Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f00e9ed-c366-317e-8dee-a280792f819c.roa
File:                     8f00e9ed-c366-317e-8dee-a280792f819c.roa (raw, json)
Hash identifier:          4PJcTK4VEWD6Wx8u/1nux2vno/WfhGq63VDNGjH6dAo=
Subject key identifier:   A4:53:62:3D:71:79:FF:2E:93:B3:97:E5:16:CB:2F:98:F6:80:32:97
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EE464A6981FAF5C83653068E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f00e9ed-c366-317e-8dee-a280792f819c.roa
Signing time:             Fri 12 Aug 2022 14:42:08 +0000
ROA not before:           Fri 12 Aug 2022 14:42:08 +0000
ROA not after:            Sat 17 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        65.8.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e4:64:a6:98:1f:af:5c:83:65:30:68:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 12 14:42:08 2022 GMT
            Not After : Sep 17 04:00:00 2022 GMT
        Subject: CN=f6278d44-290f-41db-8356-858f510bff55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8f:44:ef:c9:cf:48:65:88:2c:2f:6d:ef:d8:
                    b9:0f:07:bf:e2:bf:33:48:d1:ad:ac:a7:07:af:81:
                    60:87:19:5c:56:8d:fc:da:73:f9:a0:73:51:f6:a6:
                    98:2f:e9:3d:43:05:a4:fd:e1:05:fb:10:a9:45:e9:
                    b5:c6:e3:9a:89:3e:fb:64:e5:a8:5e:7c:a7:54:c7:
                    39:0f:8a:fc:a3:30:25:89:29:4d:f8:d3:31:0e:36:
                    0c:6a:3c:f7:53:b1:2d:2d:3d:af:a0:db:76:6b:9e:
                    4f:d8:e1:e1:fd:b0:d2:e7:99:5a:73:08:ff:5b:6e:
                    9b:97:4e:18:40:da:f8:f3:4b:23:b2:ec:3d:12:32:
                    0a:bb:0d:f9:5b:79:03:43:d8:3c:65:2d:51:86:be:
                    a3:cb:48:5d:42:d8:27:9b:5f:8c:4f:26:bb:28:0a:
                    c2:f1:e8:39:dc:80:7e:91:71:a6:43:f6:a8:c2:20:
                    bb:97:cf:da:7c:53:33:7f:f7:b5:03:b3:20:60:52:
                    27:0c:e1:e6:e6:62:9f:8d:c7:80:33:ce:30:44:a2:
                    dd:3b:16:5b:20:54:df:0e:ce:5a:04:19:1b:ca:75:
                    ee:d1:69:81:1b:c4:d9:d2:4e:01:02:86:f1:e8:2a:
                    98:ac:27:76:67:aa:47:49:99:41:4f:ae:78:9f:ff:
                    c6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:53:62:3D:71:79:FF:2E:93:B3:97:E5:16:CB:2F:98:F6:80:32:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f00e9ed-c366-317e-8dee-a280792f819c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:dc:92:b3:f6:8d:69:02:4c:56:ee:3a:c6:6e:a1:cc:eb:f4:
         1b:6e:da:79:5c:fd:ad:b1:a5:2f:71:f7:18:cc:2f:f6:8c:1b:
         a1:83:4e:32:fa:d5:77:ce:f9:18:71:83:c6:ed:af:72:e0:bb:
         de:5f:7f:08:37:b0:8a:2f:70:fd:ae:d8:4c:bc:69:4e:0b:f5:
         7e:a9:55:e5:8a:37:a3:fd:7f:f5:27:b7:8c:17:24:5e:79:2c:
         55:d4:ee:f8:e1:9c:a2:10:a3:35:dc:6c:66:8a:0e:53:38:b6:
         8d:4e:6a:eb:9b:8c:8d:e6:6c:79:79:1f:2b:8e:8b:cf:b4:d1:
         e9:07:ef:15:e1:f7:e1:a2:79:d7:df:e4:16:3a:51:43:0d:cf:
         50:94:88:2b:51:43:49:62:fe:79:e9:c1:93:0a:b8:9a:3f:bb:
         1e:c4:9e:00:ca:1b:cd:6b:a1:9a:99:39:8f:2b:8c:eb:92:4b:
         4e:a1:e0:dd:bf:db:fa:34:f1:91:88:4e:b7:3e:58:eb:c1:0d:
         1a:74:a0:6f:8d:0b:c2:cb:ad:b0:7e:25:8a:0a:07:6c:b8:fc:
         9d:60:3b:94:72:eb:d1:1b:14:8c:ce:dd:0b:95:8e:6a:1b:19:
         75:4e:e0:24:b8:33:6c:ff:05:40:c9:a0:25:76:fe:0a:ba:1c:
         39:32:c7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:09:44 2025 by rpki-client