Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a6dc68cc-2375-30c1-aa7d-4dd5cf3c9501.roa
File:                     a6dc68cc-2375-30c1-aa7d-4dd5cf3c9501.roa (raw, json)
Hash identifier:          NRij4JVD967TrWFZIEtm1g9sZHzO6q0JQt0hy3OdqXM=
Subject key identifier:   A7:15:27:B0:AF:B4:DC:CB:F3:FB:32:26:07:F2:55:FB:79:43:33:6D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584050FA2231F0ADC4E2F7439980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a6dc68cc-2375-30c1-aa7d-4dd5cf3c9501.roa
Signing time:             Wed 21 Dec 2022 22:15:08 +0000
ROA not before:           Wed 21 Dec 2022 22:15:08 +0000
ROA not after:            Thu 26 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        128.11.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:50:fa:22:31:f0:ad:c4:e2:f7:43:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 21 22:15:08 2022 GMT
            Not After : Jan 26 05:00:00 2023 GMT
        Subject: CN=1cd6ee65-a973-47b0-950a-85fedb941d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a2:35:5c:6b:c5:c1:4e:95:3c:8d:78:57:d0:
                    31:75:fc:c0:f0:30:9e:22:fc:f1:a9:ea:3b:0d:bf:
                    29:a5:9e:42:cf:21:02:2e:d1:b9:3a:8d:70:85:fb:
                    6e:7a:1d:00:be:f2:43:fc:81:20:2d:e5:ae:d3:49:
                    47:0c:b2:9e:d2:ab:f6:21:0a:b5:42:96:56:ff:ef:
                    2b:c7:f3:7d:c0:ee:7d:0a:2c:40:4e:f4:c5:07:79:
                    c7:0f:4f:81:5a:e1:0b:df:1a:4b:03:30:f5:d6:60:
                    9d:2e:d9:e4:3b:79:c9:08:35:d9:9f:86:80:a5:b9:
                    32:d4:a5:d5:05:08:3d:ba:7a:13:ec:c8:76:82:40:
                    6d:01:3b:7c:d8:b7:69:45:85:be:fc:a5:cf:44:ef:
                    8d:e1:e8:6e:24:4b:d1:45:4a:d9:e3:5d:ed:9f:c0:
                    3c:2c:7c:39:58:54:2e:c8:9e:b0:a0:33:d6:cb:42:
                    db:df:b8:95:cf:5e:2a:30:1f:5a:4b:bf:bd:bc:ca:
                    f5:62:91:b3:46:20:c6:92:4c:70:0a:61:8f:4a:8b:
                    f5:94:c0:04:15:8c:1a:1e:bc:07:a5:35:96:bf:0a:
                    59:61:2e:0c:70:dd:9c:b3:54:9f:57:cd:ce:92:cf:
                    8c:b6:2c:eb:69:c8:28:35:6e:97:05:c5:d3:23:5d:
                    a0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:15:27:B0:AF:B4:DC:CB:F3:FB:32:26:07:F2:55:FB:79:43:33:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a6dc68cc-2375-30c1-aa7d-4dd5cf3c9501.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.11.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:0c:08:09:9f:83:55:a3:0c:e6:11:ed:a9:55:fb:a7:e9:34:
         9e:84:c2:4b:44:ba:d9:c4:04:3d:dd:c0:06:00:5b:e7:4b:fc:
         72:8d:ee:c5:8f:ab:86:72:c8:8f:25:63:32:75:92:f6:ce:bb:
         c5:1b:1b:de:fa:c5:b6:7a:41:cb:b9:89:8d:cb:5b:6d:03:e9:
         0e:15:70:7f:24:78:71:d8:84:3d:0a:26:85:af:b2:f2:48:1f:
         fb:27:71:f4:71:ad:a4:1b:c9:71:61:55:bb:db:12:a3:72:74:
         b5:1b:2c:57:80:7f:3f:e8:8b:2e:62:f6:c6:90:b6:c5:42:b4:
         fd:e2:89:78:72:2c:b2:15:c9:07:d0:45:4e:5e:6b:23:c4:a3:
         78:d1:45:e7:46:a8:98:a8:41:bb:84:c2:6a:37:91:53:bd:84:
         78:41:5f:ae:d4:21:38:f0:33:6e:b2:99:3c:33:41:09:88:91:
         76:8a:7d:aa:c3:b8:66:70:7c:7a:6f:0b:20:f6:53:3f:02:d3:
         1e:2d:8b:88:60:3c:e5:59:c7:88:00:25:a1:2e:3f:bd:82:2e:
         28:9d:3f:16:25:b6:e2:43:1a:c3:5d:3d:9e:48:1d:c0:ec:88:
         7f:90:27:7f:e6:dc:90:78:37:42:b0:13:6e:30:fe:7e:5d:80:
         bc:28:f7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:07 2025 by rpki-client