Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a07cfa4-abee-3424-bd29-3ab2500f1cee.roa
File:                     8a07cfa4-abee-3424-bd29-3ab2500f1cee.roa (raw, json)
Hash identifier:          rQWmQZbDPnXuwmM9cpC/5TRXbn72emlpePNsrlXIKbA=
Subject key identifier:   C3:F5:50:CC:29:FC:AE:D9:27:AA:0C:4F:E2:93:5A:1D:C9:70:EF:3C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D7A83CBC2D8E4D7E46872E680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a07cfa4-abee-3424-bd29-3ab2500f1cee.roa
Signing time:             Wed 06 Apr 2022 04:00:00 +0000
ROA not before:           Wed 06 Apr 2022 04:00:00 +0000
ROA not after:            Wed 11 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2600:1f01:4800::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:7a:83:cb:c2:d8:e4:d7:e4:68:72:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr  6 04:00:00 2022 GMT
            Not After : May 11 04:00:00 2022 GMT
        Subject: CN=3b612217-9958-4d99-a9cf-a3964e21e644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:df:33:fb:ec:d8:fd:fa:00:b6:65:12:a3:54:
                    7f:93:97:99:3b:38:2e:f5:8a:2b:a4:37:65:a5:4d:
                    06:39:ad:1d:80:0b:16:74:6c:79:63:e1:9c:59:dd:
                    58:8e:80:b4:43:3b:fc:45:c8:a9:87:52:11:be:d0:
                    cf:ab:44:87:6f:20:60:59:a8:ce:5c:9c:d5:e7:4e:
                    8e:47:77:55:3a:96:3a:c1:30:8c:4c:ff:9e:10:c4:
                    c6:65:af:02:ba:74:fb:c3:28:6f:c1:0b:99:c1:28:
                    a4:07:80:e5:9c:a7:22:f8:da:82:bd:06:70:1c:ea:
                    4d:0c:9f:60:a2:0c:2c:57:3d:fd:78:95:60:25:0e:
                    a8:86:ce:a3:f5:e6:3b:1b:bc:1d:cc:62:47:be:f8:
                    8a:87:95:84:df:df:f7:28:26:93:88:4d:cc:cc:6b:
                    c6:b7:5a:d6:dc:36:d1:c7:53:48:0f:b2:ac:a4:b3:
                    d9:0b:66:1f:98:07:04:9f:f8:33:bb:2a:47:6a:44:
                    0d:3b:a3:bb:f2:da:7f:d6:c5:ec:b8:b5:0e:8b:c2:
                    b5:7f:5a:47:48:57:dc:c7:16:56:a8:74:2a:db:f3:
                    49:c7:58:2d:ba:d6:51:7e:b2:e9:93:c2:2d:66:a8:
                    fb:ab:eb:d7:0b:08:13:14:a0:97:4b:09:2e:05:d0:
                    84:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F5:50:CC:29:FC:AE:D9:27:AA:0C:4F:E2:93:5A:1D:C9:70:EF:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a07cfa4-abee-3424-bd29-3ab2500f1cee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f01:4800::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:12:98:b1:01:1f:9e:d4:e7:93:c1:f3:bd:98:df:eb:c4:bb:
         7f:0c:f4:69:0c:62:24:f3:ee:1e:26:3c:e6:2b:30:ac:24:40:
         a5:ea:09:b3:d7:19:5a:14:35:63:06:e0:a3:4c:69:20:5d:f4:
         08:3e:2d:38:b7:81:a2:34:25:d0:d7:c2:90:7f:d1:8f:5c:08:
         44:73:4c:c5:5b:9b:ab:6c:13:8d:82:ad:ca:c6:a0:f9:34:38:
         b6:4b:52:29:09:6b:67:8d:b5:5a:6d:7e:00:21:89:7e:6d:b6:
         32:9d:f3:6d:c7:0d:b2:49:76:45:25:53:be:bb:b5:ac:e2:92:
         50:ed:26:7d:d7:23:79:f4:b6:ae:fb:56:36:e6:84:73:97:94:
         69:b5:4b:31:2f:d2:01:e7:d9:ea:58:a2:b8:60:72:cf:eb:7c:
         ae:7e:a5:33:9d:96:12:4d:c8:3a:54:b3:49:dd:f3:36:8d:b6:
         ef:4f:83:bf:38:a1:ea:db:d7:b6:54:d0:3f:30:73:0f:cc:ef:
         42:b0:f4:05:0b:a5:ea:65:a4:f8:f1:82:66:a2:85:e8:0d:b6:
         72:46:0c:24:10:43:b6:ee:22:c6:47:32:1f:33:9f:e4:18:81:
         8b:21:e4:9a:8f:3d:81:91:98:a9:68:10:57:4e:da:8d:2c:fa:
         3a:13:45:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:12 2025 by rpki-client