Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9ff8a12c-9c99-3f82-a125-a8d4c25df3b0.roa
File:                     9ff8a12c-9c99-3f82-a125-a8d4c25df3b0.roa (raw, json)
Hash identifier:          BT4V0MJOACxeHuwVv6le4aimVR09hrxi5wo+xwuOo0s=
Subject key identifier:   DE:94:0D:29:03:ED:93:B7:0B:3E:5F:AF:FF:4E:68:72:F8:FF:B9:BC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D3379568FFDB6B6829D4D9EA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9ff8a12c-9c99-3f82-a125-a8d4c25df3b0.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        209.54.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:79:56:8f:fd:b6:b6:82:9d:4d:9e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=5e1599a9-6f9b-46f9-ba29-f62e35678304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:54:f0:7c:c4:c1:e8:f7:ba:03:d4:08:00:c5:
                    b9:6a:13:88:b9:7d:10:60:03:b0:4f:79:00:4f:c2:
                    7e:e5:30:d9:34:95:6d:bb:3f:a0:19:5a:fd:a6:9f:
                    91:94:7a:a6:b3:91:58:99:4d:08:93:66:ff:f6:14:
                    e6:ea:2f:93:9c:19:25:8c:44:a7:bf:8d:10:03:3a:
                    f4:c0:ef:50:a7:17:eb:38:e2:63:7b:1f:7e:8f:bd:
                    5e:67:bd:4c:c9:ed:c7:c1:14:3b:a2:8d:2b:66:60:
                    8a:60:3b:7b:4a:76:06:b1:1c:6f:9a:7f:38:9c:8c:
                    15:85:5c:e2:aa:93:c7:22:95:ae:98:d0:e6:00:e5:
                    3a:66:9c:96:72:ed:fd:37:48:84:ff:33:7f:66:af:
                    25:fc:83:07:38:90:00:f7:e2:8d:4f:78:cb:55:5b:
                    37:e6:06:29:1c:be:21:9f:d4:4c:f5:5b:4f:bb:93:
                    e5:b1:37:56:78:21:a0:52:38:d7:d8:36:4d:b3:60:
                    c5:52:e2:eb:eb:fc:d9:c7:85:f2:fe:d6:29:e9:ab:
                    4b:34:7e:77:6c:22:20:a4:6c:b4:f9:0c:7a:62:5c:
                    66:01:f5:dc:28:19:24:37:8a:47:77:23:5d:bb:a8:
                    13:68:d2:0f:7f:ee:76:d0:7a:3a:6d:e3:6b:48:32:
                    ff:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:94:0D:29:03:ED:93:B7:0B:3E:5F:AF:FF:4E:68:72:F8:FF:B9:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9ff8a12c-9c99-3f82-a125-a8d4c25df3b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.54.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:72:8e:3a:cb:e0:e3:03:d5:15:10:45:8f:6e:31:d4:a9:80:
         4a:92:8f:90:4c:37:36:c8:80:92:73:07:5b:19:d7:2e:d8:aa:
         d0:cd:02:d3:6f:72:f6:06:9e:64:27:e2:8e:5c:ec:cb:9c:68:
         8f:ac:c0:c5:b7:98:a6:eb:c3:8f:66:a8:53:e8:03:02:5b:87:
         37:08:6c:2e:b0:30:74:72:7c:ab:01:35:74:0e:bb:38:66:a5:
         cb:d8:cc:15:01:26:7a:55:8a:83:32:68:94:04:72:bb:fc:d6:
         e2:0f:5d:13:95:43:7f:34:1c:c1:9e:5a:32:00:a7:57:a3:0a:
         01:f6:89:b0:92:ac:73:40:e0:1d:32:dc:55:83:17:f8:56:b8:
         66:b9:f6:dc:c4:e7:0b:ec:af:d5:42:a0:3d:fb:54:6c:15:64:
         44:3f:6a:4b:46:07:3b:e0:3b:47:64:a8:fc:31:45:fa:db:26:
         4f:07:d2:44:fd:43:cc:16:f1:5a:55:40:a1:32:e8:ba:8f:07:
         7d:cb:34:9b:b4:49:3f:a7:79:30:30:2f:2d:db:30:f5:a1:15:
         8e:ba:ac:2f:ea:cb:9e:86:1f:40:99:e8:eb:b4:2a:aa:60:98:
         29:88:06:10:91:9f:c0:09:0b:37:6a:1f:eb:1a:d0:e9:6d:36:
         97:24:94:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:47:48 2025 by rpki-client