Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a224c84d-5efa-373d-9346-f9777c49924a.roa
File:                     a224c84d-5efa-373d-9346-f9777c49924a.roa (raw, json)
Hash identifier:          BH8bMlWvzyi13TRgEykYAKhLULONrIjlpIpc/uminRk=
Subject key identifier:   84:57:85:93:4E:32:65:DD:46:8E:E5:17:5E:5B:4A:E8:A7:32:DE:47
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FE888D2C4C2945709A4E4B500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a224c84d-5efa-373d-9346-f9777c49924a.roa
Signing time:             Sun 13 Nov 2022 12:00:00 +0000
ROA not before:           Sun 13 Nov 2022 12:00:00 +0000
ROA not after:            Mon 19 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        158.252.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:e8:88:d2:c4:c2:94:57:09:a4:e4:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 13 12:00:00 2022 GMT
            Not After : Dec 19 05:00:00 2022 GMT
        Subject: CN=b5c74e5c-2318-427f-b4f4-4e57c355c5dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:c4:98:c1:ae:c8:0c:62:ff:d0:29:d2:68:85:
                    76:e5:a3:11:ed:ad:2e:78:ed:9e:35:0d:28:60:95:
                    6e:76:6f:9e:26:35:56:0a:5b:4f:bc:7f:46:8a:c6:
                    0e:19:eb:ad:19:77:05:bb:a3:31:af:10:e0:90:d3:
                    42:ac:26:58:a1:28:2f:c5:d4:be:66:3b:18:cd:99:
                    88:34:91:92:c4:0b:b5:d5:f0:82:e8:50:53:f2:eb:
                    15:00:bd:e2:3d:7d:2e:a0:59:f0:30:a1:bf:ee:ea:
                    7e:34:df:c9:93:8f:15:0b:88:48:02:6a:73:c8:65:
                    d6:30:ec:33:75:47:81:88:94:9f:4e:86:72:e5:71:
                    f1:42:54:32:03:9b:e2:1c:ca:1b:06:3a:2e:3b:22:
                    90:eb:2a:d7:e2:05:6f:50:62:b6:17:51:58:91:14:
                    48:28:2a:58:81:37:00:73:d2:6b:d4:61:52:55:a3:
                    40:ae:2c:39:ba:54:fa:60:40:35:af:ad:39:6e:63:
                    6d:0f:2b:fe:b3:47:71:6c:05:c1:16:c2:e0:bc:59:
                    22:f2:0b:93:3e:68:bc:7d:b5:11:42:3e:ef:80:56:
                    27:43:55:cd:1f:06:bc:23:a0:06:c2:c0:11:d9:89:
                    af:5f:dd:26:ac:e9:f3:f3:90:83:17:05:06:fe:fb:
                    e8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:57:85:93:4E:32:65:DD:46:8E:E5:17:5E:5B:4A:E8:A7:32:DE:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a224c84d-5efa-373d-9346-f9777c49924a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.252.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:f1:b1:3f:ab:34:ee:f5:8a:d6:a8:04:6d:9f:3c:e0:e2:e1:
         5e:66:f1:64:bf:37:ff:2f:4f:e1:f5:9c:ed:2f:c8:20:ed:85:
         59:2b:79:33:5b:3a:5c:00:3c:5e:02:89:65:d7:ba:1b:82:21:
         fb:c7:a4:fc:b4:57:60:a3:a3:99:4a:77:2f:2d:7b:d5:76:a9:
         97:78:b2:7b:72:11:76:53:24:ed:d8:e7:04:b6:45:e9:d7:63:
         f1:e7:3a:25:5b:8a:87:ae:bf:5c:ab:54:da:bd:7e:1b:57:80:
         dd:89:f7:ab:34:ea:d5:da:37:f0:9a:29:4a:a1:36:a3:41:5e:
         0a:a5:da:39:2c:68:e5:37:68:6b:66:c3:e5:2e:9b:20:e9:f8:
         fd:d5:f0:3f:11:df:80:4b:9a:59:1c:16:76:8e:98:73:c6:2d:
         32:b5:02:ff:9d:b7:21:96:ec:e4:62:bd:44:64:6a:ff:ab:27:
         c9:9b:68:ac:72:1c:cc:ce:72:33:c0:67:fa:c6:3c:88:e3:a4:
         e6:b5:ed:d5:aa:36:df:a2:e7:48:eb:5a:1a:bf:c1:f3:01:0f:
         7d:9c:e8:ab:17:96:9d:66:ac:14:db:11:46:3e:58:7b:d3:3b:
         00:e9:a7:67:69:b1:bb:f3:5a:4f:ba:f8:b0:87:77:9e:05:d7:
         76:21:b5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:58 2025 by rpki-client