Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9aee0d1e-b654-3571-9c6c-c029fb3f10ea.roa
File:                     9aee0d1e-b654-3571-9c6c-c029fb3f10ea.roa (raw, json)
Hash identifier:          tyJCj6hE9xZaanlxyiEEgE7hzJqslg/ZK9incsHiGLU=
Subject key identifier:   5E:39:DB:30:81:51:F9:B9:4E:6B:EF:EA:29:B9:93:9C:A2:C1:FD:25
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840251831472D1E2E0FB9B82980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9aee0d1e-b654-3571-9c6c-c029fb3f10ea.roa
Signing time:             Mon 05 Dec 2022 12:00:00 +0000
ROA not before:           Mon 05 Dec 2022 12:00:00 +0000
ROA not after:            Tue 10 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        132.223.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:25:18:31:47:2d:1e:2e:0f:b9:b8:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  5 12:00:00 2022 GMT
            Not After : Jan 10 05:00:00 2023 GMT
        Subject: CN=0b2140b1-6709-4032-a766-3d46f81aaebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6d:56:c7:67:bd:66:4e:82:cc:57:3d:05:a2:
                    06:9e:1a:4e:21:53:16:3b:93:23:c0:25:a6:8e:41:
                    88:59:16:b0:23:e0:f6:3a:9d:81:9f:77:f0:7d:72:
                    15:c0:4a:55:eb:da:78:22:76:12:7a:12:93:03:b9:
                    b8:9b:58:bb:f1:bb:7a:f4:98:6b:50:74:3a:3b:81:
                    48:e0:13:20:04:9d:e4:79:5a:23:72:ac:ef:f1:18:
                    e5:10:19:cd:55:43:29:15:e5:fc:50:64:96:31:20:
                    ff:9b:6c:82:ca:23:1d:3b:20:44:54:05:99:42:a7:
                    93:da:ee:50:93:68:eb:35:af:83:72:91:2a:cb:e9:
                    9a:2c:e8:c2:17:df:e4:eb:6a:84:e0:fd:5b:06:05:
                    73:c2:6e:57:70:13:d7:a5:96:67:c8:b5:9a:83:1e:
                    f9:f2:2c:31:62:55:d7:3c:48:fd:81:7b:68:75:59:
                    c5:c7:74:50:27:5c:1e:9c:ac:b5:22:9d:66:3f:2c:
                    e9:5a:7b:28:ba:a1:42:c0:57:95:9a:47:7e:80:be:
                    91:de:60:da:d0:37:1e:6d:05:f2:33:69:83:93:b8:
                    1f:76:7e:a6:a6:e3:29:73:64:03:85:1b:04:89:7d:
                    a3:4b:49:e4:62:38:2e:98:ae:c4:06:b6:84:12:e7:
                    83:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:39:DB:30:81:51:F9:B9:4E:6B:EF:EA:29:B9:93:9C:A2:C1:FD:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9aee0d1e-b654-3571-9c6c-c029fb3f10ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.223.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:8f:30:54:ce:9c:8c:5a:2a:cc:f9:ad:d9:32:c9:73:8a:c0:
         72:26:0b:1d:bd:75:84:81:b9:f6:33:97:41:32:5b:77:d3:d3:
         41:43:e5:40:dd:4d:74:7d:66:8f:9c:8c:24:af:c5:09:43:07:
         47:36:d2:e7:de:ad:75:e0:e2:c4:15:40:e6:06:f0:e6:85:46:
         a3:c3:e7:8b:25:8a:43:69:37:a9:74:4b:a4:44:01:02:3a:1e:
         10:f6:8a:13:29:10:da:dd:69:56:4e:2b:cf:8c:04:51:41:1d:
         65:54:f4:54:cd:21:ab:00:b3:4d:72:e4:da:42:1b:14:d6:db:
         e8:7a:cf:0e:39:91:43:6e:d6:fa:9d:e2:27:db:87:26:8d:a8:
         44:e4:e2:9b:c4:12:f0:aa:5b:ea:36:44:de:9b:38:4a:68:44:
         6c:b6:e6:a1:97:53:99:7c:45:07:66:04:2a:e3:3d:05:e4:a4:
         27:35:33:dc:86:f3:89:22:20:be:9b:91:e7:54:40:64:fa:dd:
         b8:c6:65:96:d3:80:7b:2f:98:df:96:61:c1:8e:59:b0:0a:cd:
         56:e3:e5:e3:23:f5:8e:3b:32:03:74:39:ab:5e:e9:c6:47:6c:
         e7:ef:2f:a8:fa:f1:9b:4c:04:d4:06:6b:99:22:fa:cb:7a:65:
         6a:66:cd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:51 2025 by rpki-client