c9:84:ca:63:0a:0e:82:9e:d1:dd:
         f3:9a:b3:2f:1d:be:b2:92:32:c7:21:19:27:64:b7:aa:5a:3d:
         b8:5c:85:0c:e8:9c:f6:1c:6e:1e:5a:13:f4:9f:e3:a3:46:8d:
         79:89:79:90:a4:5d:4a:a7:9b:8a:06:cf:c6:77:09:22:14:4d:
         4e:09:a7:7c:95:ff:01:3c:87:0a:3f:b3:f9:b3:c1:37:c5:46:
         68:4a:a9:20:ac:c6:75:cb:4c:64:6a:87:6c:7c:91:3d:b0:6d:
         01:5a:0e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:02 2025 by rpki-client