Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8db35642-3a21-3cc5-bd93-0511e6f240b5.roa
File:                     8db35642-3a21-3cc5-bd93-0511e6f240b5.roa (raw, json)
Hash identifier:          Y26sCfw0Mc47lmsYnYN6hgVoJI8oGLANFVr84CDp7Oc=
Subject key identifier:   39:54:2A:1B:12:EE:FA:93:BC:F4:27:4C:3C:CB:F0:22:25:64:A9:A2
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F0AECF784D97FAC94A71E7980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8db35642-3a21-3cc5-bd93-0511e6f240b5.roa
Signing time:             Fri 26 Aug 2022 17:36:07 +0000
ROA not before:           Fri 26 Aug 2022 17:36:07 +0000
ROA not after:            Sat 01 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        108.156.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:0a:ec:f7:84:d9:7f:ac:94:a7:1e:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 26 17:36:07 2022 GMT
            Not After : Oct  1 04:00:00 2022 GMT
        Subject: CN=33b430f4-31de-45db-ba30-3d8255e21e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ae:6e:d3:c6:d2:c3:fa:6e:81:e7:04:34:26:
                    ea:ab:2e:16:6e:72:a2:6f:5d:86:14:40:27:9d:4b:
                    10:19:ec:74:6e:91:1c:38:7b:51:49:01:c0:19:a9:
                    fd:16:19:66:e1:0e:ee:ae:dd:6b:32:e6:9e:fa:ef:
                    20:52:80:16:70:ab:dc:2e:ab:a2:d5:d8:1c:22:28:
                    e6:6e:be:fc:0c:db:c5:25:bc:f4:8f:d8:92:d1:d1:
                    28:32:73:68:b4:bb:47:99:d2:34:04:57:62:ac:c2:
                    5c:df:08:14:ec:50:0c:65:71:31:32:54:86:5c:c5:
                    19:d3:e2:6f:e9:6f:92:d6:cc:b6:ef:ed:b5:8d:82:
                    fe:60:0b:c7:7f:3f:46:13:1a:7b:06:7c:89:47:89:
                    e9:fe:94:a4:6a:28:4b:b4:04:68:cb:ff:40:fa:56:
                    a1:a0:b8:4a:9c:bc:56:6c:15:4b:8a:5e:70:9c:18:
                    04:71:71:10:ac:b5:f6:87:8d:67:0b:8a:8e:d2:7c:
                    71:c0:4f:70:e2:40:7e:ff:e8:9d:cb:f2:6b:f7:7e:
                    34:6a:e9:07:1f:06:4d:45:14:c2:0e:2b:5d:40:f4:
                    ce:1d:19:56:0b:d0:84:d9:f8:a9:b8:0e:f4:62:42:
                    ad:3f:ac:a0:3a:87:76:61:e6:a9:b9:36:7b:8d:8c:
                    f5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:54:2A:1B:12:EE:FA:93:BC:F4:27:4C:3C:CB:F0:22:25:64:A9:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8db35642-3a21-3cc5-bd93-0511e6f240b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:f6:8d:cb:a9:fe:42:ff:5b:5a:18:b5:7e:e3:e8:a6:9e:2e:
         03:b4:d8:28:8a:69:9b:a9:4b:e7:8c:c5:2a:45:63:3f:d6:eb:
         86:08:54:7d:21:72:7e:cf:24:14:20:86:d7:40:5b:7b:75:99:
         89:33:bf:3e:47:54:54:7c:c0:ed:1e:87:e8:3b:3e:5b:81:33:
         df:e8:3c:9f:6a:6a:c7:29:f3:62:50:80:ca:6a:2c:f6:9a:66:
         2b:ff:1d:0a:36:d4:88:61:13:1c:6f:30:eb:c0:a8:07:25:85:
         fc:44:47:e1:05:b6:16:43:39:38:0b:bd:97:e8:f1:fd:22:a0:
         31:3b:c6:e8:7c:5c:ab:63:54:74:b2:7e:76:be:5f:d7:f5:7e:
         37:b9:9c:c3:5b:70:f6:e1:3e:30:bf:02:f3:48:04:64:0b:35:
         dd:5f:4b:95:b2:97:73:65:23:43:21:c9:b8:0a:92:1b:cc:bd:
         93:74:c7:23:dd:09:a3:7b:2d:0c:5b:c3:5b:0b:65:85:15:15:
         34:70:84:31:26:35:d7:14:30:85:0b:00:40:fb:d8:a1:48:70:
         2a:62:c6:d6:78:38:82:17:d8:58:c2:81:06:fa:f3:aa:d4:6f:
         8d:3f:44:5f:f3:dc:70:c7:d1:bf:11:d6:d7:ef:fd:6d:33:35:
         08:a3:74:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:28 2025 by rpki-client