Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/972c1d8d-0b25-3fcc-b3f0-09e3f3012c7a.roa
File:                     972c1d8d-0b25-3fcc-b3f0-09e3f3012c7a.roa (raw, json)
Hash identifier:          7i4S42BVyABpuYsn2SdiMri3H3m8JfVBj3Gl5KhxYZg=
Subject key identifier:   66:36:BB:39:CE:C0:72:9A:BE:A1:4B:0A:FB:35:0A:79:39:C1:79:44
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FDEB096ECB475BE18221383D8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/972c1d8d-0b25-3fcc-b3f0-09e3f3012c7a.roa
Signing time:             Thu 10 Nov 2022 12:00:00 +0000
ROA not before:           Thu 10 Nov 2022 12:00:00 +0000
ROA not after:            Fri 16 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        160.223.224.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:de:b0:96:ec:b4:75:be:18:22:13:83:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 10 12:00:00 2022 GMT
            Not After : Dec 16 05:00:00 2022 GMT
        Subject: CN=ec1d36e3-7433-42bf-86f6-7cc94c628a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9c:bb:c8:b5:78:17:9b:7c:80:1e:10:b6:ce:
                    e5:86:4e:42:56:5a:0e:f6:c7:ad:8b:eb:24:89:86:
                    60:16:8c:53:cf:b0:5c:d8:97:96:d9:89:ea:ec:29:
                    6e:c9:f0:18:99:32:d5:31:b9:0b:d7:a0:23:d3:56:
                    2f:48:51:a2:60:bf:3a:c1:07:94:46:aa:f9:c5:75:
                    36:a8:d6:b0:f7:69:bc:03:f6:b6:8e:8b:c0:6a:81:
                    19:b0:3f:da:26:91:52:9b:6c:28:6c:3a:be:7a:a4:
                    65:74:8f:b2:6b:6b:9e:a4:80:b3:7c:f6:ab:e2:72:
                    51:8e:bb:6b:d9:f1:7f:c1:0a:25:53:0c:36:20:d7:
                    77:76:54:30:25:56:ee:2e:1c:ca:05:87:b9:48:96:
                    e7:5d:eb:59:b6:ed:5b:98:a2:6b:ea:1e:84:eb:fb:
                    a4:12:64:4e:aa:53:db:9a:d1:19:63:5c:68:9e:d0:
                    a3:c9:64:46:f5:c9:6f:7c:ce:b0:d5:46:c4:88:66:
                    e9:0c:c6:7e:00:7a:da:07:ed:6f:54:d8:d4:f7:73:
                    e0:e7:cb:c5:02:95:98:e7:c5:47:f6:db:80:bd:af:
                    24:11:ae:03:d0:34:f1:97:f9:c2:f4:8e:29:a0:91:
                    80:4b:70:ce:ca:f6:57:89:0a:54:79:45:f9:93:78:
                    2f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:36:BB:39:CE:C0:72:9A:BE:A1:4B:0A:FB:35:0A:79:39:C1:79:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/972c1d8d-0b25-3fcc-b3f0-09e3f3012c7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.223.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:b5:54:e1:55:1f:4b:58:8d:76:de:8d:c4:7a:14:66:e6:b9:
         6d:5e:b6:e3:10:81:17:e0:be:e6:66:d5:c3:8a:43:bd:c0:60:
         39:e8:93:59:78:b1:72:48:8e:8e:e2:0a:44:73:31:c7:7b:4b:
         44:72:b5:df:f1:61:98:c8:26:4e:27:04:4e:05:01:31:3e:c1:
         4c:26:86:c5:e5:78:f2:16:2c:38:0f:ca:dc:7a:23:b2:d7:9f:
         9b:04:8b:ee:1d:03:98:52:3b:2f:64:17:8a:19:e5:e3:fd:a6:
         d9:98:33:59:d5:5b:91:2b:dc:cd:07:5b:b8:e2:96:28:ca:35:
         e3:36:3f:2e:ee:b7:28:dd:95:8d:36:7a:43:71:67:e1:93:c7:
         d1:23:9b:e7:a7:b5:70:2a:76:14:68:26:84:47:b3:6a:f5:2f:
         84:e5:73:32:48:1b:0f:59:f0:a9:6e:7e:cb:05:87:b4:14:af:
         19:5d:33:da:77:96:a0:d2:80:f2:ea:a7:1a:3a:0d:ce:82:89:
         43:05:3e:3e:3a:81:ab:14:49:3e:b9:2d:18:92:45:b9:86:87:
         e2:72:c8:f0:78:b0:d7:5c:9e:38:3a:bf:d1:94:ec:f2:e8:23:
         2c:2b:fa:fd:7d:94:94:c4:7f:ac:36:1f:fa:eb:78:93:a3:7c:
         be:06:80:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:30 2025 by rpki-client