Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a4947ba7-388b-378a-91b0-95e5ae1cbe41.roa
File:                     a4947ba7-388b-378a-91b0-95e5ae1cbe41.roa (raw, json)
Hash identifier:          VU1yrE9wj5M1rptda4srw3hz5Dd0ugqwa5zIiWNhjL0=
Subject key identifier:   0A:77:3E:A6:CE:1F:A8:57:7D:DF:ED:BB:E6:D9:87:BA:F0:11:5A:4C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840624EF476120010294ECA77E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a4947ba7-388b-378a-91b0-95e5ae1cbe41.roa
Signing time:             Tue 27 Dec 2022 12:00:00 +0000
ROA not before:           Tue 27 Dec 2022 12:00:00 +0000
ROA not after:            Wed 01 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        130.181.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:62:4e:f4:76:12:00:10:29:4e:ca:77:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 27 12:00:00 2022 GMT
            Not After : Feb  1 05:00:00 2023 GMT
        Subject: CN=55538c79-c950-48d9-b27e-f4bd5b8af410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ff:9e:c8:21:99:4c:12:52:71:82:04:58:d6:
                    67:ac:2b:b8:4e:31:c1:a3:74:f3:fe:83:9e:37:14:
                    59:d0:54:2a:c8:08:43:3a:b0:51:5c:48:77:f7:b3:
                    98:9a:62:90:5f:2a:c2:89:ac:0b:76:6e:f7:df:65:
                    40:08:40:87:04:f5:78:6b:b9:f8:20:6d:00:73:dc:
                    12:96:a4:8f:a8:05:26:79:87:e5:3c:52:60:4a:97:
                    fd:1d:8c:21:44:ec:51:75:0b:60:15:e2:76:b0:dd:
                    5f:eb:d2:7f:dc:8a:ee:bf:62:a6:45:a6:e8:df:f9:
                    6c:04:e7:82:3f:c6:b1:8f:0c:06:9b:2f:ba:27:b9:
                    ca:a4:b4:29:6c:7b:4c:70:9d:74:78:ea:59:4b:7b:
                    74:64:19:19:ac:01:af:be:9a:b1:28:c0:8f:1c:59:
                    ff:ae:fb:f4:8a:4b:8d:74:8f:cd:9b:68:07:7b:9a:
                    cc:95:81:7f:f5:6b:94:c5:7a:38:cc:b3:35:81:83:
                    1f:fb:f8:c8:73:7c:51:76:e0:46:e0:57:ef:d0:d4:
                    a2:d4:20:fe:f5:80:49:db:fc:ba:ea:0c:f3:6c:48:
                    f8:e2:e5:1f:94:38:ce:95:51:d5:a5:c8:fc:be:32:
                    2a:b6:14:62:4d:a6:97:11:82:47:9a:af:ef:d6:42:
                    4e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:77:3E:A6:CE:1F:A8:57:7D:DF:ED:BB:E6:D9:87:BA:F0:11:5A:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a4947ba7-388b-378a-91b0-95e5ae1cbe41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.181.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:2b:12:9d:2b:8d:81:b5:54:45:c1:ab:c9:70:38:0e:c9:a6:
         01:f4:b6:2a:40:27:58:e3:e1:4b:f7:77:a7:51:17:1c:ab:f9:
         e5:0e:fb:a6:b1:e4:95:20:39:65:a7:c3:0e:0a:9e:84:49:0e:
         ae:9a:39:df:e6:42:66:26:37:ef:be:ca:ac:2a:cf:a5:5d:0e:
         0d:fd:65:eb:67:ce:76:9c:eb:79:99:d7:9f:8a:47:9e:50:bb:
         b4:a3:d1:c4:19:48:3a:91:05:26:19:52:e0:89:a5:97:f1:bb:
         7c:b6:93:f9:af:fb:b8:43:46:de:2c:2c:79:99:7a:06:c6:35:
         51:f7:17:0a:6c:9a:5d:8f:77:08:84:e5:13:40:f9:17:78:fd:
         58:cf:4d:11:fd:38:8a:ec:f3:84:91:59:3a:49:86:d3:9d:2b:
         59:a8:d8:4e:7f:5e:e3:55:eb:30:96:46:f0:6b:d8:39:e4:21:
         90:ef:dc:3f:f2:78:a7:90:ce:01:fa:2a:2c:f9:19:ce:09:62:
         cb:e2:2e:93:a5:eb:27:2e:68:ab:b4:89:64:f8:1f:13:1f:12:
         3d:1a:06:6f:23:6f:4d:36:dc:3b:4c:a5:54:5f:8a:3e:ad:c8:
         8e:89:d6:1f:95:ac:3a:a1:cd:f3:76:3c:82:c5:52:7c:10:39:
         a0:e3:08:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:21 2025 by rpki-client