Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b0cbac18-b8b5-3332-a685-af739f6db4b2.roa
File:                     b0cbac18-b8b5-3332-a685-af739f6db4b2.roa (raw, json)
Hash identifier:          EUeRJ1zY8xBUA4v0W0JIwqJS9EDMM5y8SDFZocTW2dw=
Subject key identifier:   32:32:DA:46:A0:D1:AC:1C:F2:76:B5:B4:72:C8:C4:35:5F:19:A7:B4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F0A5F7039FF24BD8C0EDAA1D4
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b0cbac18-b8b5-3332-a685-af739f6db4b2.roa
Signing time:             Fri 26 Aug 2022 17:36:07 +0000
ROA not before:           Fri 26 Aug 2022 17:36:07 +0000
ROA not after:            Sat 01 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        172.103.40.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:0a:5f:70:39:ff:24:bd:8c:0e:da:a1:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 26 17:36:07 2022 GMT
            Not After : Oct  1 04:00:00 2022 GMT
        Subject: CN=4828f3a5-9b41-4bed-b1f7-1c3cf6a6cd80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e6:02:34:3d:1b:9a:f1:65:1d:7e:25:bc:0e:
                    d1:04:31:d1:7a:a3:d7:61:53:b1:ce:8a:e7:21:f7:
                    7c:db:1a:79:5b:27:fd:34:c5:f4:85:1b:92:f8:45:
                    99:3c:a2:97:aa:50:bc:d1:5a:05:20:73:de:16:08:
                    f8:87:35:a7:aa:ab:e4:05:47:ce:ea:11:d4:b0:62:
                    5e:64:6b:47:a0:0e:00:44:2f:a9:74:ff:8b:d3:c4:
                    52:d4:04:95:63:1f:2c:34:51:b7:d2:c2:19:5b:27:
                    b1:e3:97:15:48:c5:da:31:c6:12:24:00:84:1b:91:
                    35:af:c2:df:63:2b:22:9e:52:dc:3a:fa:2c:80:13:
                    38:94:41:fc:54:b0:de:6b:7d:91:0d:10:49:8b:8f:
                    67:24:da:e5:68:90:f2:7a:32:d7:ee:b9:cd:2b:72:
                    2c:9c:89:ae:6d:29:f3:b0:26:98:65:21:2e:94:e6:
                    36:46:6f:b7:53:0a:1e:07:1a:53:e4:4f:c0:87:93:
                    1a:ea:1f:47:60:70:83:14:a2:d8:78:d0:7a:4a:fa:
                    8d:3b:a3:af:34:28:ef:fb:c8:69:27:59:66:9d:a4:
                    a8:04:f6:c5:5d:8c:58:59:c2:e6:05:0b:21:49:3e:
                    b7:02:8a:44:86:1c:11:45:98:5a:07:83:32:a3:b2:
                    1f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:32:DA:46:A0:D1:AC:1C:F2:76:B5:B4:72:C8:C4:35:5F:19:A7:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b0cbac18-b8b5-3332-a685-af739f6db4b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.103.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:d9:c3:bf:6a:1e:71:fe:0b:0a:dd:2d:27:c8:ee:66:64:2c:
         b9:b0:e4:df:d1:a2:7c:1a:1b:12:d1:85:27:f1:46:e5:1a:eb:
         a6:49:0d:28:68:33:d8:8a:54:0b:b5:c0:c9:51:36:8c:1a:1d:
         0f:37:95:b0:b2:2c:71:c8:02:bb:99:99:42:7e:25:7e:a2:94:
         52:68:14:28:db:a4:8f:af:65:96:b9:40:ca:be:40:7c:52:8f:
         1d:62:32:10:62:8a:15:9d:87:26:2f:7d:f0:59:ae:5e:46:a0:
         59:99:c8:35:b1:f2:4f:44:bc:bc:6c:64:a9:fc:02:3e:c8:8f:
         f7:3d:9f:9c:d0:2a:db:25:4a:e5:3f:2b:a0:a4:7f:c8:82:ee:
         78:b2:8b:8d:68:fa:35:79:95:10:9d:c1:29:53:9b:38:12:bb:
         0a:6d:08:1e:85:1e:81:63:20:c5:0b:1d:a9:c1:dd:12:18:52:
         94:50:54:8e:3e:a6:ae:b9:83:7a:d4:4a:f2:6a:1c:f3:25:73:
         59:01:1e:9d:30:13:64:e4:e1:f3:c5:d0:07:07:c7:e6:a4:f0:
         50:b0:30:25:fc:eb:54:2e:3a:a1:93:07:dc:c9:e3:1a:22:07:
         6c:25:18:ac:2e:36:b6:58:6e:80:69:2c:88:4d:b4:85:a7:55:
         3e:66:09:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:35 2025 by rpki-client