Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f0b3108-7721-3e8b-a07c-4eb4dce12e82.roa
File:                     8f0b3108-7721-3e8b-a07c-4eb4dce12e82.roa (raw, json)
Hash identifier:          EBfDO30TCT/5bLDQh5VazoyzVsIF/DOsJvqm5SsFltk=
Subject key identifier:   52:9B:BE:AC:6C:62:8A:37:EE:08:EE:92:63:15:D1:49:31:2C:9C:CA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF65CBC2707CA312994228E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f0b3108-7721-3e8b-a07c-4eb4dce12e82.roa
Signing time:             Fri 18 Nov 2022 12:00:00 +0000
ROA not before:           Fri 18 Nov 2022 12:00:00 +0000
ROA not after:            Sat 24 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        162.85.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f6:5c:bc:27:07:ca:31:29:94:22:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 18 12:00:00 2022 GMT
            Not After : Dec 24 05:00:00 2022 GMT
        Subject: CN=95af923d-1c23-4349-b2b3-8159a1ce6fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c5:c1:d9:09:dc:92:8f:03:c4:70:6c:76:16:
                    94:10:19:76:58:33:3b:88:e9:29:f7:f9:08:a7:37:
                    c1:d5:68:ec:b7:40:15:5a:48:52:b4:1c:0b:28:d5:
                    93:e0:c6:87:9c:e9:92:ad:2d:21:f6:5b:85:72:61:
                    60:67:eb:04:80:c6:04:e3:bf:29:62:d6:c8:ce:7d:
                    3d:fe:07:49:11:03:79:09:55:91:22:ff:ab:00:76:
                    ea:05:8f:2f:04:74:c9:c9:db:28:82:12:1f:34:a3:
                    44:6b:16:9b:67:1d:c0:ce:e7:b1:75:0e:c8:e0:9c:
                    1d:35:08:51:9a:bd:80:5d:a4:ba:88:9b:d0:60:7d:
                    d2:38:99:26:5c:77:13:d5:0f:55:c3:8d:64:0f:c1:
                    a5:8b:40:ef:95:33:97:27:f7:6f:2a:15:46:36:93:
                    e4:0b:39:2d:8b:ad:27:73:99:ac:c8:37:57:f5:02:
                    07:18:10:38:23:55:bf:18:b8:29:41:a2:a0:1d:4e:
                    26:c6:9c:a0:5a:3f:f3:25:64:e8:30:8e:c3:9f:1a:
                    a2:6b:f3:8d:99:2c:81:24:a7:1e:0b:6f:8c:1a:e3:
                    e8:d6:55:5c:54:9f:3a:f0:ff:b3:7c:22:b7:0f:0e:
                    09:27:6f:68:6a:86:8b:1c:d3:6d:f2:ff:6c:e3:b0:
                    19:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9B:BE:AC:6C:62:8A:37:EE:08:EE:92:63:15:D1:49:31:2C:9C:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f0b3108-7721-3e8b-a07c-4eb4dce12e82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.85.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:f7:99:b7:2b:34:2b:af:ab:0f:bd:05:b8:43:97:d9:06:90:
         35:6b:58:42:24:78:7e:4e:cd:f9:f5:c2:9e:08:55:42:30:ec:
         7a:b9:30:b7:c3:d9:4b:66:ac:a3:2c:86:e8:12:95:85:9c:c4:
         a0:65:30:c3:da:c8:fc:66:5c:0c:36:e1:0a:56:96:52:01:f3:
         b6:8a:56:a7:27:b3:11:a0:3f:a9:58:cf:13:33:73:83:da:fd:
         ab:63:03:a6:9e:ef:76:27:e2:ab:d8:87:fa:d9:ed:61:33:7f:
         02:d4:bf:e3:91:ec:d3:2c:cb:3a:ce:9d:ba:25:0c:37:4d:e2:
         1a:69:f6:01:36:bc:ef:27:02:4f:cb:eb:c5:58:72:11:ac:1e:
         b5:0f:60:3c:ab:2d:b2:9f:5a:90:17:19:9e:fd:4d:8e:03:76:
         3c:bd:c9:95:0e:80:65:6f:1a:3e:5b:24:da:08:82:8f:fd:cb:
         9f:fb:b2:71:3e:0e:45:a9:80:48:88:49:b9:0f:17:ea:98:81:
         6b:be:85:db:8a:d7:a0:a8:89:bd:af:b3:9a:59:a6:5e:ae:91:
         a9:1b:f7:ba:5b:cf:1c:6f:7a:3b:45:48:d0:f7:00:1a:4b:3c:
         ab:5e:8f:a1:33:9f:2c:e8:47:63:5b:05:52:92:c2:ce:b5:e3:
         c1:27:aa:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:21:59 2025 by rpki-client