Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d95f65d-4fb9-356d-9eb2-b103d180bb04.roa
File:                     7d95f65d-4fb9-356d-9eb2-b103d180bb04.roa (raw, json)
Hash identifier:          Ej/1XprOACyssTrt1BiCXmCKqkOoDril+zFVikTi9SA=
Subject key identifier:   72:89:8C:FF:85:28:AE:A4:83:9E:06:F8:69:77:F4:E7:4D:58:FF:2F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584064C7F6D96343FA5FCA93BA00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d95f65d-4fb9-356d-9eb2-b103d180bb04.roa
Signing time:             Wed 28 Dec 2022 12:00:00 +0000
ROA not before:           Wed 28 Dec 2022 12:00:00 +0000
ROA not after:            Thu 02 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        40.166.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:64:c7:f6:d9:63:43:fa:5f:ca:93:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 28 12:00:00 2022 GMT
            Not After : Feb  2 05:00:00 2023 GMT
        Subject: CN=565acbe9-5b72-4736-816f-74199aa5dd8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2b:80:a1:61:f7:d0:7c:ce:a7:f9:69:9d:d9:
                    e0:8c:d7:5a:5d:07:70:2c:2b:c1:1d:bc:c8:dc:de:
                    30:b7:a2:18:dd:c8:a3:48:96:b0:03:c9:60:af:c4:
                    af:ef:42:11:aa:eb:4b:ad:f3:47:2e:78:c0:ea:9b:
                    0b:4b:07:2b:e7:12:1d:ef:71:c0:3c:18:2e:30:0c:
                    7e:30:f3:f4:6b:3d:00:f5:03:2e:fd:e8:a0:df:f6:
                    12:08:99:3d:53:97:58:7a:c0:2e:fb:1e:e5:12:8c:
                    6e:c8:99:68:4b:f6:c0:17:30:dd:36:c9:14:e4:c0:
                    b1:12:e1:09:cc:a5:1c:20:99:62:4d:a4:e2:74:45:
                    ee:a4:19:9f:05:a3:c5:c2:cc:26:5f:dd:c3:16:98:
                    32:a3:20:88:d8:a2:eb:2e:be:2d:d8:5b:f9:0a:79:
                    3c:14:4b:6c:b9:b0:70:03:64:0e:ad:7a:b2:47:b7:
                    e3:1c:80:bd:20:31:12:1a:c9:bc:ed:60:67:a2:b8:
                    d9:ba:c0:e9:42:8f:29:e4:1c:fd:20:6a:e6:19:04:
                    9f:5a:b0:be:f6:7d:cd:9f:f5:98:8d:0c:c1:a1:3d:
                    09:b6:80:3a:2d:13:c7:6a:59:c4:29:16:ec:96:7e:
                    97:65:8a:c0:3d:cb:b7:b0:e5:66:38:10:eb:4b:92:
                    85:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:89:8C:FF:85:28:AE:A4:83:9E:06:F8:69:77:F4:E7:4D:58:FF:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d95f65d-4fb9-356d-9eb2-b103d180bb04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.166.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:4b:32:b4:0a:33:9b:b2:f8:e0:d2:ff:88:f2:09:d0:30:03:
         8c:a8:ad:bf:90:6c:c8:e0:4c:38:cb:43:9a:1f:4f:09:b7:80:
         7c:7b:5f:bb:dc:0a:18:b1:d6:a2:78:fe:b3:bd:36:74:6d:ae:
         2c:61:32:d9:99:9f:ff:51:6d:c7:77:1c:36:1f:50:f5:10:81:
         f0:4c:4e:eb:9e:6d:b2:e2:ff:c6:a5:e6:82:bd:c0:f6:5f:87:
         c5:bd:c0:7b:5d:cc:a1:0a:6b:05:32:d9:1a:d8:02:a0:10:e6:
         bd:5a:84:94:e7:c8:1d:da:ab:84:f6:f5:51:a6:33:86:46:c5:
         9e:7c:9b:dd:97:5b:97:3c:d4:1c:72:bb:e7:e7:3e:c4:b6:c0:
         9e:93:d1:eb:32:c5:93:19:74:43:8a:bf:9e:10:6f:eb:2d:cf:
         72:ab:59:c7:80:65:57:6a:2b:a0:5f:4d:1e:5d:e7:91:ff:c6:
         7d:92:5d:d9:53:9b:70:b7:62:5b:44:30:f2:b4:dc:9c:c8:5f:
         6c:64:d2:4b:9c:ac:5b:70:04:ac:0c:c7:77:6d:a0:62:79:aa:
         00:53:23:af:da:5f:fd:af:06:7b:fa:f2:a5:fd:fb:a5:8d:b0:
         ff:da:48:f2:1d:ea:bc:88:af:3f:a1:11:61:3e:5f:3f:a9:44:
         8f:b9:55:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 23:15:22 2025 by rpki-client