Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a516c70-cf77-3c9a-a172-2377b9b2dcb2.roa
File:                     7a516c70-cf77-3c9a-a172-2377b9b2dcb2.roa (raw, json)
Hash identifier:          2YYZTk0H3PzQrL8DqDVi00mmFReIYVkGu+UA4eUBsdg=
Subject key identifier:   52:78:75:93:B5:86:C0:A7:7E:51:89:90:6E:FA:68:AE:B9:1B:23:76
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858401713DE174E39ABC6933A5E78
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a516c70-cf77-3c9a-a172-2377b9b2dcb2.roa
Signing time:             Wed 30 Nov 2022 12:00:00 +0000
ROA not before:           Wed 30 Nov 2022 12:00:00 +0000
ROA not after:            Thu 05 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        57.201.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:17:13:de:17:4e:39:ab:c6:93:3a:5e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 30 12:00:00 2022 GMT
            Not After : Jan  5 05:00:00 2023 GMT
        Subject: CN=e9b04442-7e57-4eb9-8456-44fba40d46bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0a:77:20:27:e7:a4:e2:62:1f:db:81:a1:54:
                    af:7e:8d:63:b4:30:e8:1b:c1:a6:f8:d8:86:fd:c2:
                    76:2a:c7:0f:83:d2:a4:9e:48:77:eb:3f:14:c8:bc:
                    4f:fe:0f:93:6a:72:cb:7c:b2:1f:ee:a7:4d:a5:28:
                    27:c0:e9:43:86:3b:83:a2:59:1e:6c:ab:48:69:0e:
                    63:2b:f8:1a:8e:16:ab:8f:76:cd:f4:b2:98:4b:ea:
                    36:d2:62:e6:18:ba:99:d8:e0:16:17:12:95:55:45:
                    10:20:89:54:d4:95:ec:ac:33:3f:4e:d5:10:da:86:
                    6b:62:d5:9f:9f:68:63:d5:70:a7:e1:2b:86:d5:bb:
                    a5:0e:8e:ad:a3:34:23:e6:c1:cb:d4:48:07:c1:7c:
                    c3:e1:c8:01:b6:6d:5f:1b:07:61:df:d8:a3:e7:df:
                    51:3a:86:64:cc:73:08:53:64:f5:d5:81:53:62:1c:
                    8c:3e:cb:9a:b1:05:ab:25:d2:d3:86:31:6f:25:b0:
                    e3:16:fb:a8:4a:c3:17:d7:bc:22:71:0c:a4:88:fa:
                    41:3b:72:1c:b9:44:92:12:87:ee:48:e1:1f:c7:09:
                    3f:f4:f4:db:a0:40:c7:2a:61:7c:e1:d5:91:41:5a:
                    d6:f6:a0:3c:bb:c8:2c:67:a8:7f:17:04:a3:f7:82:
                    ae:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:78:75:93:B5:86:C0:A7:7E:51:89:90:6E:FA:68:AE:B9:1B:23:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a516c70-cf77-3c9a-a172-2377b9b2dcb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.201.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:b1:e3:72:1d:c8:07:4d:ff:0a:6f:b4:45:73:8a:16:17:34:
         df:1a:33:88:e4:39:0b:43:b1:26:73:90:48:b8:3e:fc:e0:fe:
         5e:c7:64:d8:b0:c8:9c:92:51:07:8a:0c:e4:7e:0b:48:b1:1e:
         b7:6e:ce:f1:1d:6a:ea:37:35:fc:8b:1c:8c:cc:a1:26:dc:d6:
         89:43:ca:b0:2c:43:b9:11:f1:36:96:84:a8:7e:f2:85:7b:f0:
         cc:a1:91:f1:85:a9:90:47:98:f4:2b:66:aa:5d:e7:70:14:dd:
         6b:34:da:3f:00:ad:f8:da:69:9d:c5:cc:15:5b:c7:ac:35:da:
         cd:88:1b:a3:75:71:9b:70:e6:9e:fb:7b:0f:ea:be:c8:a4:73:
         a4:ae:c4:15:78:58:ea:75:cb:81:3d:06:d4:41:5d:1b:0f:28:
         43:08:76:eb:e5:90:7c:27:46:44:ef:61:f6:19:50:ae:34:1a:
         14:3e:91:9d:0b:67:fd:6a:fd:e5:3e:7c:89:09:39:11:85:92:
         8a:8e:06:18:07:6d:e0:9c:0e:d9:c3:86:37:ad:5b:ff:91:1a:
         76:ff:49:c5:e1:2b:79:e3:d7:3c:77:d4:9d:91:68:9b:a7:81:
         b4:59:58:c4:de:c6:cd:0c:09:85:0c:90:51:18:0e:ae:5c:c3:
         d8:9c:51:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:39 2025 by rpki-client