Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d63bd28-831e-3d92-b294-f754c8595875.roa
File:                     9d63bd28-831e-3d92-b294-f754c8595875.roa (raw, json)
Hash identifier:          zViW6am0/MRSDgSbukQ7oLbpyMVMpqSpLacXVxI6Mdk=
Subject key identifier:   72:59:39:F7:35:6B:1C:4F:76:97:14:9D:0D:1F:EC:32:F4:80:CD:40
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858405F39D662B8CC3EF769906780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d63bd28-831e-3d92-b294-f754c8595875.roa
Signing time:             Mon 26 Dec 2022 12:00:00 +0000
ROA not before:           Mon 26 Dec 2022 12:00:00 +0000
ROA not after:            Tue 31 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        68.158.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:5f:39:d6:62:b8:cc:3e:f7:69:90:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 26 12:00:00 2022 GMT
            Not After : Jan 31 05:00:00 2023 GMT
        Subject: CN=d8f9098b-df77-46fd-bcdc-1e6b0e2517ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:49:a2:a0:e1:78:3e:09:e0:42:78:be:9d:a5:
                    45:94:cf:6a:f0:05:b0:fb:0e:83:a6:71:1d:fa:b4:
                    d4:bd:02:4b:e4:a5:d9:47:8b:90:55:03:f7:5c:ce:
                    04:06:6a:74:88:7c:49:62:5c:28:5c:92:cd:e0:e9:
                    cf:2b:aa:5f:ec:58:12:7b:d7:e4:85:29:d6:01:ac:
                    2a:77:8a:22:32:e3:d9:31:e0:cd:84:76:d4:c5:47:
                    10:8b:d5:34:83:7a:f6:74:ac:df:65:db:8e:ae:1b:
                    50:eb:b6:9f:93:f1:f3:cb:e8:9b:d5:f4:ed:2a:4a:
                    c9:cc:d4:a9:bb:cc:d9:a8:04:36:ba:91:6e:cf:41:
                    c7:39:da:76:f1:2c:11:d8:f6:31:64:95:6b:b5:47:
                    a8:35:e1:dd:97:47:ea:c1:ed:fa:92:ab:d8:68:a4:
                    b6:a8:d3:fb:d7:e0:96:10:59:32:f8:f6:c0:2a:0a:
                    04:4f:9b:69:c8:9d:25:ad:8e:1f:6a:5c:ff:c9:62:
                    09:9b:de:50:c0:6c:0d:0b:97:10:3e:1d:62:04:a2:
                    aa:89:f0:cc:1c:c8:78:ad:ce:e9:2e:9a:e7:1e:17:
                    fd:a5:ca:99:a4:78:c6:1d:91:59:40:e3:74:d8:5e:
                    88:02:99:eb:3c:e5:88:79:d9:f7:50:9b:08:81:a4:
                    85:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:59:39:F7:35:6B:1C:4F:76:97:14:9D:0D:1F:EC:32:F4:80:CD:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d63bd28-831e-3d92-b294-f754c8595875.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.158.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:40:ca:45:48:d7:e9:6b:db:fc:c0:75:8e:23:d8:82:99:11:
         fd:68:d9:55:6a:ef:01:cc:71:5f:6b:5f:be:fb:fc:a1:f8:8a:
         32:2c:33:b2:b4:f6:2b:2d:28:60:d2:b1:4b:e1:ce:f9:25:ed:
         d1:c4:ae:c5:cf:38:72:c7:97:15:2b:ce:dc:9a:3b:06:e3:c9:
         b0:8f:98:fd:4f:b7:2e:ae:fc:da:7f:d1:04:a1:53:fc:e2:b7:
         04:0e:e5:f9:50:90:d9:6d:c4:14:f9:eb:49:45:71:70:98:51:
         ae:3c:d1:84:c7:e8:60:ef:02:33:80:40:43:f3:f0:a7:ae:a9:
         7c:4d:8f:bd:d3:05:f6:9e:6b:a4:6c:b4:34:ee:83:80:8b:4c:
         40:30:d1:bb:14:f2:6d:16:1e:f9:38:a9:b2:af:cb:02:55:8e:
         a5:e9:10:b1:ef:a1:ca:5a:b5:31:6a:31:d8:ca:86:7a:70:ff:
         10:23:6f:7c:21:d1:d9:a9:0c:32:a7:66:65:02:de:a7:2c:f1:
         73:a9:91:a8:2f:bb:9f:c3:11:e8:38:69:9e:ed:90:09:c1:c4:
         f8:4e:d8:fb:0d:a5:d0:0f:e1:fe:13:d6:f9:c5:ff:a5:7c:13:
         c3:7d:87:80:b3:3c:ae:88:ea:a9:b2:8f:a1:b6:c6:59:b4:0d:
         31:b0:74:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:55:14 2025 by rpki-client