Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a600fb64-5ca9-3830-a5af-8f712ff65fd5.roa
File:                     a600fb64-5ca9-3830-a5af-8f712ff65fd5.roa (raw, json)
Hash identifier:          7/OLvza8mt0eINzbCMi2U+1z8EjuKLCkhLK/+oUkYWA=
Subject key identifier:   96:31:19:5C:7E:FE:F3:45:57:1D:C0:C5:BC:30:BB:67:2F:11:99:F3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DA8B985DAAE458D9BDD933480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a600fb64-5ca9-3830-a5af-8f712ff65fd5.roa
Signing time:             Thu 21 Apr 2022 12:00:00 +0000
ROA not before:           Thu 21 Apr 2022 12:00:00 +0000
ROA not after:            Fri 27 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        108.166.224.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a8:b9:85:da:ae:45:8d:9b:dd:93:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 21 12:00:00 2022 GMT
            Not After : May 27 04:00:00 2022 GMT
        Subject: CN=2581590a-8ecf-47e1-8406-314552cc98b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:12:93:c7:f9:8d:0d:10:1b:f1:e6:b9:db:43:
                    42:35:92:94:fa:5c:8b:1f:cd:2d:ab:0b:2d:19:2e:
                    3d:37:37:e1:71:1e:b9:b4:21:17:71:d7:02:cf:e3:
                    5d:74:c3:33:8d:c5:e2:ae:7f:53:42:60:13:75:08:
                    f7:21:ed:d0:be:53:d6:06:20:42:63:46:c5:d2:cb:
                    28:73:66:34:6f:1b:b9:75:70:af:70:96:79:42:89:
                    aa:e3:19:77:0d:41:f4:39:59:e8:24:56:ee:10:3a:
                    17:0b:cc:ea:c6:fc:de:d8:13:49:82:d0:b4:46:55:
                    cb:b8:b7:ed:99:a4:cd:bd:7c:6a:95:9f:ee:78:e0:
                    0b:c9:14:b1:be:2f:00:6c:15:39:23:0f:e5:9d:a5:
                    f1:f3:20:21:8f:75:de:a0:36:17:fd:e4:09:a7:0e:
                    7b:f1:55:f8:6e:e0:75:ad:99:e9:e1:b6:f7:c9:62:
                    71:18:e2:b2:1e:8f:0e:b5:7a:27:79:7a:d9:2c:5c:
                    86:19:57:52:a3:e0:35:a4:45:8a:f7:f8:9c:3c:d0:
                    2f:71:b9:3b:6d:54:37:ef:7d:58:f5:f9:19:10:16:
                    cf:4b:6a:a2:53:37:42:f7:43:9f:03:79:34:21:1a:
                    f4:29:b9:48:bc:c8:10:1f:9d:cc:ff:a1:5e:90:85:
                    9c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:31:19:5C:7E:FE:F3:45:57:1D:C0:C5:BC:30:BB:67:2F:11:99:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a600fb64-5ca9-3830-a5af-8f712ff65fd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.166.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:a5:98:59:d5:74:d0:34:c2:a7:81:86:bc:8b:7b:e5:e9:49:
         49:56:4b:af:7f:60:e9:2a:9d:0a:2c:5b:94:b8:3a:bb:8c:14:
         ca:0d:04:be:58:28:85:d1:e7:bf:22:e2:a0:2b:85:54:f2:b0:
         aa:8a:d1:18:fe:1b:d8:e5:78:bc:46:be:50:b6:21:b7:71:a2:
         d2:9a:50:e8:d2:0a:82:c4:27:fc:8e:af:6b:bc:9f:e1:59:d4:
         12:59:92:c5:95:0b:78:9a:cb:b5:64:1c:bb:a5:33:0a:9b:e4:
         88:e8:b7:02:3f:b2:d2:77:92:3c:b3:77:64:9e:1b:ad:d8:7b:
         b0:97:8c:54:ac:4b:c3:eb:56:9f:bf:48:c0:f5:21:c2:48:1f:
         ce:43:cf:a5:68:91:c0:5c:c9:e4:7a:e0:50:f0:5d:60:70:5a:
         15:d5:18:d9:b0:9f:02:5c:50:53:75:74:0c:a2:8f:ea:66:fc:
         cd:73:f1:2f:89:57:83:96:46:4e:15:ea:73:75:61:96:87:28:
         9c:24:41:15:b4:0c:30:46:49:51:0f:b3:05:95:4f:53:c0:79:
         de:1d:fb:7a:dd:33:f1:69:bb:eb:62:c1:99:c5:f8:68:27:ec:
         0f:41:89:20:b3:62:81:b0:69:95:c0:34:4f:d6:06:14:77:c9:
         4b:e6:7c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:02 2025 by rpki-client