Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9536a018-a730-3603-ab8f-7234d387575f.roa
File:                     9536a018-a730-3603-ab8f-7234d387575f.roa (raw, json)
Hash identifier:          tWIkAXz6YzfWnn9GXtIts3cWCLSfHY83Il2ndBnX/0o=
Subject key identifier:   F9:47:14:FA:02:55:03:AA:14:41:D1:64:99:80:52:34:4D:AF:8D:EB
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DB2346C1ECC2E2EECEE5E8D60
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9536a018-a730-3603-ab8f-7234d387575f.roa
Signing time:             Sun 24 Apr 2022 12:00:00 +0000
ROA not before:           Sun 24 Apr 2022 12:00:00 +0000
ROA not after:            Mon 30 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        40.177.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b2:34:6c:1e:cc:2e:2e:ec:ee:5e:8d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 24 12:00:00 2022 GMT
            Not After : May 30 04:00:00 2022 GMT
        Subject: CN=13a33c7c-07d9-4a03-a76e-f77e1b15a6ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9a:55:c4:0f:ac:f1:f7:35:28:39:73:aa:51:
                    8f:b7:c2:d8:b2:b3:7e:f0:f9:64:60:be:de:d3:0b:
                    d5:87:1f:91:d2:23:9c:d8:3f:70:8f:67:79:0e:eb:
                    cf:01:65:00:d7:bf:19:05:96:62:86:e0:cb:07:50:
                    34:ee:6a:12:76:1f:19:1e:3b:05:fd:6f:27:a4:c8:
                    d1:cb:4d:a8:d7:f9:47:7c:fa:c8:30:9e:90:11:7d:
                    38:41:b8:51:59:ca:99:96:4a:38:06:ed:a9:7d:9c:
                    19:b7:9b:9f:8c:22:a3:74:04:d4:4a:ac:0b:6e:46:
                    9c:28:8b:fd:cb:1f:c0:cc:20:78:60:8b:e1:f8:f7:
                    47:9d:cb:6e:40:62:49:0f:d2:23:3a:bf:41:e3:5e:
                    4e:0d:e0:68:7c:99:b0:cc:76:04:80:f9:f6:d2:57:
                    d6:2b:61:3f:0d:07:f6:a4:4d:18:a4:c3:bd:42:f5:
                    06:73:2b:d0:38:36:77:62:b9:08:5b:4b:db:39:ca:
                    9d:c4:a9:93:99:45:80:66:46:69:c6:c4:6d:a0:4b:
                    51:71:1e:ec:bd:14:5a:29:24:a8:e1:63:99:44:5b:
                    fc:70:14:00:04:7d:11:a2:42:1d:5c:74:3a:4d:5e:
                    72:8a:22:df:52:d1:f7:06:d1:b6:dc:7f:ca:e2:62:
                    03:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:47:14:FA:02:55:03:AA:14:41:D1:64:99:80:52:34:4D:AF:8D:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9536a018-a730-3603-ab8f-7234d387575f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.177.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:3e:91:e6:9c:96:5f:b7:9f:d2:c5:77:5c:78:21:17:27:a3:
         b8:4d:54:58:57:1d:cf:72:de:dd:9e:8b:b8:da:11:4d:a0:ea:
         13:8c:8e:50:04:a5:d9:33:be:7b:10:6a:82:4e:bb:87:b7:7a:
         fc:14:6c:54:09:e4:b0:b7:5c:60:1b:aa:82:cd:e7:9f:80:0b:
         44:bb:99:52:9f:4e:61:9a:b6:5e:62:23:93:26:a3:55:86:2c:
         3c:e0:bd:dc:bf:fa:66:55:08:25:14:f5:ec:58:ca:aa:14:ac:
         18:97:1e:a1:07:1d:88:fb:f4:ab:77:20:a7:64:56:00:8f:06:
         ed:03:f4:b1:76:a9:93:85:22:2d:7e:49:f3:a6:6f:46:2a:bb:
         ec:2e:da:6a:23:ee:9b:ee:2c:13:c5:a4:f8:e6:93:77:fb:19:
         4e:b4:23:ba:5b:d0:37:05:d9:96:45:65:69:82:93:b8:a0:88:
         8c:02:4a:5d:06:81:e4:80:5d:5f:87:2b:a6:2b:15:4c:3e:31:
         34:ba:5b:83:57:99:1b:a6:67:ed:65:44:fa:8f:08:48:97:10:
         94:e3:9b:7b:96:4d:40:19:7b:d7:a7:81:e1:27:a2:5b:41:bd:
         23:a3:9e:8c:cf:c3:67:1e:e5:73:b1:36:2c:88:7f:f2:b9:9d:
         a8:c3:70:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:37 2025 by rpki-client