Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/88babbb1-8b2b-3ef2-8cc0-7720d7a864d0.roa
File:                     88babbb1-8b2b-3ef2-8cc0-7720d7a864d0.roa (raw, json)
Hash identifier:          nK1WFiVS/AodgGX37xWr191GXSfP2kdOfo6/qXNyuZQ=
Subject key identifier:   66:71:25:80:A7:41:1D:D8:B0:BF:8A:5C:07:43:DA:AC:02:97:4D:64
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F500CAA6A26F6332B7C5E8D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/88babbb1-8b2b-3ef2-8cc0-7720d7a864d0.roa
Signing time:             Tue 20 Sep 2022 12:00:00 +0000
ROA not before:           Tue 20 Sep 2022 12:00:00 +0000
ROA not after:            Wed 26 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        146.130.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:50:0c:aa:6a:26:f6:33:2b:7c:5e:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 20 12:00:00 2022 GMT
            Not After : Oct 26 04:00:00 2022 GMT
        Subject: CN=5f8e8e28-3487-4a1a-8c7d-3a6e9a4bf871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9d:84:ee:9b:41:92:3e:46:fc:3b:b9:ea:f9:
                    a7:4f:ff:9c:61:b3:c1:b9:02:73:7a:b1:7c:07:3d:
                    d2:52:74:f0:06:d4:8d:a0:28:c3:f9:ac:3f:fa:f7:
                    ef:e1:d7:0d:c4:d3:1c:4e:2e:fd:46:91:a4:f0:ae:
                    38:ce:7e:fa:03:31:3d:c4:4b:c3:a2:1d:88:21:47:
                    87:fa:4c:00:90:41:15:00:62:9e:e6:cf:6b:8f:92:
                    c3:c6:a2:a1:7f:d1:37:aa:fd:44:0b:96:da:30:46:
                    3a:43:f5:4c:b5:66:e8:cc:0c:31:24:30:8b:a6:94:
                    99:b3:14:f9:64:fc:a1:5c:66:25:78:51:d4:68:80:
                    7f:0f:3a:e0:13:06:7c:0d:b2:04:71:31:2c:31:35:
                    05:c6:80:e4:28:92:e4:ab:49:bf:d3:61:b9:bb:1e:
                    0f:7c:ea:b6:fc:64:d0:88:1a:92:b4:4b:7f:5f:b6:
                    02:9a:d2:ff:83:d4:f2:45:35:60:72:53:bc:75:91:
                    b1:50:04:77:d2:32:1b:01:55:66:db:8e:2b:96:52:
                    8a:ac:69:d9:d1:50:bf:f6:08:f7:ca:db:d4:9b:2d:
                    d7:a1:7a:2b:6f:e2:c3:9c:cf:4d:ed:a8:94:e9:c5:
                    de:8b:3c:60:d9:9d:c8:c7:19:d8:fd:7a:47:30:dc:
                    c3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:71:25:80:A7:41:1D:D8:B0:BF:8A:5C:07:43:DA:AC:02:97:4D:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/88babbb1-8b2b-3ef2-8cc0-7720d7a864d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.130.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:82:72:34:29:b7:cd:53:34:22:00:93:06:5e:36:12:9b:a8:
         33:18:ee:f4:e8:4f:f2:38:2c:c8:4d:47:8e:e1:69:19:ab:a8:
         5f:6d:f5:d9:c7:18:81:cb:de:3d:00:30:ae:25:13:4f:94:45:
         bf:35:68:2c:f0:aa:e7:4f:a7:0c:18:2b:8d:1a:b2:e7:33:e2:
         2f:fb:b9:89:51:5e:a2:31:df:ad:3a:b7:95:02:b6:ef:57:f8:
         67:90:82:70:f2:8c:b4:ae:b2:df:a4:8e:27:55:3e:ee:6d:9c:
         b6:51:1b:ce:dd:98:4d:1f:35:5a:73:91:ac:a1:d6:91:23:c0:
         cf:62:94:5c:16:70:de:08:45:c2:09:36:52:40:de:bd:87:c6:
         ba:fe:08:e9:8a:de:13:51:05:e2:c5:4b:49:ba:b4:b5:ec:5a:
         1e:ee:64:6a:52:16:72:15:be:c7:b6:27:ad:5c:f8:fa:ee:9b:
         86:bc:63:1e:0a:25:03:34:a7:c5:ce:81:36:1e:65:b8:6b:0e:
         9f:bd:01:70:5f:2f:11:93:0b:82:33:36:ea:0b:6c:46:17:be:
         e3:36:be:8e:f8:06:e1:2e:7f:cc:9a:54:65:13:70:ad:11:eb:
         63:1d:5f:da:6c:fb:0d:11:dd:45:35:7b:2d:6b:ec:23:ab:44:
         e1:95:a0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:09 2025 by rpki-client