Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a450f4d5-0f8f-301c-8b16-4ec1689d2396.roa
File:                     a450f4d5-0f8f-301c-8b16-4ec1689d2396.roa (raw, json)
Hash identifier:          JbQZun/1k30vpF54pb1TivDA4uM7lFuC7taIhBhBZUU=
Subject key identifier:   5E:42:90:FB:C1:A2:2E:D9:C3:DB:5D:2C:20:72:EA:D0:F1:49:29:28
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FE9C541CEFC8AC86271F46500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a450f4d5-0f8f-301c-8b16-4ec1689d2396.roa
Signing time:             Mon 14 Nov 2022 12:00:00 +0000
ROA not before:           Mon 14 Nov 2022 12:00:00 +0000
ROA not after:            Tue 20 Dec 2022 05:00:00 +0000
asID:                     701
IP address blocks:        162.208.123.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:e9:c5:41:ce:fc:8a:c8:62:71:f4:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 14 12:00:00 2022 GMT
            Not After : Dec 20 05:00:00 2022 GMT
        Subject: CN=054324cb-5f66-4e76-ae2a-93f1f9d81b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:af:3e:a1:08:ca:b7:19:a5:f2:95:a0:b7:23:
                    f7:1a:ba:eb:4b:ae:77:be:ac:80:9c:b2:98:e9:f4:
                    ab:b1:db:da:44:8f:ae:84:f3:9e:6d:c2:5e:2f:55:
                    86:ae:6e:b2:4f:0d:ef:7c:9a:e1:10:87:c1:58:a7:
                    e7:73:94:f5:27:b2:a1:c5:4b:38:59:f8:6f:3a:70:
                    4b:28:62:e4:16:66:27:ae:11:4a:2c:d7:b3:3b:87:
                    b8:da:39:76:01:b4:be:57:43:56:85:65:8c:12:5e:
                    02:c0:01:5d:fc:2d:bc:e3:0a:a1:c5:ed:02:65:2c:
                    41:8d:b5:b1:4a:1a:8a:58:60:33:10:4c:96:c1:d6:
                    4a:98:4c:4e:de:9c:82:c4:23:35:60:03:78:b6:c8:
                    01:f1:88:f4:4e:d3:9f:e6:f6:66:19:ea:f3:52:ab:
                    2a:b6:03:18:34:cd:72:9e:29:80:c0:e5:6a:9c:e5:
                    da:a9:1d:58:11:75:88:37:e0:4f:87:0b:f9:8f:b3:
                    10:af:0e:c4:fe:cb:0a:60:29:bd:73:b3:9b:e7:08:
                    8a:96:8c:fd:c7:2c:5d:35:5b:bb:d6:e3:32:2c:0a:
                    03:87:c7:e6:bf:0f:27:6e:37:7e:0f:42:7b:06:08:
                    99:36:07:9a:83:56:13:96:db:ed:e0:16:9b:10:67:
                    92:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:42:90:FB:C1:A2:2E:D9:C3:DB:5D:2C:20:72:EA:D0:F1:49:29:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a450f4d5-0f8f-301c-8b16-4ec1689d2396.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:b5:92:19:59:5c:36:fa:61:9c:57:ac:e7:1a:5b:a5:6f:e3:
         92:8e:37:11:62:a4:21:5c:8f:0f:d7:d3:15:e8:da:df:68:57:
         aa:d1:97:a7:3c:5c:d2:5e:01:76:08:57:4c:93:13:df:2b:ff:
         90:47:52:e4:b4:04:ff:da:a3:17:3e:4f:c3:5c:6b:39:68:5f:
         a9:2b:33:dd:4e:61:e0:65:32:ec:b1:99:b1:2f:7a:2c:dd:4b:
         c8:23:ba:d1:8d:00:e5:6b:99:81:5c:27:b6:4b:15:ef:e8:9f:
         79:2d:bc:79:80:9a:03:c5:05:0d:0f:09:5f:8d:fb:57:21:4e:
         ac:2d:bc:b9:d2:f6:47:e6:d4:c9:18:ee:34:0a:9b:a2:e8:09:
         49:c2:99:a5:57:29:3b:d4:df:6f:0c:ed:6b:32:e6:f4:32:f7:
         fa:b1:88:8e:e6:15:7b:7c:14:5b:1c:1a:b2:aa:c5:d1:9d:6f:
         02:c4:34:c0:0a:33:60:8e:c0:c2:ff:e9:fd:02:25:92:7b:94:
         4a:ee:0c:29:1a:92:d6:28:5b:ad:22:a6:8a:51:6f:a3:fe:32:
         f7:18:de:5e:b0:1c:f5:f5:55:b9:d6:0e:03:d7:f0:11:32:59:
         cd:8e:72:66:54:5b:ae:96:e2:ec:aa:ec:5d:01:53:5b:80:22:
         96:0f:08:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:42:42 2025 by rpki-client