Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b56d65ee-f356-373f-93ad-3cd0561fc0e1.roa
File:                     b56d65ee-f356-373f-93ad-3cd0561fc0e1.roa (raw, json)
Hash identifier:          wKFPNaaWeihmQ1Db26HD9LS2WX4DHDd8e56G58MDhG4=
Subject key identifier:   A9:60:11:67:81:4E:7E:32:37:F7:92:EF:8B:F9:1F:9B:D0:05:46:E0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FA469B2A13247238553A18280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b56d65ee-f356-373f-93ad-3cd0561fc0e1.roa
Signing time:             Thu 20 Oct 2022 12:00:00 +0000
ROA not before:           Thu 20 Oct 2022 12:00:00 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        161.178.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a4:69:b2:a1:32:47:23:85:53:a1:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 20 12:00:00 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=3bcea46b-7cbb-4f70-bc00-37f34e3f6bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2f:3d:16:df:38:34:21:46:32:fe:ef:04:8b:
                    95:a9:62:3c:b1:4f:47:c5:7e:0d:6a:bd:34:89:2f:
                    a5:aa:6d:74:7d:2d:dc:1e:03:42:fa:ee:2b:83:19:
                    a1:9a:94:c8:a8:d3:63:1b:ca:91:01:54:01:20:be:
                    ae:a2:53:7f:90:35:20:a7:46:18:ef:32:2f:ac:83:
                    53:6d:9f:68:45:c9:14:67:e2:96:41:6b:4c:40:37:
                    1f:6a:7b:92:04:b8:f1:ed:11:16:82:6b:18:1c:aa:
                    1b:08:7d:88:1c:0d:ea:a4:b2:ff:b0:ac:86:6c:11:
                    dd:99:e9:6c:80:44:54:8c:16:8a:9a:d4:df:8b:3e:
                    01:4d:20:94:55:71:4e:cb:84:56:3c:df:34:df:43:
                    02:57:45:b6:e1:09:31:ab:95:47:c7:64:e4:cb:c5:
                    7a:52:76:de:2d:f0:b1:3e:37:09:72:a8:2d:28:44:
                    9e:2c:c3:6b:2b:3b:61:dc:bb:ca:93:7b:12:bd:62:
                    33:5a:dd:c0:56:2a:8b:78:17:cc:e4:69:cf:54:8e:
                    cf:66:68:e9:76:9c:9a:59:74:8a:9e:1e:29:a5:47:
                    04:34:7d:75:f2:d2:8b:c2:ab:a7:a5:44:f4:f0:d2:
                    6f:8f:8f:0a:a7:fa:7b:73:be:0a:91:10:7a:74:aa:
                    b1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:60:11:67:81:4E:7E:32:37:F7:92:EF:8B:F9:1F:9B:D0:05:46:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b56d65ee-f356-373f-93ad-3cd0561fc0e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.178.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:85:cb:46:ba:63:dd:09:34:55:41:60:e4:a3:0c:e0:79:f3:
         1a:a1:c0:4e:9f:c4:2a:8e:00:f7:19:e8:ed:92:9e:24:0a:31:
         09:c9:46:75:4a:08:58:45:0c:20:e8:e7:5c:a9:b4:eb:94:b0:
         7b:93:af:ef:78:5a:72:84:a6:85:65:bb:82:71:4c:19:a0:e1:
         8a:fe:31:cf:33:f2:eb:e5:aa:c6:c8:59:a8:bf:96:2f:db:be:
         c7:c7:d9:20:8b:8a:a0:37:66:3a:53:23:21:63:a5:f5:94:89:
         3d:aa:29:68:00:13:af:91:ac:03:aa:be:c6:17:63:6d:1a:33:
         ad:d6:3a:08:4f:7f:1c:40:83:fa:e6:28:72:43:f1:59:7c:bc:
         02:85:49:02:34:1e:e2:73:34:1c:49:5c:12:a5:0c:d6:c7:36:
         dc:0b:1c:4e:f9:1f:ee:30:fd:f2:58:02:9e:8d:04:e2:01:5e:
         7d:87:89:e0:e6:f3:73:a5:fc:fc:92:9c:e6:85:dc:c1:49:6b:
         d7:a7:5e:c9:81:9f:e4:3c:f6:84:8b:76:5c:42:e9:87:ab:61:
         61:cd:b6:d7:06:78:43:f6:59:b9:a1:78:e8:92:10:13:36:85:
         53:78:25:f4:d5:30:91:e6:96:77:ed:38:74:ab:dd:db:0f:15:
         1b:cc:f7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:49 2025 by rpki-client