Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa90b063-62b8-3474-84da-e61188a174d5.roa
File:                     aa90b063-62b8-3474-84da-e61188a174d5.roa (raw, json)
Hash identifier:          RqBuuxgbBd63LFQtB7VvW1m5F6Xi6bM9+nCiOd5ZbFk=
Subject key identifier:   09:3C:19:67:D8:BA:45:BA:7F:AF:99:77:23:B0:50:4E:69:84:7A:62
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FAC25D79C4B6CDA69C15A4D40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa90b063-62b8-3474-84da-e61188a174d5.roa
Signing time:             Sun 23 Oct 2022 12:00:00 +0000
ROA not before:           Sun 23 Oct 2022 12:00:00 +0000
ROA not after:            Mon 28 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        143.135.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ac:25:d7:9c:4b:6c:da:69:c1:5a:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 23 12:00:00 2022 GMT
            Not After : Nov 28 05:00:00 2022 GMT
        Subject: CN=a2c4a29c-91f9-41ff-ad17-c7620bacae27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b9:42:a7:7c:dc:2a:1b:8f:db:de:99:b7:16:
                    a7:0c:82:0e:e6:f6:24:b1:92:c3:03:0b:f8:ff:c7:
                    fb:32:56:57:89:ac:8c:c3:9f:26:ec:a6:30:7e:83:
                    b1:25:80:d0:f9:2a:51:bb:4b:36:9a:e2:3e:71:fe:
                    08:c8:76:12:d6:53:30:a1:b0:bf:86:42:e1:ee:02:
                    46:95:fb:d1:4e:7e:a1:b7:5b:d2:eb:f4:94:02:17:
                    ea:c5:b9:bb:2f:01:d0:7a:dd:72:77:44:78:2b:95:
                    76:af:ac:04:8a:04:4a:cb:0d:9d:70:75:b0:7e:32:
                    5c:cb:70:81:61:21:94:2c:f0:48:73:fe:65:e0:1f:
                    ff:13:d1:ec:09:05:d3:b9:8e:9a:52:5f:ae:ff:c3:
                    04:ef:01:ce:06:c6:1e:62:27:d2:b8:ff:ab:1f:fe:
                    18:46:9e:b4:c4:b7:10:4f:f2:e1:06:8f:90:49:7b:
                    6d:bf:f3:90:fd:85:29:9c:fb:09:f2:9c:61:ec:d9:
                    aa:81:56:22:86:0b:30:a3:b0:84:11:b0:07:20:ef:
                    be:16:02:3c:4a:23:23:88:13:76:b8:e3:02:17:52:
                    3d:56:9d:ce:48:cc:c4:17:cc:f6:6b:36:c1:6a:1b:
                    19:a9:5a:46:f6:9a:a2:76:5a:0f:54:81:e1:0b:a4:
                    7d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3C:19:67:D8:BA:45:BA:7F:AF:99:77:23:B0:50:4E:69:84:7A:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa90b063-62b8-3474-84da-e61188a174d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.135.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:ce:4a:df:7c:5b:0d:63:35:c9:9b:dc:49:ba:82:56:41:e7:
         c6:c1:1f:3d:9f:89:39:a7:a2:13:0a:77:22:94:39:c2:ce:1f:
         6e:c5:2c:46:fb:30:b9:f1:4d:86:b0:b4:6f:58:06:36:fd:af:
         76:b2:fb:21:b9:05:ae:08:6f:48:c9:f3:09:09:c4:07:35:fa:
         90:4b:de:aa:e7:09:27:96:14:4f:2e:57:86:64:26:08:c2:ca:
         76:10:f5:f3:6c:09:3e:17:d0:64:1d:f3:90:bf:1a:14:0c:2a:
         cb:a9:86:aa:68:43:e9:42:46:02:85:5c:6b:71:5e:19:5a:81:
         05:f9:ce:43:97:18:a4:25:a6:60:23:95:82:5d:a2:93:af:ec:
         d4:dd:8d:da:43:5a:7f:ef:1f:37:a2:13:15:16:4c:44:c8:1a:
         03:a0:5b:a4:b4:89:7c:ef:99:fd:bf:34:92:2d:8e:c4:f3:7b:
         7a:a6:38:c7:13:15:63:fa:1b:d5:ec:26:86:47:c0:48:32:ff:
         95:34:cb:2a:14:72:2a:68:5b:62:9b:09:30:dd:30:9e:6e:4a:
         9a:4a:61:c7:91:e5:ce:41:b5:55:b1:86:4e:63:de:98:9b:51:
         0f:c8:ed:3c:66:b8:a3:59:b4:98:3a:8e:f6:eb:b8:2b:bd:5f:
         55:e6:0b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:51 2025 by rpki-client