Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a656f057-9088-35b6-97cf-8ecc2030f14e.roa
File:                     a656f057-9088-35b6-97cf-8ecc2030f14e.roa (raw, json)
Hash identifier:          nCTEE2JRUvcmjpkJVkOym0hdzRgnJvYamU+FKstP3zI=
Subject key identifier:   70:1B:1F:56:03:4A:6F:DD:10:AF:32:DF:42:2C:B1:F1:F7:1C:77:FC
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F8D7F41677BA3B5A9A4449680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a656f057-9088-35b6-97cf-8ecc2030f14e.roa
Signing time:             Wed 12 Oct 2022 12:00:00 +0000
ROA not before:           Wed 12 Oct 2022 12:00:00 +0000
ROA not after:            Thu 17 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        134.251.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8d:7f:41:67:7b:a3:b5:a9:a4:44:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 12 12:00:00 2022 GMT
            Not After : Nov 17 05:00:00 2022 GMT
        Subject: CN=1f527655-d490-4563-9812-ee1c2a9f7bfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9b:b4:29:ee:d1:b4:54:40:80:6c:1f:c8:ae:
                    92:48:a4:b4:db:a7:ff:38:f9:71:9c:78:80:57:e5:
                    97:aa:d0:b7:15:2e:ba:15:e9:10:3c:af:00:c9:99:
                    0b:42:92:1e:2d:8a:87:59:3d:72:af:e3:f9:df:ca:
                    5d:9e:d8:d6:42:75:ce:d8:a2:ee:d0:09:98:80:79:
                    3c:b1:ba:f8:00:ae:f1:8c:f3:03:63:af:2d:ec:7a:
                    01:1f:2a:4e:ec:f4:4c:be:2e:7a:89:5a:a4:35:56:
                    ee:81:eb:23:90:15:5d:2b:db:51:e5:49:cc:bb:c8:
                    cd:13:76:22:cc:7c:99:ae:a7:87:24:c2:be:ea:75:
                    6f:10:31:78:0a:21:2b:6a:43:b9:80:c5:69:ee:4f:
                    86:9a:07:e0:4a:9e:fd:85:47:09:72:fd:fe:8b:68:
                    71:ca:3c:32:c2:7a:f1:59:54:63:e7:15:28:40:be:
                    8a:a5:e5:94:71:02:c7:2a:b8:4b:fd:85:58:71:b0:
                    82:97:3a:0a:31:f3:fb:1e:22:ce:46:71:d1:3e:6a:
                    16:d4:26:6d:de:e6:71:37:5b:f0:8e:0b:fa:06:2b:
                    b2:11:14:9e:5e:95:f7:c7:00:44:73:76:82:f4:74:
                    54:27:3b:bc:6c:a5:48:73:2c:cd:e1:e7:45:b2:e2:
                    ad:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1B:1F:56:03:4A:6F:DD:10:AF:32:DF:42:2C:B1:F1:F7:1C:77:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a656f057-9088-35b6-97cf-8ecc2030f14e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.251.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:48:c0:27:5d:fe:73:d9:56:43:1f:22:16:34:da:5c:dd:1c:
         f1:52:92:8a:2a:db:bc:8f:29:c8:76:bd:87:0c:7d:5d:18:aa:
         cd:5c:e9:a5:ec:7c:18:c9:6e:1d:f4:a2:01:e3:3e:e8:c1:ff:
         ed:75:58:ef:c1:49:3d:22:98:ce:d4:70:34:f9:8d:fc:b9:53:
         f9:b0:32:4c:42:76:94:86:77:a2:9d:99:87:72:6a:1f:5d:48:
         93:f1:0b:23:8e:72:33:b9:bc:13:5d:a6:f2:25:ff:01:22:e1:
         ad:2a:be:78:90:81:49:0b:6f:28:fd:c8:91:fa:d8:5f:48:a7:
         87:dd:e9:4b:f6:50:a7:dd:6c:f8:3b:f1:48:79:89:8c:06:70:
         3b:e4:9f:04:bf:67:40:62:4a:f9:6a:f5:01:7d:f6:ed:75:31:
         d2:ec:54:2a:7b:fa:68:21:8f:ce:18:cb:5b:04:65:cf:5e:66:
         06:a4:c5:88:64:e7:7f:7d:d8:b5:3f:8a:4e:e7:1c:97:a0:27:
         cb:2a:36:41:b6:c0:a0:66:72:0a:75:a9:b5:c0:fd:fd:d4:18:
         c0:c5:37:61:63:27:0e:c1:51:e8:bf:9d:8a:37:47:a2:77:5a:
         d9:93:1a:58:4c:da:85:be:68:2e:d4:8f:51:13:c5:f3:97:28:
         bd:c7:82:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:34 2025 by rpki-client