Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/adbddc62-317d-3aa9-a8e7-17e6e4427343.roa
File:                     adbddc62-317d-3aa9-a8e7-17e6e4427343.roa (raw, json)
Hash identifier:          KMfPRPBqLVbkK+WcdjuVCUdR1Cd8tOt9jJ2EknJDr4k=
Subject key identifier:   F4:57:6D:0F:68:9E:85:B8:8F:CA:11:F2:44:64:90:8C:F5:C5:A0:BA
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E2C05C6740B6B936740787C20
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/adbddc62-317d-3aa9-a8e7-17e6e4427343.roa
Signing time:             Tue 07 Jun 2022 12:00:00 +0000
ROA not before:           Tue 07 Jun 2022 12:00:00 +0000
ROA not after:            Wed 13 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        152.24.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:2c:05:c6:74:0b:6b:93:67:40:78:7c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun  7 12:00:00 2022 GMT
            Not After : Jul 13 04:00:00 2022 GMT
        Subject: CN=d3f5ac5f-3c6b-4e6a-ad6f-77a699fec1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0d:de:a4:2a:bc:c5:8e:84:34:09:ff:f7:71:
                    c8:f3:5b:3a:53:85:d4:30:43:21:a4:86:8f:9e:d2:
                    ad:e6:66:8c:5f:94:8a:78:c0:2c:fd:f3:d3:84:cc:
                    da:2b:41:dd:51:07:8a:b1:90:d1:83:4a:43:9c:c2:
                    11:af:22:a7:c4:54:0c:31:06:a4:49:e5:77:0f:7b:
                    a4:ae:ca:b7:af:4e:01:2c:5a:46:f3:86:81:0f:9d:
                    9e:4e:7e:95:86:9b:c0:4b:e8:8a:48:b6:c0:46:e3:
                    52:b6:8b:d3:30:e5:66:ff:7f:95:1b:0a:d2:74:53:
                    17:7b:e1:a3:91:47:4d:65:2d:9a:50:d6:a2:9c:1e:
                    39:3b:46:3d:16:30:c5:f1:c5:9e:75:36:88:af:0b:
                    67:1d:79:f3:14:34:e1:11:00:ff:c6:05:81:7d:37:
                    38:3c:13:b4:c0:6e:5a:0b:e6:5e:36:d7:99:fc:b8:
                    1b:fc:e1:56:09:70:f3:6b:71:1a:a1:c6:71:93:7b:
                    57:a4:d6:59:0c:ab:f0:e3:c8:49:16:c9:b6:ff:e0:
                    47:bc:b0:78:f6:32:c0:8f:cd:a2:39:50:48:5e:de:
                    47:f1:b9:f6:cc:c6:58:49:53:88:c5:ca:17:ad:e1:
                    3c:9b:98:6d:72:44:32:54:33:df:38:53:97:25:7a:
                    5f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:57:6D:0F:68:9E:85:B8:8F:CA:11:F2:44:64:90:8C:F5:C5:A0:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/adbddc62-317d-3aa9-a8e7-17e6e4427343.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.24.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:50:17:4a:39:9c:39:d5:eb:e0:93:69:8e:f6:d4:59:1a:39:
         2d:86:a0:8c:7c:f9:fa:2e:01:5a:09:c8:67:92:d2:c0:71:38:
         19:ef:41:0b:e1:da:f8:1e:cf:de:e5:bb:cb:46:01:49:20:7c:
         09:6b:15:50:79:fb:a4:c5:ca:3e:25:e8:7b:6a:61:b7:f6:f4:
         11:fd:5e:b9:ae:16:d7:4a:49:97:da:cf:52:f2:9f:9d:d8:56:
         58:74:3c:68:ed:8d:80:0d:1c:3a:19:0c:fa:bf:e8:7b:d0:40:
         1d:3e:20:a9:9b:ab:0f:46:df:5b:c1:1e:e0:91:2d:93:65:c1:
         0c:19:8d:49:89:69:81:47:1b:cf:94:4c:ea:fe:81:e4:55:a8:
         30:7f:a2:22:99:69:f2:3b:c0:e7:a3:fa:6a:82:81:20:a7:e9:
         62:e4:7f:59:9f:33:c3:c6:c7:cf:be:7a:d6:c0:97:b7:33:ba:
         28:54:c9:b8:b6:fb:21:23:2b:f1:9e:27:0e:5b:32:fb:2d:71:
         f0:57:fa:04:83:0e:73:aa:8d:71:0b:91:0d:d3:5c:e2:43:25:
         5a:45:d3:b1:0d:40:0e:7d:d5:c5:a9:22:48:07:4f:07:4a:ea:
         2f:8b:e2:fb:65:0d:95:51:43:bb:f8:9b:7d:37:5f:5e:9c:4a:
         5c:2a:4c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:01:01 2025 by rpki-client