Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/97f48dfa-5625-389d-8411-63d2c6cf35d4.roa
File:                     97f48dfa-5625-389d-8411-63d2c6cf35d4.roa (raw, json)
Hash identifier:          uU87f9ok0jIEfPLk1YeSrzl2LeSb4pfNcRe2b5vD4HE=
Subject key identifier:   8B:2E:E0:03:21:88:CC:C2:B4:BE:9A:B8:FF:2C:15:A4:19:20:B8:0D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840176D02B117CB2A5635266FC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/97f48dfa-5625-389d-8411-63d2c6cf35d4.roa
Signing time:             Wed 30 Nov 2022 12:00:00 +0000
ROA not before:           Wed 30 Nov 2022 12:00:00 +0000
ROA not after:            Thu 05 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        57.193.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:17:6d:02:b1:17:cb:2a:56:35:26:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 30 12:00:00 2022 GMT
            Not After : Jan  5 05:00:00 2023 GMT
        Subject: CN=f5c60d9a-26e3-4e41-aeb7-baf588f00a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:84:d3:69:43:c9:de:3b:16:a6:57:11:51:6d:
                    70:3d:1a:d9:ab:a2:e4:06:bd:98:11:d3:d1:2d:34:
                    d5:b5:f6:2b:27:0e:82:65:80:2e:dd:d6:41:d5:c9:
                    79:82:06:49:cc:a6:6e:98:74:8e:18:5a:b1:53:4f:
                    57:ef:13:5f:8f:df:a1:ea:29:12:f2:40:b2:90:32:
                    8d:3a:1a:a2:13:ed:0c:fb:76:c3:fb:92:1f:ff:65:
                    72:a5:a0:14:4b:91:08:02:8b:26:8e:69:35:9e:93:
                    6e:b5:2b:3b:af:67:74:a3:31:a4:d7:40:98:0e:ae:
                    72:d5:44:2a:e6:d8:8d:5c:0c:d3:8a:47:6b:de:3c:
                    37:f5:fe:5e:56:0d:4c:2e:6a:d0:b2:06:02:95:b8:
                    c6:33:14:a7:d7:8a:48:10:26:ea:06:ac:59:10:3f:
                    00:0a:c0:c8:8a:55:2a:f8:1f:a8:63:2b:94:1f:84:
                    99:be:4d:c9:02:c0:f7:c8:d2:97:7c:95:28:03:48:
                    14:5c:7d:12:b4:f9:df:82:a0:03:15:66:5d:ab:f6:
                    83:76:1e:60:72:9f:50:71:6b:8d:b3:b7:f1:86:77:
                    ca:93:9f:19:52:a3:10:c7:61:c9:57:f4:ce:ac:be:
                    a3:bb:9e:72:ad:73:3d:0f:fc:f3:34:96:92:e7:55:
                    96:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2E:E0:03:21:88:CC:C2:B4:BE:9A:B8:FF:2C:15:A4:19:20:B8:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/97f48dfa-5625-389d-8411-63d2c6cf35d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.193.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:db:51:0b:59:b2:d7:77:d6:d5:27:4f:8d:ad:a6:21:2e:5a:
         9d:7a:2b:91:d7:8a:8b:e5:0d:4e:e9:96:06:8f:a7:b8:a5:6d:
         22:c0:86:b8:2e:ce:1d:01:c9:1f:6a:88:67:4c:de:e7:f8:35:
         f9:8a:d9:41:5c:e8:d9:33:00:ae:20:49:dd:34:cc:6e:ac:e2:
         97:14:8b:82:7e:36:36:87:e1:03:c7:65:3c:c6:dc:a4:ba:b0:
         21:2e:7c:a4:fb:97:13:28:8f:d4:b4:87:5e:a9:03:97:38:7c:
         34:5d:2f:0d:cf:a9:6c:28:ff:bf:3c:08:0b:35:34:f0:92:70:
         a2:56:45:84:a3:e8:19:89:01:dd:28:18:eb:be:25:78:05:d9:
         8f:3c:49:c7:3b:61:53:ad:2c:d6:ac:84:23:53:25:8a:3b:84:
         8e:d3:4c:2e:24:8c:44:3f:eb:b7:5e:d8:3b:9b:ad:d0:33:1b:
         9d:42:20:b9:a0:83:39:54:f8:8e:e4:df:9e:34:c9:a8:9a:ac:
         dd:40:af:96:ae:e5:92:6c:0f:d9:28:cb:6a:fa:c3:51:b4:66:
         42:d4:97:4d:21:5d:e6:9b:3a:c3:0e:08:b5:e6:3f:8c:30:44:
         ca:a4:49:62:f5:eb:c2:da:7f:d1:82:f6:af:a9:9f:67:f0:4b:
         1f:75:68:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:26:18 2025 by rpki-client