Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b781f3b3-0554-331c-997c-84c702d0d0a2.roa
File:                     b781f3b3-0554-331c-997c-84c702d0d0a2.roa (raw, json)
Hash identifier:          veUfDa3mlSN4dYbN/uuJcqyopaZREQ1hL2pS1VX4q3Y=
Subject key identifier:   65:DD:A3:D5:7C:DE:D9:DC:37:F5:E0:D0:4A:ED:D3:92:BF:2D:4D:17
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858401A55BCBE214B623DD3227680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b781f3b3-0554-331c-997c-84c702d0d0a2.roa
Signing time:             Thu 01 Dec 2022 12:00:00 +0000
ROA not before:           Thu 01 Dec 2022 12:00:00 +0000
ROA not after:            Fri 06 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        108.166.224.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1a:55:bc:be:21:4b:62:3d:d3:22:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  1 12:00:00 2022 GMT
            Not After : Jan  6 05:00:00 2023 GMT
        Subject: CN=b0ad9fbf-8d37-4370-9a25-7d569c84d104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:03:1e:c2:60:8c:a6:6a:3a:fd:bb:64:39:58:
                    5d:82:b7:5e:36:d4:33:ae:bf:ec:f4:68:b5:d6:42:
                    96:84:1d:d0:50:69:2e:10:e7:0b:21:b0:5e:2f:45:
                    17:34:e1:2e:bf:0e:13:33:fb:89:99:ca:3b:dc:a4:
                    fe:e8:8b:2e:d2:b5:54:97:17:31:86:58:bb:83:6d:
                    4e:59:4f:13:5d:39:af:2a:b1:bd:27:d1:49:13:24:
                    35:8b:eb:24:a1:45:ac:68:b3:28:5f:88:c3:7d:2c:
                    8c:bb:0a:8b:53:40:be:53:2b:11:b6:60:d0:4e:fc:
                    79:51:0e:d1:de:57:6f:18:8e:d5:32:38:b4:a5:a7:
                    a1:5a:fa:84:8d:bb:af:96:ff:af:b1:f5:d6:bb:02:
                    1b:29:60:a0:8a:c7:1f:56:40:59:b8:6c:12:0d:64:
                    24:ba:5f:05:56:61:37:fa:36:41:d5:5f:4d:3c:73:
                    96:85:2a:bb:9d:f0:de:55:03:75:8f:a4:92:5d:5c:
                    a5:62:f3:62:c1:d4:9c:28:85:df:ef:20:31:b3:2a:
                    19:7f:b6:0e:10:82:17:ab:a2:94:25:f1:1c:46:06:
                    ce:e3:ae:35:5a:6a:30:06:c2:ca:12:41:34:f8:e2:
                    d6:99:47:6c:83:c4:be:b3:37:e5:c0:c7:8f:01:20:
                    e8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DD:A3:D5:7C:DE:D9:DC:37:F5:E0:D0:4A:ED:D3:92:BF:2D:4D:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b781f3b3-0554-331c-997c-84c702d0d0a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.166.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:cc:7d:5b:81:91:23:11:32:7b:5f:fd:fd:42:b2:8d:57:14:
         ac:f6:c0:a3:ce:01:03:91:a4:9a:06:85:be:a0:6e:4f:47:fd:
         63:2e:8a:8c:b7:85:9e:1d:8a:84:1b:ff:a4:23:8e:c1:d5:20:
         9d:cd:8b:f3:79:54:39:84:4b:26:8f:f6:f5:e6:0c:69:e5:03:
         a2:5b:f6:c3:45:f4:74:0a:2f:75:02:97:fe:94:40:d3:c6:4a:
         84:24:67:43:e6:19:20:6b:ec:f6:d7:6f:68:d6:61:69:a5:cb:
         39:48:bb:8f:80:2b:74:84:70:b8:4f:1e:e6:5f:c9:ea:cf:79:
         46:e0:ba:9e:76:64:4b:e4:49:43:4f:c4:45:62:c5:39:81:93:
         dc:82:51:55:b7:b3:a6:e0:c8:9e:2b:f3:41:7c:85:b1:ae:eb:
         35:95:fa:03:96:37:09:f3:05:93:aa:62:03:fd:64:2e:ed:fe:
         51:c9:dc:93:6c:97:3b:b4:48:11:c4:a4:27:63:a0:53:87:2f:
         4a:83:59:4a:1a:e1:b8:7a:14:9c:35:eb:30:fc:d7:fa:38:8e:
         29:b2:41:f9:39:23:c4:7c:f9:8c:17:d3:5d:cc:04:86:ac:92:
         94:a6:19:40:38:f1:85:7c:55:ab:a7:8e:3c:c6:6f:69:55:77:
         d2:6c:ef:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:08:15 2025 by rpki-client