Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/87841e6c-40bc-3f77-b3e4-f7ef1f194b41.roa
File:                     87841e6c-40bc-3f77-b3e4-f7ef1f194b41.roa (raw, json)
Hash identifier:          u3zqTlF1J12I65fuHASzaahKf5I/KfuzkkY4toHz/kc=
Subject key identifier:   48:1B:AE:14:73:FE:93:16:BE:7B:05:E5:F4:E0:AF:7F:37:7E:7B:76
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858400E354D706CE385BA7A85F500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/87841e6c-40bc-3f77-b3e4-f7ef1f194b41.roa
Signing time:             Sun 27 Nov 2022 12:00:00 +0000
ROA not before:           Sun 27 Nov 2022 12:00:00 +0000
ROA not after:            Mon 02 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        168.203.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:0e:35:4d:70:6c:e3:85:ba:7a:85:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 27 12:00:00 2022 GMT
            Not After : Jan  2 05:00:00 2023 GMT
        Subject: CN=6cf54e99-1721-4484-9813-14697765a3ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a2:74:67:55:4c:9a:45:48:af:f4:2f:81:c0:
                    aa:1f:30:81:81:b4:d2:9f:f4:0a:50:f1:ed:44:54:
                    0f:1d:bf:57:32:39:03:a5:d4:3a:54:49:f5:41:b0:
                    81:37:ae:5a:5c:64:35:e9:66:2c:3b:70:02:bc:61:
                    1c:59:9d:8d:f2:ec:1f:0b:9b:5b:eb:7c:79:22:f6:
                    61:fc:90:72:e1:1b:d1:a2:05:99:5c:d8:22:13:92:
                    ca:fe:1e:12:e0:6c:14:39:d9:38:3f:a4:b3:6e:5a:
                    17:6e:98:f5:b2:5b:fa:d9:eb:91:ad:04:cd:07:40:
                    f5:0d:11:3c:d9:ea:9d:25:79:9d:c4:f5:a1:c1:30:
                    2f:78:da:6b:44:96:21:f7:8c:6e:59:d7:0a:2a:7d:
                    ea:78:08:63:7b:e8:82:c4:eb:2f:c7:73:fc:40:0e:
                    5d:14:43:eb:f7:2a:aa:d5:3d:84:c8:c5:8f:4a:39:
                    52:41:21:55:63:24:51:70:1e:ef:7d:4e:e5:a7:54:
                    fd:9c:55:60:64:d9:c4:e8:7c:2d:8c:5c:89:cd:f8:
                    d9:f4:8e:39:fd:98:fc:51:03:93:f4:8a:2d:2f:4a:
                    bc:d0:b9:19:dd:76:31:f1:f5:9d:65:7e:06:c5:59:
                    6e:15:ea:5a:ea:10:7f:1f:47:c2:c8:05:a4:f6:91:
                    96:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1B:AE:14:73:FE:93:16:BE:7B:05:E5:F4:E0:AF:7F:37:7E:7B:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/87841e6c-40bc-3f77-b3e4-f7ef1f194b41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.203.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:4e:45:cd:48:76:e6:ad:17:95:d7:f9:c5:71:61:bf:46:0f:
         9f:10:09:4f:7e:e5:c7:70:82:c0:75:21:4f:69:d7:70:2c:c2:
         34:95:6a:2f:c5:b9:bd:02:5b:fb:5d:d5:de:f9:ba:37:7c:91:
         46:8f:e3:48:c6:cc:f9:a8:89:39:d2:27:ca:19:0d:4c:e2:28:
         ea:5b:64:ff:53:a6:f2:c9:e7:72:54:ba:83:89:00:63:bb:56:
         87:db:d6:57:9c:ea:51:52:e6:b3:7c:27:a3:9f:53:92:c6:6b:
         0b:ce:3a:e0:00:d8:4a:d9:2b:e7:40:ed:45:89:8f:2d:78:5c:
         17:79:03:76:7b:68:ae:cd:de:8a:6c:26:ee:ac:ef:bf:8d:b1:
         ad:40:ee:93:02:d7:98:9e:f3:19:e2:f7:2e:75:33:25:6f:0b:
         d3:81:2d:0c:8f:18:34:5d:0b:19:65:c7:bb:7e:c1:63:f8:fd:
         7f:a7:96:4d:1b:59:29:c6:bb:50:8a:78:a1:76:17:24:b3:89:
         e3:ca:da:fb:e5:e3:c1:19:39:2b:ab:6f:28:71:f4:d8:49:af:
         f6:76:cc:ce:91:95:49:23:35:bf:0d:b6:ed:c0:20:03:b0:ba:
         34:59:a4:7e:94:2c:75:6e:8b:1b:df:ff:30:ef:11:84:71:2c:
         6d:c5:2f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:40 2025 by rpki-client