Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/904662cb-be12-3806-b6ed-0662d93016da.roa
File:                     904662cb-be12-3806-b6ed-0662d93016da.roa (raw, json)
Hash identifier:          meLudMYlC/VZ5jhlioWYo74Ktn01HRnM82ihFc79viQ=
Subject key identifier:   57:EC:4F:96:40:6D:2D:2B:EE:59:24:B3:62:4F:5F:1D:CB:13:9E:84
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EE66DD456856E2E086AD36380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/904662cb-be12-3806-b6ed-0662d93016da.roa
Signing time:             Sat 13 Aug 2022 12:00:00 +0000
ROA not before:           Sat 13 Aug 2022 12:00:00 +0000
ROA not after:            Sun 18 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        104.153.112.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e6:6d:d4:56:85:6e:2e:08:6a:d3:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 13 12:00:00 2022 GMT
            Not After : Sep 18 04:00:00 2022 GMT
        Subject: CN=780bf74a-309b-483c-980d-97b2d5c880b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:04:ca:53:e4:1c:59:66:fd:4a:02:5a:28:c6:
                    07:b4:36:b4:4f:12:4e:6e:f6:cc:c8:a8:a0:3b:60:
                    5f:92:36:59:c8:39:84:be:03:17:5e:70:8f:9b:cb:
                    68:fa:33:9a:07:b6:3d:d2:64:d0:24:ce:f1:a1:d7:
                    ed:f7:8b:0a:44:f9:4f:5c:bb:ef:cd:43:4c:45:9b:
                    c4:b5:72:00:87:08:4a:76:85:82:0d:74:86:b1:4f:
                    4d:3d:ab:09:f8:b2:65:4b:47:06:47:6b:35:43:79:
                    89:42:30:74:9b:58:ee:07:07:53:70:78:99:8d:5d:
                    76:7f:29:b5:da:e2:e2:ce:10:ef:47:8f:19:b5:96:
                    68:85:68:00:b3:01:be:59:36:70:2c:3e:ce:ee:fa:
                    a2:86:d5:fe:67:12:ef:78:d7:11:06:bb:10:03:d4:
                    81:00:44:17:0a:75:cb:19:d0:a8:81:a1:3a:c9:60:
                    b5:f0:76:4c:58:b5:07:7f:cb:4f:53:d5:86:06:54:
                    04:2b:74:1a:f9:8c:e6:49:37:f3:a4:ef:73:81:15:
                    09:7d:26:cb:99:45:cd:0d:8e:c1:55:0a:ba:b4:c3:
                    c7:2e:5c:77:7f:a0:38:75:3a:2e:5b:de:c4:70:0d:
                    49:ad:4b:b0:8b:4c:36:5a:c4:5f:70:45:e2:b5:27:
                    8c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EC:4F:96:40:6D:2D:2B:EE:59:24:B3:62:4F:5F:1D:CB:13:9E:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/904662cb-be12-3806-b6ed-0662d93016da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:1a:1a:32:6e:c3:a1:a6:61:d5:0d:87:29:35:da:7b:ca:a9:
         ea:76:d1:20:c0:f1:92:6e:3b:3d:67:2f:51:68:aa:81:b6:96:
         1d:c9:ac:51:50:54:bc:71:f0:7b:32:53:8c:d4:f4:ec:39:41:
         70:2d:ba:68:82:44:f1:73:c1:e7:d5:ca:38:c9:f2:70:01:13:
         17:47:13:94:48:86:17:ac:ac:72:b4:8e:e4:26:6d:4e:2a:02:
         59:43:dc:41:63:86:b5:39:1d:55:3f:98:d1:a6:29:2c:01:ef:
         68:2b:6d:0a:c8:04:bc:e8:30:d0:6c:f9:6a:d3:91:92:b0:ac:
         f2:98:6c:1d:3f:a4:3c:59:38:1a:ce:7e:86:1c:17:1a:c2:62:
         2e:96:ab:dc:21:e7:8d:c6:52:51:15:bf:74:5f:7e:e8:d1:86:
         13:5f:ae:de:ca:c5:9b:cd:aa:c7:c4:ff:1a:b5:2a:cf:2f:b7:
         4a:6d:a9:b3:ab:e1:c6:8c:2d:f2:aa:2b:94:70:c8:e8:5f:4a:
         2a:3d:68:54:d2:db:25:92:86:5a:f3:40:78:22:34:08:85:59:
         dd:98:83:7e:94:47:c7:42:d6:8d:a8:86:8f:e3:b4:26:b0:e9:
         37:17:75:6a:ea:f3:c3:83:91:ae:47:65:82:2f:f2:a0:b1:45:
         66:16:2a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:14 2025 by rpki-client