Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a97861f4-0e37-32c9-bddc-f4ec072068af.roa
File:                     a97861f4-0e37-32c9-bddc-f4ec072068af.roa (raw, json)
Hash identifier:          68/RjlPqvbTsmEtfoff6/0Zygvq9m5YABYCitcQ2Cpg=
Subject key identifier:   C2:06:29:BA:B0:4B:CC:BE:08:9A:81:4B:A3:0B:02:55:CE:90:E9:5F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E6C6864B8BD1C601CB4F06F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a97861f4-0e37-32c9-bddc-f4ec072068af.roa
Signing time:             Thu 30 Jun 2022 12:00:00 +0000
ROA not before:           Thu 30 Jun 2022 12:00:00 +0000
ROA not after:            Fri 05 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        157.175.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6c:68:64:b8:bd:1c:60:1c:b4:f0:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 30 12:00:00 2022 GMT
            Not After : Aug  5 04:00:00 2022 GMT
        Subject: CN=c1757c7e-e106-456e-a346-35a621bfdc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a3:5a:cd:5c:45:15:be:e8:03:e8:59:1b:83:
                    fb:91:53:7f:27:cd:07:57:3f:7d:96:66:f2:40:bb:
                    72:40:76:00:a2:5b:fb:66:06:04:8d:11:89:b9:33:
                    30:80:07:36:84:f5:61:4e:48:21:e0:bf:91:47:66:
                    68:16:90:97:08:f7:d2:20:2b:90:de:98:79:63:3e:
                    b8:76:97:85:c4:d2:16:95:9e:8c:11:f8:0e:6d:d4:
                    08:61:7c:8d:56:fc:a2:01:38:bb:4e:5f:f4:1f:6f:
                    da:4f:b9:ee:ec:51:cb:1a:b8:39:87:6a:d8:aa:20:
                    ae:d8:27:f8:31:79:d2:cb:bf:f9:ad:fc:81:be:1f:
                    c2:5f:94:85:a4:e6:6d:ea:bc:ae:d4:bb:0b:e2:48:
                    b3:00:e0:72:84:fa:07:32:d5:74:00:17:81:4d:4e:
                    97:f4:58:a5:b5:92:9d:82:46:50:48:29:cb:91:90:
                    dd:91:8e:45:26:02:d1:c5:37:20:a1:c7:14:3c:16:
                    7e:80:d6:2e:0a:14:f3:70:89:82:35:a1:86:21:d0:
                    f6:1d:31:5f:06:be:79:d4:41:43:11:d1:00:ce:fe:
                    f6:91:c9:8b:ad:d4:90:50:03:0a:8e:b4:a5:9a:f0:
                    1e:f6:c9:d8:af:64:66:47:6b:9f:73:b1:08:b4:1b:
                    f9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:06:29:BA:B0:4B:CC:BE:08:9A:81:4B:A3:0B:02:55:CE:90:E9:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a97861f4-0e37-32c9-bddc-f4ec072068af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.175.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ce:1f:d4:fc:d9:49:ce:a1:5a:3e:66:01:58:3b:f9:dc:12:
         be:a3:a4:80:ac:6e:35:7d:22:f5:55:a5:67:db:3d:be:5e:8f:
         cb:0d:a8:69:dd:a8:a0:60:b4:dc:fc:b8:7c:c2:dc:7f:37:ec:
         d8:01:3e:3a:18:25:4d:6f:9c:77:62:bb:52:fb:8c:f1:04:bd:
         36:d0:35:71:f5:66:cd:50:9c:da:5c:f4:a3:52:99:4f:ea:2f:
         10:24:5f:59:dd:af:a4:1d:0d:ff:49:85:b5:7e:b0:a6:dd:81:
         be:aa:b0:5b:6c:23:2a:4a:01:16:db:0e:8a:2c:f5:4a:2c:6a:
         99:1a:b7:fa:18:e9:4f:01:03:80:dc:2f:df:1e:b5:f3:91:39:
         74:9d:5a:52:fc:a6:95:37:2e:9d:cf:f5:7c:b1:5c:f7:4f:52:
         17:72:03:7f:8a:08:0a:d9:4b:e7:1f:ce:d3:44:aa:be:87:f0:
         de:4d:a6:84:14:0e:fb:96:99:89:e4:f1:66:75:3b:4f:a2:07:
         1b:0f:e5:d7:50:d7:c5:bd:6c:7c:37:4a:de:d9:45:16:9b:00:
         0a:21:84:57:a2:1e:d5:3b:8d:04:cd:e3:53:4c:e6:0e:f6:a2:
         74:38:d3:20:b1:36:c3:c0:58:d7:20:86:2f:ed:86:aa:bc:42:
         2a:03:4f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:44 2025 by rpki-client