Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a5b84d95-ee6e-3285-a57c-9285cf95f7fb.roa
File:                     a5b84d95-ee6e-3285-a57c-9285cf95f7fb.roa (raw, json)
Hash identifier:          +pOspoK6t6bdL+cef0+beG43/WjGjBnAIFDCK0iZibI=
Subject key identifier:   98:4D:1C:C2:4C:7E:E0:73:53:77:7F:FF:15:25:D0:41:A8:9F:4C:1F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FB766DE067DBFE2B259FB2190
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a5b84d95-ee6e-3285-a57c-9285cf95f7fb.roa
Signing time:             Thu 27 Oct 2022 21:18:08 +0000
ROA not before:           Thu 27 Oct 2022 21:18:08 +0000
ROA not after:            Fri 02 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        167.97.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b7:66:de:06:7d:bf:e2:b2:59:fb:21:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 27 21:18:08 2022 GMT
            Not After : Dec  2 05:00:00 2022 GMT
        Subject: CN=59702e1e-632d-4bc0-b1c1-609e2a4c8a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8d:f9:8f:da:6b:01:a7:49:f6:42:33:59:94:
                    fb:0b:be:f5:54:58:77:90:ef:75:eb:82:51:6e:4e:
                    77:d5:1e:9b:13:47:ea:72:1c:9d:87:28:c2:33:83:
                    00:e2:8f:65:80:48:1d:2a:97:59:66:f7:99:b9:e7:
                    9e:04:85:4d:51:64:b2:18:ae:70:5f:c5:1d:26:08:
                    3f:73:56:4f:c3:80:e7:f8:a1:71:74:71:45:23:fc:
                    56:a7:82:78:c4:74:7f:a7:ae:73:86:cc:e9:91:59:
                    ce:75:21:26:6b:28:24:d2:6c:ef:1a:55:76:99:74:
                    4c:63:fa:c5:ae:e5:af:4b:eb:23:e1:05:f1:20:be:
                    d9:56:0a:3d:8e:2d:c7:27:78:96:99:b3:88:70:88:
                    fe:c8:3e:cc:2a:c5:c3:50:4b:37:9e:c1:1c:c2:82:
                    1d:37:14:86:07:cb:13:1e:1f:fb:3b:33:8f:39:81:
                    35:62:3e:f8:01:3c:e5:b6:87:4c:f0:18:c6:66:95:
                    07:6b:f3:92:97:a9:25:eb:69:88:de:2b:89:2a:38:
                    b2:d6:fe:69:6f:f3:c9:f1:25:95:47:7a:4a:5c:bb:
                    3c:8b:0e:0c:14:52:19:55:d5:7f:0e:e6:34:7e:95:
                    25:c1:54:d2:36:89:17:ae:9c:9f:d6:89:0f:8f:3c:
                    e3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4D:1C:C2:4C:7E:E0:73:53:77:7F:FF:15:25:D0:41:A8:9F:4C:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a5b84d95-ee6e-3285-a57c-9285cf95f7fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.97.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:0d:fb:4e:ff:c4:80:9f:43:73:5a:07:3d:b1:ce:bc:ec:5b:
         94:1c:e2:17:d9:7a:f4:37:08:15:5a:e4:22:d0:3a:f0:bf:b7:
         4b:9d:cc:a5:0b:b2:37:57:7b:f5:c8:ef:b5:4f:b8:9c:c0:23:
         a3:16:b5:81:20:14:00:12:e4:8d:6c:4d:92:42:90:25:cb:83:
         8e:5e:9a:d7:0f:dd:46:84:93:64:a7:97:35:04:ae:17:7d:7c:
         bd:88:70:df:7c:43:05:fe:37:dc:0b:f4:04:3e:8c:e3:92:0c:
         39:11:4e:e4:92:cc:0f:15:5a:35:9d:2f:50:07:b2:54:96:aa:
         1c:b9:47:d4:63:c6:25:99:d3:c9:af:d0:89:55:6f:47:b2:d8:
         bb:c5:fd:0a:29:bf:71:cb:54:b9:df:ef:be:42:48:be:f9:aa:
         c6:97:dd:15:fa:2a:d6:56:c7:5d:9a:7a:7e:12:a3:b1:7d:47:
         56:94:f0:1f:9e:7e:4a:fb:a8:52:02:fb:b7:8b:2a:f5:b5:25:
         34:1e:bc:ca:b7:61:f2:ab:2f:ff:90:dc:df:5b:c2:5e:b0:0b:
         7c:f6:f3:63:1e:80:73:ea:ba:13:09:80:ba:b8:cb:9c:00:f0:
         7d:ed:1e:6a:f4:ef:59:d4:73:66:c2:d2:eb:dd:18:38:b8:94:
         f5:10:76:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:29 2025 by rpki-client