Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7bf4bbfb-fe4f-3c9c-9381-a25af9dd21db.roa
File:                     7bf4bbfb-fe4f-3c9c-9381-a25af9dd21db.roa (raw, json)
Hash identifier:          ezrNHJpJ7WWjf1r1lgfDX9uTds/ZfrPeKzN/yVlUDro=
Subject key identifier:   48:4D:CE:FC:CA:05:F9:3C:18:64:B4:74:5C:D9:A7:82:17:4A:5A:5E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FEA4B298FE8E0D97A9C8AB080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7bf4bbfb-fe4f-3c9c-9381-a25af9dd21db.roa
Signing time:             Mon 14 Nov 2022 12:00:00 +0000
ROA not before:           Mon 14 Nov 2022 12:00:00 +0000
ROA not after:            Tue 20 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        151.148.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ea:4b:29:8f:e8:e0:d9:7a:9c:8a:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 14 12:00:00 2022 GMT
            Not After : Dec 20 05:00:00 2022 GMT
        Subject: CN=7f4579f1-8fc4-4608-8c4b-de3e52f67ce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cb:81:e3:c7:7e:1b:a5:2b:81:23:96:7a:85:
                    a5:47:f4:0a:84:a5:d2:85:f3:cf:32:00:ef:73:22:
                    41:64:22:3b:15:b6:a1:0f:78:36:02:ea:c4:a2:e2:
                    54:21:82:49:35:c2:c2:57:0f:f6:98:18:00:be:4a:
                    dc:b7:21:ef:15:be:b2:d1:48:82:60:9f:cb:d0:a1:
                    8f:7b:7d:aa:59:06:64:75:c1:cc:dc:c8:23:19:c6:
                    06:bd:58:b2:7e:9e:6c:8e:25:0b:2a:36:e8:d5:49:
                    37:25:ea:61:9a:27:2d:63:6b:d1:fc:94:73:68:7d:
                    e8:4b:39:e2:c3:ad:f7:53:ef:8f:70:1c:f8:dc:19:
                    7a:46:c9:73:66:b5:93:6b:7e:82:38:f4:aa:4d:ff:
                    d2:6b:45:20:ff:80:38:4d:a6:1f:64:a6:86:8b:ba:
                    c6:97:29:c1:5c:45:02:b9:31:6b:22:12:6f:b1:ae:
                    a4:75:92:65:94:b1:a8:66:55:1a:32:be:0b:0e:e0:
                    fc:d7:c9:d7:d2:65:b9:da:4b:f2:e2:1c:d9:3d:f9:
                    39:24:e3:d5:fb:06:6a:2c:00:06:7f:8f:8d:c1:49:
                    ec:e5:55:0f:87:20:d8:81:49:eb:26:21:83:4a:95:
                    b7:20:61:ed:20:6d:f5:71:4b:0d:fe:1c:07:6f:79:
                    11:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4D:CE:FC:CA:05:F9:3C:18:64:B4:74:5C:D9:A7:82:17:4A:5A:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7bf4bbfb-fe4f-3c9c-9381-a25af9dd21db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.148.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:be:c7:29:b1:b6:3d:aa:30:54:56:bb:63:aa:13:19:04:89:
         80:fd:ca:4e:77:dc:46:92:e8:27:e1:75:d6:43:65:55:b4:4a:
         c9:3f:ee:bb:14:1f:7a:b4:cd:59:ef:57:c7:90:39:29:84:aa:
         bc:35:da:46:a6:b4:54:1a:9c:4d:a5:61:48:6f:8c:7f:1a:5e:
         d2:4a:0b:82:3e:9f:6e:72:34:09:42:60:62:93:4d:3d:cb:84:
         bb:34:12:69:ea:93:83:8c:2e:b8:06:f4:03:18:db:ac:a7:51:
         33:95:5b:b2:26:6f:50:ca:ef:54:bc:a3:85:83:2b:c2:f1:86:
         9c:93:89:db:7b:c9:12:96:40:8d:7e:cb:23:19:6f:93:dc:36:
         cc:59:3f:cf:ec:5f:0f:11:cc:34:15:86:71:4a:4a:b4:d4:12:
         e6:34:86:1e:40:0b:1a:32:ef:79:63:f9:9c:20:0a:a1:31:be:
         dd:43:3b:c7:f3:a8:d8:3a:6a:f6:1b:3c:91:df:75:b4:29:e5:
         63:c1:98:30:d4:d6:54:0d:1d:37:7c:6b:d2:83:1f:05:29:ea:
         16:4d:c5:0b:ab:b2:34:f2:28:11:24:87:b6:cd:c7:8e:9d:d3:
         ac:0f:12:90:3b:e8:57:00:44:39:c6:0e:e0:74:83:bf:d4:06:
         44:a6:93:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:08:19 2025 by rpki-client