Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a2b568e-ce40-3296-9101-23d6ea70a4de.roa
File:                     7a2b568e-ce40-3296-9101-23d6ea70a4de.roa (raw, json)
Hash identifier:          PaVvnHIe87Vo1z+g7G1r7bGsfKEl+kdH5L0LDme6dwk=
Subject key identifier:   A9:17:B6:1B:4C:26:AA:48:5D:34:F6:A3:49:49:B6:55:0F:3C:17:D8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F9C18BDCCC5B8425B63DD8200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a2b568e-ce40-3296-9101-23d6ea70a4de.roa
Signing time:             Mon 17 Oct 2022 12:00:00 +0000
ROA not before:           Mon 17 Oct 2022 12:00:00 +0000
ROA not after:            Tue 22 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        161.46.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:9c:18:bd:cc:c5:b8:42:5b:63:dd:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 17 12:00:00 2022 GMT
            Not After : Nov 22 05:00:00 2022 GMT
        Subject: CN=6ee9273e-e004-472d-b48c-c840ef1887c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:df:23:c4:78:de:c9:f5:8c:ec:2a:d2:5a:42:
                    68:fb:15:03:0a:3c:61:1f:07:89:dd:87:01:62:c3:
                    fb:33:d4:eb:3a:c0:76:7e:02:12:ea:14:63:86:ca:
                    d7:ec:3b:8e:6d:b1:4a:fe:15:65:bf:fd:a7:47:77:
                    6f:d7:73:1b:4e:fa:8b:1e:99:17:6f:ce:a2:7d:06:
                    9c:e9:a7:c8:e0:c4:6e:1e:de:0b:b6:39:f6:e0:4c:
                    6c:e7:e0:42:54:6e:ac:82:0a:a4:29:4b:a1:29:fd:
                    89:bd:c2:a3:04:45:95:d0:7a:20:ff:35:3d:26:e8:
                    06:8e:85:6b:a0:0b:cd:86:78:79:ba:fa:54:ff:df:
                    fa:79:22:62:42:67:06:2a:ad:1b:ec:74:90:69:9b:
                    0f:de:8e:45:e8:d6:4b:5b:ef:e1:d3:7e:12:89:27:
                    b7:3e:12:ba:a7:68:95:d9:e8:6d:bf:71:df:0d:31:
                    56:30:16:85:86:0b:3d:85:26:0c:0f:b3:af:44:57:
                    92:8a:18:c7:a0:4a:2a:e3:a5:fe:92:5e:bf:d6:d6:
                    08:20:84:0e:32:51:e1:be:c0:1e:b8:17:8a:47:4f:
                    86:da:6c:b1:f6:e4:c6:8f:5e:ff:0d:1b:dd:06:7f:
                    44:9a:47:bc:13:d5:bf:e0:31:88:2e:fd:54:ba:97:
                    ba:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:17:B6:1B:4C:26:AA:48:5D:34:F6:A3:49:49:B6:55:0F:3C:17:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a2b568e-ce40-3296-9101-23d6ea70a4de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.46.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:1c:d4:1a:43:14:07:58:a5:4c:f6:ab:20:1c:3d:71:f5:8d:
         11:f3:be:dd:68:50:f8:0c:d7:b5:fc:d8:54:c8:f4:12:b7:be:
         ba:5a:e3:1e:be:9c:43:53:00:07:b2:85:a7:d7:a5:30:d2:1e:
         a0:5c:b6:07:8c:1b:c0:cb:17:20:55:ee:75:55:fb:cc:67:95:
         62:fe:fa:54:dd:9e:01:84:6b:5d:9d:bc:1b:95:ed:09:60:ee:
         e0:36:7b:14:b0:3b:39:05:86:8a:82:f1:52:8f:76:d9:a9:c0:
         d6:85:80:99:96:50:30:53:50:2d:7c:44:e2:c2:96:db:31:7d:
         56:41:13:05:6f:a2:79:d4:db:95:eb:bd:f2:b0:27:77:2f:cc:
         63:7b:1a:55:9b:31:02:60:a8:d4:49:05:0a:47:3e:ce:a8:1a:
         e0:37:6f:79:89:13:2e:81:29:d1:7e:f4:0a:55:6c:4e:3a:56:
         f0:8a:c5:cc:96:27:9c:9d:d8:47:41:f9:5a:34:e2:ca:b4:d8:
         ba:5c:1a:74:77:fb:f9:98:90:45:30:24:20:d3:81:b9:20:85:
         99:fe:73:63:1f:85:67:68:e6:51:79:6d:e3:5a:e2:55:57:6c:
         3c:bf:3e:69:24:95:cf:c0:f8:01:f8:38:d6:43:a2:df:ac:cd:
         a6:1a:37:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:29 2025 by rpki-client