Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9b5ab57e-281e-35ce-aff3-eb7065479383.roa
File:                     9b5ab57e-281e-35ce-aff3-eb7065479383.roa (raw, json)
Hash identifier:          DDGjcS2oQvWe90kf+MLv6lBjbx8eTjSwdZHUzj2bv7A=
Subject key identifier:   E6:E4:6F:FC:6E:09:F2:AE:FE:72:23:09:19:20:F8:F6:51:7A:84:A9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584094E15BCC9333099E914427C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9b5ab57e-281e-35ce-aff3-eb7065479383.roa
Signing time:             Sat 14 Jan 2023 12:00:00 +0000
ROA not before:           Sat 14 Jan 2023 12:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        65.8.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:94:e1:5b:cc:93:33:09:9e:91:44:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 14 12:00:00 2023 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=6021d8c3-e988-4b0d-aae1-99b1e71d10e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8c:a1:45:58:5c:be:e7:c3:bd:17:19:db:8b:
                    02:dd:50:95:76:63:28:a0:de:ba:b3:30:63:74:ec:
                    ff:50:ee:e2:37:48:a9:a6:9c:81:32:e3:f8:7b:5a:
                    c3:a8:a1:5b:3b:e4:bf:32:ff:84:4d:24:4c:12:51:
                    6c:04:45:c2:b2:b4:c8:94:0c:41:35:86:32:2b:fb:
                    f0:de:30:fd:fa:16:eb:e6:e7:ee:10:7d:9c:df:d9:
                    29:96:32:82:bd:6a:d5:81:53:cc:83:84:e2:68:84:
                    47:8c:3c:1b:ef:00:3c:79:44:81:80:24:b0:49:20:
                    d6:b4:0e:4a:d8:71:27:85:1f:3d:a1:a4:96:bd:f6:
                    90:34:45:8c:96:af:f0:a3:01:0a:ac:e1:15:3a:e7:
                    49:b7:c9:6e:dc:59:15:b6:1e:b9:4a:05:3f:43:cd:
                    9a:66:6a:1b:b4:c0:8a:3a:2a:37:6a:41:b2:ea:eb:
                    ac:47:86:3d:42:e4:63:17:21:03:1b:fe:34:90:2b:
                    02:73:45:a5:79:89:7c:41:b3:d4:fc:43:16:81:cc:
                    03:66:e7:15:83:5b:df:44:88:2e:6a:f7:3b:09:88:
                    15:6d:b1:28:6a:f1:3a:1f:4c:2e:df:8a:8c:9b:78:
                    17:83:c8:b9:d4:84:3f:d0:b4:c5:c4:79:ab:84:ab:
                    2c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E4:6F:FC:6E:09:F2:AE:FE:72:23:09:19:20:F8:F6:51:7A:84:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9b5ab57e-281e-35ce-aff3-eb7065479383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.8.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:21:d4:c5:11:2a:84:84:ab:d5:1e:cf:86:06:d3:b5:ac:8c:
         b2:91:f4:15:2e:f7:58:3b:8e:cf:7a:c2:82:7e:5e:05:b2:2e:
         94:4f:9b:62:75:43:d3:67:90:30:0a:fc:7b:a2:7d:8d:8b:93:
         2f:ed:38:e5:c6:60:77:bf:14:12:73:fe:9c:b0:1c:ce:73:d6:
         ef:ce:65:01:4b:83:f0:6e:95:82:22:3a:32:0f:9f:42:ac:3b:
         07:5f:5c:37:a5:fc:47:7e:37:18:7b:e5:a7:9c:53:36:35:95:
         aa:1b:6a:08:b3:fe:8e:22:d1:cd:e4:3f:46:d1:9e:d6:ff:8e:
         2c:4a:c0:a7:37:fb:b2:9f:59:06:8a:8e:63:2e:37:9f:b5:b8:
         2c:15:54:44:c8:4c:18:e8:11:d5:f5:7d:89:e2:8d:81:6f:80:
         cb:66:1c:c9:ac:83:17:aa:f8:f9:b9:d2:18:b1:b1:62:0a:73:
         af:9c:9c:7f:29:b5:1c:9f:38:ee:18:55:d3:fc:1f:d9:8c:6f:
         c3:e1:c1:8b:df:00:87:ce:8e:e5:30:6a:8c:60:bb:c6:ca:56:
         52:89:85:0b:9d:91:38:65:32:fd:f1:7b:dd:a0:eb:62:e1:fd:
         f8:2e:79:52:75:42:bf:2c:6b:3f:28:91:09:47:6d:4a:3f:98:
         97:56:01:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:19:50 2025 by rpki-client