Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ac260653-f30b-39ee-b879-d69e0b5b5e6b.roa
File:                     ac260653-f30b-39ee-b879-d69e0b5b5e6b.roa (raw, json)
Hash identifier:          lfJpV6vtEyFN9bByWb23IDjmh+wPvcYkyZIi8GncF5k=
Subject key identifier:   B0:5F:83:4A:AA:4D:90:56:80:D0:30:12:22:9B:F9:A2:35:FD:2D:00
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584062048873B427010903D38080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ac260653-f30b-39ee-b879-d69e0b5b5e6b.roa
Signing time:             Tue 27 Dec 2022 12:00:00 +0000
ROA not before:           Tue 27 Dec 2022 12:00:00 +0000
ROA not after:            Wed 01 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        15.178.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:62:04:88:73:b4:27:01:09:03:d3:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 27 12:00:00 2022 GMT
            Not After : Feb  1 05:00:00 2023 GMT
        Subject: CN=a9c2a0f6-bfb9-4062-a5f2-fce9aff337ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4c:df:4c:02:67:d1:ec:8d:1c:8b:cc:61:e8:
                    c2:7e:9d:4d:93:04:95:41:ba:15:e3:e8:c2:03:0c:
                    1d:5f:34:2a:cd:35:00:4a:95:85:19:8c:34:ce:3b:
                    bc:fb:d0:95:20:b2:58:c8:3f:de:e3:eb:b9:5f:ae:
                    c8:92:4e:91:ef:4d:ed:53:bb:c8:6c:f6:2b:b5:90:
                    f7:0e:06:68:9e:2b:5c:c4:ee:b4:6f:be:ce:91:89:
                    e0:5b:de:96:f2:86:8f:50:7b:f4:39:61:bb:47:b4:
                    55:4a:32:77:94:76:68:90:a5:b4:b9:0f:15:8e:ee:
                    ab:1a:85:2e:78:91:a0:2b:89:42:22:94:9d:54:bc:
                    b0:f6:a2:5a:75:20:17:1d:2d:78:4f:42:a9:25:d2:
                    c9:b0:3c:29:0f:8b:79:97:76:f2:a1:31:d8:34:ec:
                    82:fd:77:18:24:e2:0f:7e:db:21:a5:34:b8:58:ff:
                    ee:2d:0d:40:e5:b5:9a:85:54:19:2f:36:06:b6:39:
                    95:ac:22:7f:6b:6b:58:16:ed:44:15:57:c7:02:3a:
                    28:71:9c:a6:0c:e0:21:78:a4:f1:ca:fb:9c:c0:e3:
                    25:25:57:6c:14:55:ed:97:cb:ee:54:46:90:bb:54:
                    ab:cc:d0:22:f9:ee:89:a8:79:f3:09:bb:cf:6a:ee:
                    3f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5F:83:4A:AA:4D:90:56:80:D0:30:12:22:9B:F9:A2:35:FD:2D:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ac260653-f30b-39ee-b879-d69e0b5b5e6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.178.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:58:7e:12:99:d3:be:9e:e4:bc:ec:03:89:e0:7e:26:3c:66:
         8f:ae:f5:7f:0c:00:ae:8b:00:51:82:67:09:12:3d:c5:72:7c:
         17:02:40:26:4b:2e:61:b7:a5:c9:04:4f:5f:48:20:37:e2:ad:
         e3:d5:e8:de:bf:7c:ae:85:55:b4:6b:31:3b:0f:ef:d2:fa:8c:
         75:d3:70:f0:28:55:8d:50:ce:ac:f8:cf:c7:36:ba:23:d3:40:
         df:4e:93:9d:2a:ee:fd:38:7b:de:df:3e:ee:0a:11:c5:d4:a4:
         6c:f3:6e:69:50:fd:09:51:43:8a:45:69:dd:95:b5:39:20:b1:
         96:8d:00:c6:ec:bb:a8:93:36:ef:8d:0b:5c:76:ff:f5:f5:a8:
         aa:29:dc:77:c8:8c:9e:4b:40:62:f8:60:b2:50:a0:07:3c:27:
         04:37:00:62:4f:75:80:17:ca:ef:19:e9:66:49:eb:28:0b:b0:
         a1:7f:58:38:99:e3:7f:fa:72:55:5c:27:e4:c0:89:a0:bd:dc:
         af:8c:d7:7d:b9:62:cd:6e:1f:ce:d0:aa:b0:3f:97:09:d5:55:
         cc:ab:51:62:e1:1a:21:84:14:b8:a5:f8:b4:68:8e:fb:c1:aa:
         1d:ec:30:5e:5f:23:0c:ee:78:40:ec:6e:29:7c:e6:20:ae:9c:
         68:a8:2e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:39:19 2025 by rpki-client