Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b9cd43dd-ffa9-33af-b36c-d1be4abd6b99.roa
File:                     b9cd43dd-ffa9-33af-b36c-d1be4abd6b99.roa (raw, json)
Hash identifier:          ml49DExjAc37sz9zwzwJMXVYBkEKRiumW5e6HdneRlo=
Subject key identifier:   4C:90:2E:28:4C:D2:19:21:74:BF:89:61:E5:9A:D3:34:1B:E8:78:E6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584062136C7435982DE3F36BF700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b9cd43dd-ffa9-33af-b36c-d1be4abd6b99.roa
Signing time:             Tue 27 Dec 2022 12:00:00 +0000
ROA not before:           Tue 27 Dec 2022 12:00:00 +0000
ROA not after:            Wed 01 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        2600:1f01:4800::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:62:13:6c:74:35:98:2d:e3:f3:6b:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 27 12:00:00 2022 GMT
            Not After : Feb  1 05:00:00 2023 GMT
        Subject: CN=fd22e3ab-4e44-474a-b45a-86687b1e6721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:79:aa:34:3e:4f:17:a3:5f:9b:85:e5:82:32:
                    a7:43:13:89:ba:fc:0f:67:06:3c:6e:e8:00:e2:44:
                    de:61:9e:54:63:49:09:f7:f6:29:03:c9:e7:c1:4e:
                    f9:30:3d:ba:f6:1c:5a:4a:14:b8:fd:d0:04:6b:4f:
                    7c:bc:87:75:f3:cd:fd:19:83:4a:7e:00:ff:62:63:
                    a5:2d:d1:23:24:ae:94:c9:d9:a6:bc:c1:a9:2b:d8:
                    ba:a7:7a:58:07:e7:3a:37:38:fd:f2:56:af:2e:b1:
                    c5:09:c5:0b:d1:10:da:51:fb:c4:ed:13:39:8a:28:
                    10:9c:2e:25:39:87:92:4a:10:81:ed:23:3b:ac:e0:
                    6c:90:d7:8e:fc:f7:18:05:3e:0b:9f:7f:ee:41:4e:
                    0e:41:22:e7:6c:4e:7f:30:56:19:6c:47:41:ab:ad:
                    c3:36:fe:cf:76:e4:ae:2b:c5:5b:52:24:97:b2:ef:
                    21:9c:78:8f:d2:49:2e:f9:e6:c3:a1:c3:1e:f2:83:
                    b1:19:c3:1c:cb:5b:0b:8e:10:09:44:5e:78:41:57:
                    6d:03:55:f1:98:19:36:2a:84:1d:c5:00:11:f0:a1:
                    c5:72:3c:8c:bf:23:38:e2:f1:f0:a4:6b:7b:5c:77:
                    79:ea:72:15:00:d3:4c:c7:bd:c0:bf:09:af:99:45:
                    c4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:90:2E:28:4C:D2:19:21:74:BF:89:61:E5:9A:D3:34:1B:E8:78:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b9cd43dd-ffa9-33af-b36c-d1be4abd6b99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f01:4800::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:06:1b:89:1f:7f:a8:a5:c3:f1:d2:e8:63:33:d2:75:54:5a:
         da:94:c4:95:82:38:38:7a:ae:89:ac:72:fc:c9:59:89:2c:94:
         fd:df:84:09:4b:53:13:62:a9:cf:d7:cc:d5:bf:2e:5c:ea:97:
         49:42:f6:40:58:8b:ee:a3:dc:e5:3b:dc:60:c3:e7:e5:99:76:
         a5:00:d8:c5:7c:15:df:fe:37:91:d7:f0:2b:70:06:cf:e3:f0:
         b9:78:05:4d:31:69:9a:4a:61:12:c7:21:7d:bd:75:51:92:46:
         48:47:54:2b:6c:59:c4:3f:8f:22:e5:7c:74:9d:1d:32:50:05:
         09:e1:f5:13:90:35:5d:aa:82:cf:dd:1c:73:82:0a:dd:c7:09:
         71:e1:ad:de:e9:b6:9f:02:1a:f1:ef:b1:4f:c8:47:3e:5d:38:
         3e:43:2c:85:28:9b:02:4c:99:11:70:26:23:c5:bb:da:40:4c:
         5c:81:af:53:0c:8b:2f:52:28:da:93:78:27:6a:8e:9b:51:45:
         eb:d5:d0:8d:9f:7d:db:d4:a6:31:ca:56:22:73:ec:0d:0c:bb:
         20:02:0c:66:20:00:9b:5b:62:e7:d1:bf:f8:0f:7a:50:72:56:
         80:f5:a5:ca:ff:21:e7:7c:b0:ed:bf:26:11:0d:41:f6:fd:7d:
         1d:67:2f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:17 2025 by rpki-client