Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/904df594-3bfb-3f26-8f94-9ae972c93894.roa
File:                     904df594-3bfb-3f26-8f94-9ae972c93894.roa (raw, json)
Hash identifier:          UjIUqdO5p0eSJmb8p9BIXTL9wXxQTDYK+VrLWwwcitA=
Subject key identifier:   DE:70:1C:B1:D0:E6:50:4F:0A:D0:71:8E:43:20:42:08:7B:91:70:88
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583ED88EB72FADB3B845922CE520
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/904df594-3bfb-3f26-8f94-9ae972c93894.roa
Signing time:             Mon 08 Aug 2022 12:00:00 +0000
ROA not before:           Mon 08 Aug 2022 12:00:00 +0000
ROA not after:            Tue 13 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        162.208.122.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:d8:8e:b7:2f:ad:b3:b8:45:92:2c:e5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug  8 12:00:00 2022 GMT
            Not After : Sep 13 04:00:00 2022 GMT
        Subject: CN=ce4c39fd-e77a-419c-9096-a965a7f02502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:89:bc:ca:36:f9:b5:4e:49:90:2a:83:f5:42:
                    fe:3d:7a:6b:4f:7e:07:48:3d:72:1a:e8:4a:0f:4c:
                    50:21:c2:a8:3b:63:db:3d:03:60:30:6d:af:3c:db:
                    ca:d8:9b:31:ba:85:1b:6b:9b:c4:7c:8b:29:dc:a9:
                    4b:f4:28:29:67:37:f0:8b:c1:9d:58:b4:fa:8a:0a:
                    fc:d4:57:17:a4:06:98:1f:ac:bc:7e:b4:8d:94:60:
                    0e:4a:b0:0e:8c:a4:80:64:f5:06:64:8c:a5:a5:f6:
                    10:63:9a:df:b2:75:bd:5f:58:c7:af:14:24:d4:70:
                    fb:ea:ea:40:90:74:56:36:9e:01:41:58:df:10:ed:
                    a2:85:83:59:e0:05:8a:8b:00:7b:3f:17:e6:0a:ce:
                    9a:c9:4a:47:b3:d9:2c:e0:06:f8:0e:ba:ce:cd:91:
                    02:fe:f6:9c:34:d0:5e:9c:32:81:27:07:61:62:0a:
                    bb:7c:d6:47:86:f9:8f:33:a2:e2:39:1b:ed:51:1a:
                    c8:16:ee:08:23:eb:bb:af:e5:d1:bf:bc:1d:e0:52:
                    81:dc:80:68:b2:77:d0:2b:47:ec:90:d2:8d:7e:bd:
                    ff:0f:2b:f9:33:34:a7:b2:8a:61:ba:26:5f:41:16:
                    fa:0b:8b:3a:53:50:c2:9e:45:e3:5d:74:a8:92:b7:
                    70:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:70:1C:B1:D0:E6:50:4F:0A:D0:71:8E:43:20:42:08:7B:91:70:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/904df594-3bfb-3f26-8f94-9ae972c93894.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:86:a3:59:e6:2f:7a:d8:89:86:25:36:99:98:dc:bf:11:b3:
         66:10:c1:2c:55:24:40:cf:b1:c2:08:68:33:87:ab:39:cf:c7:
         0b:76:fb:d3:dd:f7:1c:e4:0b:5b:7e:34:0d:b1:80:6b:59:59:
         b4:9c:05:6b:ad:f7:00:ef:76:4c:21:d2:fa:8f:8d:66:04:02:
         93:06:bb:68:97:37:78:37:4e:ea:96:f6:e4:f7:ef:e5:5a:06:
         04:4f:84:8f:e8:df:d1:53:3a:ca:5b:9f:34:43:97:54:ff:b2:
         5c:45:06:9a:53:7b:60:91:d0:2d:54:32:91:97:74:8b:72:52:
         78:59:ca:98:a7:43:e9:b7:ba:7b:9a:ac:1c:95:b8:40:3a:7b:
         be:aa:6d:c3:57:79:94:a9:c2:b0:7e:f7:0c:8a:f4:f8:d1:04:
         3b:d8:f4:d1:2f:74:d1:44:c6:53:8d:20:6e:81:90:ed:14:19:
         95:7f:c0:c0:af:0e:38:7a:01:07:6f:3f:64:a7:53:b1:75:24:
         ea:32:60:3e:f7:d2:6c:b9:0f:36:33:02:6e:37:c3:c1:9f:4a:
         cd:94:78:e1:63:fe:e6:81:67:f2:74:3b:f0:ba:0b:bb:55:7c:
         84:eb:02:5c:8c:8a:e0:2c:db:2b:ab:a9:0d:5b:55:f9:f4:74:
         a0:cd:22:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:33 2025 by rpki-client