Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7f31af1d-c548-33bb-9967-7f5045d95526.roa
File:                     7f31af1d-c548-33bb-9967-7f5045d95526.roa (raw, json)
Hash identifier:          UEFZ+1CU47t99KonIDv5P7ds273uY5ms8ouyInj0L3k=
Subject key identifier:   D1:22:B0:E2:29:34:AE:CF:30:6C:05:66:B0:76:08:BB:03:02:AE:2E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F1467BCA5162C16A5FB9524C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7f31af1d-c548-33bb-9967-7f5045d95526.roa
Signing time:             Mon 29 Aug 2022 12:00:00 +0000
ROA not before:           Mon 29 Aug 2022 12:00:00 +0000
ROA not after:            Tue 04 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        164.168.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:14:67:bc:a5:16:2c:16:a5:fb:95:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 29 12:00:00 2022 GMT
            Not After : Oct  4 04:00:00 2022 GMT
        Subject: CN=83959206-d52c-41c1-a151-3da49aabfe1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:16:16:e3:2b:ff:6b:45:36:a8:f7:4d:1a:f7:
                    39:aa:f4:14:c2:41:2e:70:5c:d7:91:51:54:c9:74:
                    0a:9a:c6:18:ba:f0:03:d8:70:15:20:f4:6f:2a:3e:
                    93:5d:46:40:05:35:89:d0:fb:9a:d9:bd:8e:d4:40:
                    94:d7:cc:bc:d2:25:60:1a:55:85:17:0b:98:36:9b:
                    fd:31:10:63:7f:ef:13:ab:cb:df:40:78:27:cb:e4:
                    bd:f4:18:c2:58:b0:8f:a7:4a:ba:11:31:cd:a5:24:
                    48:d1:6c:e6:32:2b:60:e6:86:eb:b7:3b:49:f9:6b:
                    fc:35:2a:84:5e:e6:84:df:3f:e1:4c:d3:17:49:7d:
                    a3:62:82:f7:d5:4f:04:bd:44:f1:4f:8c:c7:2e:60:
                    c2:bd:8c:31:fb:96:66:93:8a:85:a6:ee:50:e6:ce:
                    b4:6b:26:3d:11:95:92:18:7c:7f:e7:e7:ba:37:36:
                    50:d3:9a:1d:12:f6:1b:94:09:7e:cc:4f:a0:4f:27:
                    ab:99:4c:ba:0a:a7:47:07:d5:1e:99:f4:49:b3:79:
                    8c:f6:3b:10:cf:d7:cb:88:83:d2:5d:86:3c:b9:de:
                    ff:4e:67:56:5f:b6:68:de:ae:55:88:2c:11:8c:77:
                    a5:5d:3e:71:b3:52:77:33:3b:9a:0b:92:b6:1a:b0:
                    44:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:22:B0:E2:29:34:AE:CF:30:6C:05:66:B0:76:08:BB:03:02:AE:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7f31af1d-c548-33bb-9967-7f5045d95526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.168.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:06:8b:b8:61:9e:25:35:ce:5e:0d:28:5b:f9:71:64:32:96:
         76:77:66:41:13:23:69:ca:b9:85:6b:e2:e9:ec:0b:00:b6:98:
         3d:26:f6:d2:05:bb:c2:92:e1:df:04:da:a1:45:50:66:4a:cd:
         54:80:35:67:1f:41:67:7a:6e:ce:f5:ae:92:99:4e:82:a0:d7:
         77:e0:ab:6d:4c:2b:2b:1a:db:37:ce:60:8d:8c:0c:e8:df:c0:
         f2:36:10:19:92:16:07:91:ae:06:d8:ea:72:32:70:33:c9:df:
         2b:90:79:bf:cd:d4:31:f3:c7:3c:c3:08:82:9a:67:35:7c:ce:
         6b:ed:c2:ab:61:95:85:f4:9b:bb:9b:4d:dc:c1:46:ab:07:2b:
         aa:ca:f0:3c:b3:eb:41:c6:51:71:72:54:1b:d9:80:15:36:5a:
         f0:8e:e6:a4:03:7e:62:8c:c9:56:6d:06:21:25:c0:c8:65:e8:
         dc:9f:79:58:5e:eb:33:29:2f:1d:d1:f3:93:51:d2:65:af:ac:
         a0:5c:31:6f:1b:02:98:8e:6a:6f:ed:01:ef:0c:4c:36:c7:3e:
         73:26:88:46:10:16:8c:1a:f0:e6:12:7c:db:f7:f7:80:6d:70:
         a0:5e:ec:cf:05:d7:ea:1c:c5:79:bc:97:d6:35:5b:c1:c1:18:
         11:5a:f5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:54 2025 by rpki-client