Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2905747-d0ff-31db-8659-6a57eaf170fa.roa
File:                     a2905747-d0ff-31db-8659-6a57eaf170fa.roa (raw, json)
Hash identifier:          0usEwFOKHVfFc0cuALXxFnFKOYwFTWf/84+oW014j6U=
Subject key identifier:   AF:03:1E:8A:02:57:27:4D:AE:E9:E7:F2:14:A0:90:F7:13:75:26:B8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DF842855E532E5612F33E38D0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2905747-d0ff-31db-8659-6a57eaf170fa.roa
Signing time:             Fri 20 May 2022 12:00:00 +0000
ROA not before:           Fri 20 May 2022 12:00:00 +0000
ROA not after:            Sat 25 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        204.130.202.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f8:42:85:5e:53:2e:56:12:f3:3e:38:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 20 12:00:00 2022 GMT
            Not After : Jun 25 04:00:00 2022 GMT
        Subject: CN=c3f02622-30dd-440f-94fe-c987189ef286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bc:54:59:f4:92:39:60:f4:97:aa:5f:34:8e:
                    a2:70:a9:e3:cc:9c:4c:9d:a4:4c:a8:60:86:45:86:
                    e2:6c:c9:e7:ae:5b:60:8e:76:d1:ed:53:36:4d:cb:
                    9d:d8:9f:2f:31:f4:ad:83:19:55:54:73:26:c5:7d:
                    28:4a:c1:f6:5f:96:54:7c:07:4b:51:aa:6f:2a:8d:
                    86:0d:47:e8:56:c2:bf:5a:78:37:41:8c:7c:e0:18:
                    83:c1:74:14:a6:43:8e:89:97:74:21:b2:92:de:97:
                    ea:e0:35:84:94:ac:e9:3d:fd:4f:91:cd:00:e9:e1:
                    20:e9:28:26:7c:4f:ee:81:7c:04:1d:7e:c1:fe:ab:
                    f6:c6:38:7d:91:97:a6:29:9b:29:5b:3f:4d:70:fd:
                    0a:57:5d:29:56:3b:16:81:86:d5:9b:3f:a1:7b:73:
                    67:ca:e2:60:eb:a0:40:82:36:c2:35:0b:a5:15:8c:
                    ba:19:0b:6f:0d:ba:1d:3e:ed:8c:34:41:fc:b2:47:
                    e0:8c:af:11:47:6d:29:ef:03:72:d4:ad:72:88:c9:
                    26:6f:ab:98:4d:6e:08:7f:c7:d4:6a:3c:11:9f:a3:
                    c5:fb:fd:47:29:1d:85:1e:fb:85:96:31:2b:76:f0:
                    59:c8:d9:1c:bf:b6:b9:2d:23:f7:32:05:70:b2:ae:
                    7b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:03:1E:8A:02:57:27:4D:AE:E9:E7:F2:14:A0:90:F7:13:75:26:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2905747-d0ff-31db-8659-6a57eaf170fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.130.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:52:1f:3b:c6:a8:e7:b1:af:88:2b:c8:09:74:a0:a1:95:ea:
         74:ce:0f:ec:1a:2e:6d:1c:b9:13:23:5b:76:3c:86:21:d2:2e:
         f5:55:12:e7:d7:e9:94:2b:61:c1:0b:ef:ca:dc:6b:6e:d5:82:
         3b:3d:96:64:cf:76:1e:c9:8f:e8:cc:d9:50:42:9b:16:12:29:
         9e:58:ac:14:27:21:61:fa:82:37:8f:84:2c:e4:48:23:7e:93:
         4b:9e:47:d2:0a:46:5f:ae:71:21:a8:28:6e:ba:04:29:8b:27:
         37:24:3e:12:6f:d5:51:0d:07:95:af:76:9d:db:8d:b9:ab:d7:
         15:28:bd:1e:7a:bf:4e:41:0d:8c:ad:e7:c3:a7:7e:9c:04:51:
         fa:e6:9c:d5:7b:47:b9:2c:ba:dc:2f:a0:cc:3f:e3:30:86:35:
         0a:bb:54:7b:0e:15:b1:92:ff:ab:dd:22:ac:f3:28:50:e6:35:
         71:02:c9:8a:ec:de:2f:2a:10:f0:27:0e:60:93:f0:6f:3d:7a:
         47:d6:58:c3:31:d2:c7:23:17:2f:77:6c:13:cb:89:c6:9b:1a:
         67:06:b3:00:14:05:bc:86:4a:17:90:fb:32:34:28:53:a1:c0:
         01:94:d0:af:68:fb:fb:ab:d4:f1:f8:c9:93:28:b6:04:3d:6d:
         de:c0:d1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:53:01 2025 by rpki-client