Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae2b98d2-a4c4-3f03-8f8b-203d065ab0a1.roa
File:                     ae2b98d2-a4c4-3f03-8f8b-203d065ab0a1.roa (raw, json)
Hash identifier:          O9bb7sbqXfvtU7EoMIj7ggbihy/aMLVJwLXabb4IOAs=
Subject key identifier:   1D:0C:6E:E7:D9:A2:E5:8F:FD:60:91:D3:2D:E1:44:D5:9B:7C:CD:3F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FFA678CAAC60939410D77C500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae2b98d2-a4c4-3f03-8f8b-203d065ab0a1.roa
Signing time:             Sun 20 Nov 2022 12:00:00 +0000
ROA not before:           Sun 20 Nov 2022 12:00:00 +0000
ROA not after:            Mon 26 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        192.43.184.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:fa:67:8c:aa:c6:09:39:41:0d:77:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 20 12:00:00 2022 GMT
            Not After : Dec 26 05:00:00 2022 GMT
        Subject: CN=5d712b53-7803-482a-b349-827f47124f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:80:d6:6a:74:e0:86:bd:2c:ce:19:75:ce:fb:
                    f4:93:d0:2c:4b:e8:71:be:0c:5d:8a:b7:0c:e3:3f:
                    68:60:b8:7d:00:37:24:c6:f9:c2:8f:90:20:44:6e:
                    d1:e9:43:e5:29:a5:46:c4:cc:cf:62:38:da:22:35:
                    9b:73:79:51:05:6f:32:b6:cf:03:fa:44:be:b4:7e:
                    b7:e6:7f:b7:cf:e2:3d:6e:34:8e:fa:b2:99:06:6d:
                    22:c1:2c:df:8a:ce:d3:bb:5d:a0:24:a1:e3:ce:99:
                    d8:b6:2e:ac:03:61:e4:5a:d6:85:26:20:74:cc:79:
                    71:89:e3:9c:23:df:fc:f9:dc:b6:e1:07:b6:56:8e:
                    ce:63:cc:1b:00:a0:e5:55:6e:4d:d1:00:4f:f2:e2:
                    30:60:09:93:cc:37:f8:77:ce:78:df:07:a1:47:8f:
                    dc:dd:87:34:86:c7:fa:33:7d:6d:c9:f4:c5:b8:8c:
                    d4:ef:1b:55:7e:85:7f:d4:d7:81:42:3d:94:fc:31:
                    e0:3b:19:0e:81:07:e1:7f:8c:ce:db:74:00:c9:0a:
                    95:97:63:c7:70:b5:7e:bd:53:bf:63:78:71:36:55:
                    af:73:69:c6:fa:de:2e:b2:55:97:f8:5b:9b:4f:e8:
                    f3:fa:62:53:ee:0e:d8:fa:b8:5c:50:ed:38:05:04:
                    57:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0C:6E:E7:D9:A2:E5:8F:FD:60:91:D3:2D:E1:44:D5:9B:7C:CD:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae2b98d2-a4c4-3f03-8f8b-203d065ab0a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:eb:62:b1:1e:74:93:bb:e1:3c:f2:0f:fc:d2:cf:76:c5:e8:
         19:99:12:e9:2b:18:87:56:35:a1:ca:b1:65:26:4e:c7:c0:6a:
         d1:a9:d6:8f:ff:d2:52:19:f0:c5:2b:ae:3c:1c:80:65:4d:05:
         3b:66:d1:ef:64:93:60:d2:a8:88:97:3c:68:71:30:36:4d:d3:
         c1:10:51:42:ef:38:1c:1e:9e:ca:ea:02:3e:72:fa:f0:06:0f:
         3e:f4:52:da:73:5e:1b:36:44:6d:6d:bf:4c:4b:dd:0e:cd:d7:
         77:62:04:05:9c:b0:ec:ab:99:b0:c7:1e:bc:cb:1b:38:35:8b:
         c4:ec:1c:27:ca:98:10:99:9e:e8:1d:ac:b9:78:3e:5b:fb:09:
         de:34:bf:81:f6:a7:7c:ce:be:4a:0d:01:60:a0:84:ab:f6:ea:
         22:b5:ad:b9:9c:c8:c7:4b:de:e6:2d:80:94:24:72:86:6d:0a:
         28:11:c1:8b:4b:a8:75:15:85:b0:bb:09:0f:ab:e0:00:47:e6:
         96:e8:f4:93:9b:d6:89:13:92:ff:fa:08:09:8f:03:ac:73:c7:
         6a:74:74:7f:e7:ca:2c:04:ce:2b:31:f2:a6:3a:d7:a2:c1:8a:
         f6:c0:9c:ce:17:c7:ae:cc:02:57:25:57:68:d4:31:42:b2:63:
         62:23:85:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:48 2025 by rpki-client