Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a5205cc-ef47-3f34-8625-a138e209b21d.roa
File:                     7a5205cc-ef47-3f34-8625-a138e209b21d.roa (raw, json)
Hash identifier:          Udpvtzen+GzUxSdumVyaeBFTgHPVjG44Fx5v1hmnAuk=
Subject key identifier:   EE:E1:14:97:DE:C3:E3:A6:1E:75:BE:C6:0B:35:A8:9C:CD:F5:8D:24
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583CDBF10D19C709FA54405CCD80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a5205cc-ef47-3f34-8625-a138e209b21d.roa
Signing time:             Tue 08 Feb 2022 05:00:00 +0000
ROA not before:           Tue 08 Feb 2022 05:00:00 +0000
ROA not after:            Tue 15 Mar 2022 04:00:00 +0000
asID:                     22394
IP address blocks:        204.126.24.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:db:f1:0d:19:c7:09:fa:54:40:5c:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb  8 05:00:00 2022 GMT
            Not After : Mar 15 04:00:00 2022 GMT
        Subject: CN=6f08b653-bec0-4946-92a1-aee46334c3db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:72:cc:26:33:0e:94:61:b9:eb:6c:e3:a2:f1:
                    3f:82:26:e5:31:56:24:21:34:e3:7e:5a:af:e1:a1:
                    69:05:92:ba:fb:40:f2:5a:cf:6a:82:a5:f0:36:00:
                    98:b3:db:e8:ad:75:48:7e:ac:2d:01:b8:df:0e:74:
                    cf:09:bf:b6:c2:06:e2:3e:36:53:2b:7a:d6:32:b1:
                    cc:00:f4:97:55:1d:45:2b:2d:ac:25:f0:fe:a7:67:
                    33:ff:d5:0d:2f:1c:95:c9:65:6f:af:ea:49:74:df:
                    95:27:2e:bc:83:0b:e3:70:c3:c7:6d:ed:eb:8e:48:
                    82:5f:fd:bb:b2:cd:e1:03:5f:ca:64:38:e6:c6:6c:
                    e5:b1:91:2f:fd:e6:25:88:ad:ff:f1:24:45:a4:d4:
                    0e:86:1b:95:64:ef:c6:58:d2:85:fc:8d:e9:aa:98:
                    fa:87:95:ef:39:d4:b0:88:ba:a1:e0:00:13:26:76:
                    31:65:e3:89:2b:fa:9f:e1:0e:6c:5c:cd:42:52:af:
                    bc:27:0a:bd:87:3e:28:a7:3a:49:2a:39:0c:87:0d:
                    93:ca:d6:7b:68:3b:9b:54:79:a2:c3:42:77:b7:90:
                    c9:4d:2c:90:40:fe:8f:13:fd:3e:2b:64:19:93:56:
                    62:44:41:fd:a0:65:f4:45:f4:03:3a:ff:8f:5f:ab:
                    d9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E1:14:97:DE:C3:E3:A6:1E:75:BE:C6:0B:35:A8:9C:CD:F5:8D:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a5205cc-ef47-3f34-8625-a138e209b21d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.126.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:59:ee:48:2e:74:61:09:c4:8b:6c:93:75:30:e5:31:68:cf:
         92:6d:36:26:91:a4:9b:b3:2e:d8:df:5d:85:cd:4e:95:74:38:
         26:dd:c0:95:40:28:38:ad:ac:dd:54:a8:2b:85:ec:67:f0:f3:
         55:ba:73:34:9e:fc:95:51:f7:c7:05:58:8b:5b:eb:99:e9:ce:
         fb:09:cb:2e:3a:db:5d:15:ff:62:4e:ba:33:e0:8a:4a:0b:f3:
         f8:3e:29:87:fd:4d:58:2a:26:1d:a7:f7:b4:a8:e9:aa:7e:11:
         85:b9:e0:ce:75:c3:51:6d:c3:cb:db:84:29:35:82:4c:eb:ee:
         42:d3:a3:7f:45:1d:5d:c5:ed:d8:74:93:cc:26:bd:55:5b:ef:
         ff:a3:0c:84:02:03:32:6b:87:31:8a:5f:cd:fc:8f:38:bd:36:
         f6:2a:0c:bf:6b:3f:36:a6:20:95:ad:56:e0:33:0e:df:25:b8:
         ad:13:96:40:38:6a:d5:9e:13:ed:f3:38:0f:b2:4a:7d:b3:6d:
         2d:32:56:29:56:f5:26:61:67:4c:23:05:87:9b:07:05:c5:c7:
         39:77:43:4a:47:be:18:3e:6c:2a:57:d0:9f:1c:e1:87:73:60:
         d9:cc:c7:0b:e2:ef:f3:bb:85:c1:2b:4f:01:77:0a:9e:79:81:
         6e:5f:d2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:17:19 2025 by rpki-client