Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/907f1ec1-2ad6-3e0b-855f-429d96664f89.roa
File:                     907f1ec1-2ad6-3e0b-855f-429d96664f89.roa (raw, json)
Hash identifier:          VvA90cG8zLjtEshumU3JBYQNO4jCTdKw8oR49qiKSrA=
Subject key identifier:   7B:48:A2:B2:0D:9E:12:4A:C1:10:46:18:50:D2:CC:A5:8F:90:A1:F6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D2A1BBBD306D28D8304EA7A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/907f1ec1-2ad6-3e0b-855f-429d96664f89.roa
Signing time:             Tue 08 Mar 2022 05:00:00 +0000
ROA not before:           Tue 08 Mar 2022 05:00:00 +0000
ROA not after:            Tue 12 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        2600:1f00::/24 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:2a:1b:bb:d3:06:d2:8d:83:04:ea:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar  8 05:00:00 2022 GMT
            Not After : Apr 12 04:00:00 2022 GMT
        Subject: CN=82bd3d84-f04d-45dc-a31c-c0a2fa9a9c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d0:fd:94:bd:58:7e:d6:00:9b:5f:ab:f4:8e:
                    64:7b:95:69:9a:86:64:21:99:60:f5:b6:b9:20:b6:
                    13:eb:7b:3c:39:6c:50:d7:b7:ec:81:c9:e6:5e:7d:
                    2c:32:a9:d4:15:12:b4:36:e6:ad:95:e1:ce:e1:16:
                    e3:f0:ef:c4:fd:5a:17:af:f5:f4:c0:1c:08:e2:64:
                    98:ff:e7:f8:c2:8a:a3:ec:e4:8a:e6:5f:e5:9f:24:
                    9b:b9:62:cd:86:f5:3b:ca:38:12:f1:49:e0:35:1a:
                    3e:02:c9:b2:97:92:07:26:94:7c:6b:2d:28:f8:74:
                    78:ac:82:07:7f:8a:48:ba:af:3b:d6:de:49:cf:3b:
                    6f:94:31:a8:97:67:a0:77:b9:ba:f2:0f:f9:3f:00:
                    f4:0d:18:17:ad:50:8d:3c:ee:f9:4c:46:40:96:2a:
                    57:d1:ce:3a:ce:d6:d1:d7:58:d4:e2:fa:aa:d3:46:
                    df:54:32:64:1c:fe:1c:b4:c1:21:7b:56:c4:f1:62:
                    5b:2a:c9:2e:be:bc:b5:79:b1:84:80:4f:4b:22:ed:
                    0c:a8:62:87:87:a5:13:93:18:13:fe:93:52:a9:f2:
                    f6:71:f4:b1:6e:b8:fd:7a:42:d3:54:7c:00:20:71:
                    7c:d9:c6:4b:d8:7f:ed:12:8f:74:82:d0:02:a5:6a:
                    2e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:48:A2:B2:0D:9E:12:4A:C1:10:46:18:50:D2:CC:A5:8F:90:A1:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/907f1ec1-2ad6-3e0b-855f-429d96664f89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00::/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:b4:81:31:ff:61:26:c8:29:5a:c0:83:a4:56:c6:d8:67:ca:
         41:d7:7f:45:13:44:dc:4e:60:c8:fb:04:58:ef:60:80:06:3f:
         b2:68:cc:0f:1e:95:a1:83:62:cb:22:01:f2:34:ea:78:da:63:
         7a:3a:d9:40:d4:b0:32:3c:5c:5c:8f:97:61:d3:bd:b9:b0:db:
         df:b3:2f:3b:be:3f:0d:f4:fe:da:42:50:17:82:26:2a:ac:f9:
         fc:20:cc:1f:bf:38:1b:9c:c4:20:6d:66:68:56:cf:e3:fb:e2:
         4b:24:38:d4:46:22:76:a6:5f:d0:30:7c:8f:a4:81:2e:34:e6:
         3f:91:29:f7:e5:e4:b1:c2:c8:95:33:6e:fa:ba:66:42:29:e5:
         37:5f:e3:75:65:cf:09:14:9e:ab:c7:89:70:3b:ad:6d:31:03:
         dd:28:8f:d2:9c:04:ce:d9:18:fb:18:93:0c:e3:ea:53:e2:93:
         a7:8b:23:45:a4:40:52:8d:f2:39:cb:a6:d7:1d:2c:4a:99:06:
         1b:00:fb:63:5f:b0:0f:27:85:a4:8e:3c:29:6f:55:1c:54:b3:
         23:01:54:9d:e1:66:0c:1c:c9:29:50:82:8b:eb:49:a3:ad:e1:
         22:1c:52:2c:5c:44:11:bb:33:6d:e6:fe:1b:1a:62:01:b0:cc:
         2b:32:14:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:28 2025 by rpki-client