Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/995a57f3-050e-39bf-8c96-a8cbc0d72fef.roa
File:                     995a57f3-050e-39bf-8c96-a8cbc0d72fef.roa (raw, json)
Hash identifier:          +zAMSEkFvV8GQYpK3RouPl7Zlz3ZCeOWKE0l7stSw/8=
Subject key identifier:   F9:5A:39:AE:89:73:FE:9A:E0:D5:61:89:7D:B1:98:1B:0B:DD:07:10
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858400E177FF7C683E1CCED68F200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/995a57f3-050e-39bf-8c96-a8cbc0d72fef.roa
Signing time:             Sun 27 Nov 2022 12:00:00 +0000
ROA not before:           Sun 27 Nov 2022 12:00:00 +0000
ROA not after:            Mon 02 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        40.234.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:0e:17:7f:f7:c6:83:e1:cc:ed:68:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 27 12:00:00 2022 GMT
            Not After : Jan  2 05:00:00 2023 GMT
        Subject: CN=8a0205b8-371c-478a-abb8-34e3f0355df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b3:f3:3b:9c:4d:9e:bb:cf:e6:46:9e:fa:ae:
                    1a:b9:8b:3b:0f:c3:a6:8e:16:a2:1c:75:37:cb:27:
                    8c:94:07:e9:d4:35:9f:c2:27:81:e6:09:d3:c3:9d:
                    8a:6b:1f:fb:cd:c1:14:45:12:8f:d0:92:d3:3b:a1:
                    65:ed:d8:ce:5b:a8:bc:ad:c6:bc:b3:83:01:21:1a:
                    ff:54:04:04:6b:f4:eb:78:48:ff:3f:65:13:bb:90:
                    2c:32:fa:97:0a:9f:43:f7:a0:05:db:e5:39:ae:eb:
                    86:8f:78:48:62:b3:40:2a:55:b4:72:c6:68:dd:ae:
                    20:d1:46:76:9d:fa:5d:d6:2b:28:c1:b2:9e:55:06:
                    9d:0d:d5:3f:e5:64:cb:03:06:7d:13:c4:ba:6f:32:
                    7a:53:d1:bd:43:19:a5:6a:1a:a0:fa:32:65:e3:91:
                    d0:87:ea:f4:6c:08:17:7e:6f:bf:c9:73:6f:8d:d8:
                    31:f5:75:84:e6:93:dc:57:99:29:9d:29:1c:e4:d7:
                    2d:9b:78:bf:83:8d:a0:2f:80:32:d8:54:ff:4d:d3:
                    dd:90:b2:d3:4c:0a:77:5a:a2:49:fe:af:db:2d:24:
                    16:3f:b9:83:c8:a8:76:46:c9:cb:d4:a2:7b:96:0c:
                    63:67:04:f5:e3:4d:82:35:57:aa:7b:fd:4c:38:98:
                    0a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5A:39:AE:89:73:FE:9A:E0:D5:61:89:7D:B1:98:1B:0B:DD:07:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/995a57f3-050e-39bf-8c96-a8cbc0d72fef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.234.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:7e:05:9f:fb:79:68:ca:7a:76:b5:c4:5f:b1:ad:d9:6a:a3:
         04:1e:cf:7b:4d:a3:07:3d:c0:9e:ca:3e:d5:a0:9d:a4:58:1c:
         64:0f:60:a8:72:cf:82:47:8e:92:0d:21:63:61:b0:27:e3:b9:
         38:95:bb:34:43:ee:b8:bf:4a:ab:91:99:20:1d:d7:13:95:57:
         db:ef:a7:60:ac:f8:7b:73:e3:16:25:02:c5:55:cd:08:05:0c:
         91:48:c6:66:b6:80:02:22:61:32:cf:c1:b5:c7:69:16:85:65:
         74:00:1a:83:80:b4:5e:a3:16:04:04:d9:7e:aa:3a:84:c0:14:
         a4:c8:24:69:ab:83:af:1c:b5:68:7f:62:8f:55:a7:d6:81:b6:
         a1:fb:eb:89:ad:b0:bf:13:33:3e:5c:88:fe:c9:0b:d1:f7:f8:
         d1:ea:69:8d:b6:ca:0d:44:21:1c:88:24:09:5e:50:36:fd:63:
         d4:4c:57:de:91:b6:4b:54:34:f7:e8:4e:29:22:20:96:47:52:
         f6:49:57:07:7a:9d:bb:e1:51:8f:bc:7c:bc:75:66:d3:2b:72:
         c2:6a:b6:13:64:4e:ad:2b:87:2c:7b:55:2c:11:82:2f:14:16:
         0f:5b:fe:aa:ae:70:11:ef:b5:80:ab:4d:9b:79:66:cb:bb:e3:
         a1:38:fa:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:06 2025 by rpki-client