Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/942eaf9b-17dd-3d67-8f58-475ee2d28809.roa
File:                     942eaf9b-17dd-3d67-8f58-475ee2d28809.roa (raw, json)
Hash identifier:          yAuszGM6zgqVCXTYbEqMIbq9RwDRz/7Y4oo3hq8QQ9Q=
Subject key identifier:   C4:E9:45:DE:A7:5B:B1:BF:AB:A7:B6:7F:32:95:06:E5:4E:88:E3:23
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FCE070C61D196D8AD95D5F980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/942eaf9b-17dd-3d67-8f58-475ee2d28809.roa
Signing time:             Fri 04 Nov 2022 12:00:00 +0000
ROA not before:           Fri 04 Nov 2022 12:00:00 +0000
ROA not after:            Sat 10 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        192.189.197.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ce:07:0c:61:d1:96:d8:ad:95:d5:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov  4 12:00:00 2022 GMT
            Not After : Dec 10 05:00:00 2022 GMT
        Subject: CN=8c6133c2-be59-485a-b94d-97de1562c2f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9c:81:4c:68:04:3a:f9:4e:a7:5d:3f:e8:34:
                    54:28:61:09:63:05:d6:3a:a2:19:f3:37:3c:00:32:
                    9d:bf:31:88:a0:69:9f:a2:a7:23:c9:1e:7d:b5:63:
                    18:c7:e6:fd:24:1c:c4:7c:57:0e:d8:80:92:58:64:
                    76:92:b3:0c:62:24:f8:ee:19:ba:ac:2a:fd:30:c4:
                    ba:67:38:bc:b9:24:cf:39:77:e4:14:98:5a:42:1e:
                    74:d8:96:3d:a0:c9:99:9f:5d:47:9d:d8:bf:02:9c:
                    a3:2e:ba:68:85:b0:64:de:80:57:af:19:1f:28:a8:
                    63:a7:66:48:4f:e4:e8:76:80:63:58:1e:fd:af:80:
                    18:07:71:22:98:90:5e:40:75:5d:8a:a3:25:9f:2b:
                    c7:7f:16:c2:ce:74:63:a8:cc:38:7e:6c:c4:f2:6f:
                    a6:21:d9:90:26:4a:9b:f5:ee:da:02:97:bf:16:33:
                    82:24:42:a0:59:51:eb:2b:b3:ed:a5:1c:87:89:cb:
                    ca:9f:a6:7e:51:83:9c:f5:7c:2e:19:4c:8f:e4:0e:
                    62:e9:2e:db:31:0e:ef:16:f7:6a:08:3c:4e:40:a1:
                    c2:a0:45:52:95:58:d6:d3:6a:1c:3f:f0:ad:61:75:
                    52:18:dc:48:b6:05:c4:51:d8:c4:29:fd:5f:0d:f4:
                    4e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E9:45:DE:A7:5B:B1:BF:AB:A7:B6:7F:32:95:06:E5:4E:88:E3:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/942eaf9b-17dd-3d67-8f58-475ee2d28809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:23:7f:24:1c:e7:2b:ca:13:bf:68:c7:f5:e5:a8:5a:fa:58:
         41:34:b8:ab:f4:9f:a2:13:d5:8c:07:a7:ed:cc:1c:58:55:67:
         87:ea:d3:d9:ec:6e:e1:be:59:a3:22:4b:dd:e7:da:bc:de:d7:
         69:22:3a:a4:3c:49:64:b9:43:ff:04:84:8f:1c:23:cd:6d:b3:
         6a:61:77:f6:2d:85:bc:9c:f1:39:f6:74:a8:2e:50:cf:21:8f:
         02:69:3a:4c:1a:59:24:4f:91:e7:13:3d:89:cb:14:34:66:dd:
         81:b2:12:23:35:5e:c7:44:29:e8:b4:be:48:11:ba:4d:c1:b8:
         b0:09:b7:44:29:f3:31:2e:0d:ff:a2:0f:c3:0d:16:55:fb:23:
         3d:93:6e:ae:52:ac:54:7d:43:c5:c3:55:63:8e:9a:67:4d:ad:
         84:dd:31:b7:56:02:91:7c:10:e3:40:8b:89:65:20:17:ec:f3:
         8c:a1:1d:24:5b:b3:da:d6:21:c2:8f:b9:d1:b4:78:72:41:31:
         6c:f2:0a:5e:6e:cc:a5:5c:f7:7c:23:81:34:59:ac:36:91:77:
         f4:63:e4:3c:2b:dd:7f:53:ea:e4:ff:99:2f:09:b3:98:0d:63:
         37:b0:db:8c:4f:28:fb:53:81:7f:a6:43:0e:a3:ae:fc:b0:0c:
         5f:0d:51:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:56 2025 by rpki-client