Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9a1d8943-f986-3493-9f3d-0de0f562fc3b.roa
File:                     9a1d8943-f986-3493-9f3d-0de0f562fc3b.roa (raw, json)
Hash identifier:          nP7zD9TSu92BFbRxTTLuOav/Vjov0fTdAGKtMSdYAUw=
Subject key identifier:   93:F0:C6:21:2B:DA:2D:45:D9:51:CB:73:BF:FB:75:8E:50:20:83:83
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D8B10001B785B9C2C7AC0C0C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9a1d8943-f986-3493-9f3d-0de0f562fc3b.roa
Signing time:             Mon 11 Apr 2022 04:00:00 +0000
ROA not before:           Mon 11 Apr 2022 04:00:00 +0000
ROA not after:            Mon 16 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        40.179.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:8b:10:00:1b:78:5b:9c:2c:7a:c0:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 11 04:00:00 2022 GMT
            Not After : May 16 04:00:00 2022 GMT
        Subject: CN=a740a20e-7bca-4047-8ce1-bca93af765fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ee:dc:f1:d2:f0:d0:66:b5:41:b4:0b:4c:7c:
                    fa:66:a3:4b:f5:fc:44:54:64:11:f5:e1:cc:6e:95:
                    5c:1d:79:57:9e:c8:e6:f4:2b:88:0a:83:9b:ee:c3:
                    8d:79:fd:bf:99:da:e4:bd:fe:9c:b0:78:1e:87:73:
                    c0:2d:da:d3:b3:d7:83:e2:b8:e3:1d:88:4f:d0:06:
                    8d:37:e7:1b:44:40:75:40:21:14:e4:05:eb:e9:fe:
                    65:d9:a9:56:96:a5:fd:ec:bf:66:42:2f:eb:b8:a1:
                    f9:2c:bb:c8:6d:58:64:2a:fc:4d:aa:8f:36:36:ac:
                    79:cf:f7:67:b7:2b:1e:14:f2:aa:cc:a0:df:73:41:
                    46:d4:af:b4:d8:7d:54:6c:1a:d2:95:6d:f3:a5:88:
                    22:94:50:48:73:47:dd:87:f5:b2:09:da:af:7d:ca:
                    58:91:5d:63:54:4b:33:9b:99:6a:96:a2:8c:35:3b:
                    42:77:d7:61:40:0b:ea:d0:c2:61:e0:e3:b6:09:00:
                    0c:87:10:ba:8f:fc:4c:a8:0a:e5:b2:2c:dc:0c:1d:
                    02:ea:2f:21:a7:1f:3f:86:cc:23:5a:49:67:9b:71:
                    a2:a3:a0:7d:4a:7e:f7:74:38:ee:2d:84:56:d6:3a:
                    0e:39:42:82:3b:c8:e3:9b:4d:77:17:21:96:2b:bc:
                    57:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F0:C6:21:2B:DA:2D:45:D9:51:CB:73:BF:FB:75:8E:50:20:83:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9a1d8943-f986-3493-9f3d-0de0f562fc3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.179.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:2c:98:f2:2b:c2:46:96:9a:1a:22:e0:5e:5d:57:d7:69:9d:
         e2:3b:88:20:5d:f7:e2:0d:e7:cf:2e:ef:a9:cb:0e:c1:7b:20:
         a6:66:57:64:5e:5e:bd:cf:38:35:3f:83:33:ff:44:e2:95:19:
         22:b5:f6:4c:40:0f:03:fd:8d:6f:b2:23:17:8e:3c:b7:6e:1f:
         0c:5b:e0:a2:6d:64:4d:d4:ff:0f:6b:01:ad:4f:08:1c:ee:ca:
         6c:75:f0:30:f9:13:5e:4e:d8:2e:ae:a7:47:ed:73:bb:d8:b6:
         dd:71:ee:6d:ec:f3:1b:46:ab:22:3c:81:43:44:30:38:d1:0d:
         7f:36:fe:2a:ea:66:f8:ea:73:c5:0d:9e:cc:b2:9c:88:92:f3:
         c5:d0:c1:64:41:8c:83:35:13:c8:e7:e7:6f:7e:16:cc:00:bc:
         10:e4:04:5b:b1:0d:72:bd:15:8a:7a:ca:a1:59:92:fe:b3:b7:
         07:ef:66:88:51:3a:7e:d6:07:82:0c:85:73:8e:90:b6:31:49:
         53:48:0c:68:da:ca:10:4a:db:7d:e0:c4:34:c9:ea:51:ee:63:
         68:3b:99:58:75:28:81:b7:cf:fc:dd:13:f4:73:db:77:22:76:
         f9:a2:e6:d2:be:34:4c:44:2a:03:f7:48:ad:e0:3f:a0:7f:cf:
         ca:21:42:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:21 2025 by rpki-client