Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b1f4a88c-1dd1-3e64-ab09-7976d3fcec78.roa
File:                     b1f4a88c-1dd1-3e64-ab09-7976d3fcec78.roa (raw, json)
Hash identifier:          E7enYtxK8JSHYyUgJTCj/Dk9lp2POHltCFqHOZroEfg=
Subject key identifier:   78:35:95:88:D8:88:70:D4:ED:F5:CA:DA:58:84:52:A8:E1:90:C0:0F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584010E22C6A8E97F5DFF8531D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b1f4a88c-1dd1-3e64-ab09-7976d3fcec78.roa
Signing time:             Mon 28 Nov 2022 12:00:00 +0000
ROA not before:           Mon 28 Nov 2022 12:00:00 +0000
ROA not after:            Tue 03 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        130.186.32.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:10:e2:2c:6a:8e:97:f5:df:f8:53:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 28 12:00:00 2022 GMT
            Not After : Jan  3 05:00:00 2023 GMT
        Subject: CN=44b7aac6-65ea-4733-a065-82b7062fa9a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:91:72:88:2c:a4:03:3c:6e:68:17:2d:38:00:
                    58:f4:1b:74:ec:b0:03:a6:51:c3:ce:d6:24:ca:1f:
                    58:78:d5:14:34:8f:9d:f6:55:00:3c:71:29:92:00:
                    8b:d1:6d:52:a3:e4:c5:7a:e9:64:7e:4a:44:6f:91:
                    0b:b1:73:9d:63:93:fb:1e:cd:f9:93:20:ed:44:1a:
                    54:d3:77:fe:f5:f1:97:e9:ce:08:8a:ab:15:2c:4b:
                    72:a7:15:b3:51:7c:fc:b0:40:36:b7:e8:eb:6c:0d:
                    71:30:cd:43:60:a1:54:7a:0d:53:3a:3f:75:68:04:
                    b1:06:72:23:5f:50:26:f8:52:b7:15:8b:a6:da:e6:
                    c0:99:4b:83:6f:a4:eb:5a:ff:0a:a2:20:7b:7d:86:
                    e5:b3:a6:6d:dc:8a:23:b6:a1:a3:17:11:86:28:90:
                    21:9f:90:f3:38:fd:f8:03:11:6a:9e:01:c2:cc:e4:
                    3d:cf:d0:79:a4:8f:d4:1f:a1:18:f2:6d:a6:1d:b6:
                    e5:2b:09:95:a0:92:ed:6e:ec:e5:9f:d6:18:65:0d:
                    10:a8:33:6e:b3:d8:52:23:fa:55:83:62:f1:32:90:
                    57:8f:99:f7:ea:e3:cd:e6:84:b2:79:18:05:1c:ba:
                    9e:96:3a:d0:18:55:3a:7e:db:ea:34:b4:37:c5:2c:
                    53:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:35:95:88:D8:88:70:D4:ED:F5:CA:DA:58:84:52:A8:E1:90:C0:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b1f4a88c-1dd1-3e64-ab09-7976d3fcec78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.186.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:4f:dc:50:0c:be:7c:c1:05:ba:b6:7d:19:6b:75:4a:bf:0e:
         d9:74:94:0f:6c:21:5a:da:41:ff:98:b4:65:d7:4f:c7:62:ce:
         a1:99:69:97:09:56:8d:64:65:28:0d:f0:e7:9f:42:6e:1c:0b:
         3f:11:65:6f:3c:05:02:67:3c:08:67:35:d3:30:ab:86:3f:a7:
         6b:4e:81:4a:a9:88:ed:79:07:d3:11:db:8b:6e:a8:41:64:8a:
         64:66:69:bf:dc:9f:a6:88:76:b8:bf:35:f8:ff:3c:c8:ae:b8:
         44:d3:6f:92:f5:b3:7c:20:b4:aa:a2:ca:9b:09:c4:b4:f7:a5:
         52:70:df:81:8c:6d:25:3b:a3:16:fb:c0:1d:fb:ba:e9:7f:3c:
         21:0d:d2:15:b7:05:6a:1c:84:3b:d9:01:6c:74:33:02:22:67:
         bb:9e:58:fd:4e:b7:fd:6c:b1:a8:e5:a6:77:aa:7f:82:27:97:
         e9:5b:56:2f:c1:f4:d8:9b:35:93:65:49:85:21:4b:25:d7:af:
         f8:92:f2:e4:cc:84:19:79:75:ea:a2:ac:4e:4c:93:8b:54:f8:
         ca:aa:d3:5c:c3:d8:32:98:f7:3e:08:ae:56:6e:0a:b7:5e:6b:
         84:f4:4c:72:5a:71:bf:6a:37:41:57:c8:cc:16:7d:ce:49:99:
         f1:98:03:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:07:28 2025 by rpki-client