Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a8bfc024-ae94-3aee-81e8-45e01848d344.roa
File:                     a8bfc024-ae94-3aee-81e8-45e01848d344.roa (raw, json)
Hash identifier:          zl+Kxv9d146pR2laB6v1Fldc7EZg1C/3vuz+hCGoLCc=
Subject key identifier:   94:57:81:C7:7F:2F:E1:B9:AD:BE:BA:0D:37:04:E1:58:44:1E:3D:00
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D0C0A4C1B9395EDDD18FE2760
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a8bfc024-ae94-3aee-81e8-45e01848d344.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        108.175.48.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0c:0a:4c:1b:93:95:ed:dd:18:fe:27:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=aae30837-0422-48bc-8622-9414495d5e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:79:74:f0:3e:ac:6b:c5:4d:cb:99:ba:41:d6:
                    56:94:1d:31:ff:e9:c2:59:9a:2c:b0:96:f4:4a:42:
                    51:bb:fa:4a:e4:86:0a:b5:c4:03:91:45:85:b2:67:
                    e0:e0:72:45:db:ca:e8:6f:4c:d0:90:6c:92:ba:f4:
                    a3:9f:52:dd:05:62:68:a9:2f:fb:c1:67:65:2c:a9:
                    66:c2:61:30:b7:b3:8d:cf:65:73:8b:cb:71:2f:d1:
                    fd:38:7a:ec:94:a7:ab:b0:32:4b:dd:e5:e4:93:0c:
                    0e:1b:a3:a6:62:be:6d:ff:34:da:b8:1d:73:bf:2d:
                    cb:ac:dd:96:88:e5:43:c1:09:78:42:22:6f:fd:9d:
                    2f:33:b2:c0:4a:db:4a:c6:86:d2:d4:46:68:40:57:
                    b9:ee:39:52:01:53:94:01:9f:07:fb:c3:13:ec:ac:
                    34:49:99:64:9e:b7:45:2b:ba:54:98:a3:7e:08:78:
                    24:fb:7d:fa:97:a1:39:d1:1a:eb:82:9a:ba:d0:a9:
                    de:0d:c3:6d:d1:eb:a9:84:49:e5:ed:66:fe:26:8e:
                    f6:90:61:e3:8f:e9:69:d5:f1:c3:4f:5b:67:a3:de:
                    f1:44:41:ab:86:00:53:0a:0f:e3:88:e3:65:ed:c4:
                    ae:f5:e6:16:0f:6e:f5:bc:d8:0d:f0:8d:a8:38:7b:
                    09:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:57:81:C7:7F:2F:E1:B9:AD:BE:BA:0D:37:04:E1:58:44:1E:3D:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a8bfc024-ae94-3aee-81e8-45e01848d344.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.175.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:a8:20:80:f0:e8:37:46:da:62:b4:1a:f2:e5:b0:c7:4a:74:
         75:23:37:48:58:e2:d3:38:18:a1:7e:af:44:ba:d0:3e:f6:03:
         87:c2:26:ef:75:28:8b:f9:4c:96:de:a4:98:97:fc:8a:69:0a:
         c6:c7:72:29:38:40:2f:69:43:63:99:64:65:2a:96:ab:67:9c:
         06:87:e0:70:3c:d6:df:c7:d4:49:7f:14:ed:93:5f:ee:6b:e3:
         80:37:4d:e4:da:04:b8:ab:73:1a:6c:8e:7a:7c:7f:d1:0e:13:
         79:2c:5a:9e:f0:e5:89:67:4d:33:29:ae:ae:91:fd:6a:51:74:
         e2:dc:a5:f9:3b:80:b9:61:58:bb:4a:7f:69:8f:fe:33:d2:35:
         66:2f:1b:72:c8:cb:d0:48:b5:8b:85:0b:da:c3:17:0d:a2:6d:
         e2:97:26:51:15:ff:66:f4:f6:0a:24:ab:b2:74:40:46:cf:b6:
         ef:c6:5a:7f:da:4a:18:f8:e5:71:9e:e0:93:53:03:a9:e7:6f:
         f5:0d:37:15:68:0a:64:24:ad:28:e9:15:52:7e:46:46:dd:c8:
         ba:76:ce:6f:95:b8:ed:69:62:41:5f:9b:27:6e:a2:02:09:13:
         88:ad:4f:28:22:55:cf:ef:7e:94:19:b1:1c:a8:8f:18:31:cf:
         8d:58:1b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:33 2025 by rpki-client