Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bbe39168-2668-3070-92d1-09ee2d111b9f.roa
File:                     bbe39168-2668-3070-92d1-09ee2d111b9f.roa (raw, json)
Hash identifier:          BKc1dfrl5oIuFjsHxWWpoCrxbP9KZDXMLqCejjd6W7A=
Subject key identifier:   DD:22:B0:AC:71:52:AA:70:74:60:D5:03:B4:A4:6B:18:C8:61:EB:03
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EF5073702579F452E220032E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bbe39168-2668-3070-92d1-09ee2d111b9f.roa
Signing time:             Thu 18 Aug 2022 12:00:00 +0000
ROA not before:           Thu 18 Aug 2022 12:00:00 +0000
ROA not after:            Fri 23 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        134.31.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:f5:07:37:02:57:9f:45:2e:22:00:32:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 18 12:00:00 2022 GMT
            Not After : Sep 23 04:00:00 2022 GMT
        Subject: CN=4fca4fc7-ee8a-4940-a95b-d708fdc273ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0d:77:8c:84:fa:e2:78:e6:c0:c5:76:78:94:
                    5e:c8:b1:f2:60:1e:1e:c6:89:f0:37:a4:59:a3:73:
                    20:c2:f8:b6:03:78:7a:05:7e:5e:77:d3:1f:54:98:
                    39:11:40:17:7c:f3:d6:be:86:57:13:01:40:83:48:
                    0f:6c:f6:d7:68:54:ee:21:f0:42:b4:a7:90:82:e1:
                    d3:c1:d3:7c:2d:a3:d1:61:13:6e:40:b7:ed:34:28:
                    e9:df:5b:45:be:80:0c:9b:cb:77:4e:cd:b5:61:24:
                    a0:2f:a4:44:67:f5:8f:ae:15:36:36:b3:a9:c2:5e:
                    16:0a:78:18:87:95:68:ea:cb:79:ae:01:07:be:9a:
                    b0:57:20:5f:f9:00:94:47:9e:76:96:0a:ef:ae:a1:
                    a9:0a:0c:c9:ac:51:e4:38:37:fb:66:93:9a:d4:ea:
                    77:6c:75:58:05:57:65:df:dd:4f:70:6a:c0:ff:55:
                    11:6a:c1:72:67:ee:09:30:f0:df:a0:0b:b2:12:ce:
                    e3:0d:b8:79:7d:f3:8c:9d:c3:9c:ea:e8:df:f1:9f:
                    ac:52:de:03:5c:31:db:c9:35:c4:2a:8d:e7:6c:86:
                    3a:d5:cf:bb:28:66:60:79:3c:39:44:41:49:59:d5:
                    93:e8:e1:5d:5f:77:47:80:5b:e6:03:28:bd:0e:fd:
                    6a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:22:B0:AC:71:52:AA:70:74:60:D5:03:B4:A4:6B:18:C8:61:EB:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bbe39168-2668-3070-92d1-09ee2d111b9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.31.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:1a:d9:35:ad:64:03:20:20:12:38:0c:f9:74:94:6f:1b:bf:
         56:43:45:9c:7d:d7:3c:1f:ca:db:cf:f3:18:e9:ba:c4:46:b2:
         36:1a:69:19:b3:a7:91:f9:13:cd:5d:ef:84:d5:37:2f:18:53:
         56:85:73:76:53:ef:0c:25:33:74:bc:fd:9d:87:ce:38:4b:f4:
         c5:f9:5c:04:36:21:ba:b6:57:bf:b7:9b:75:f4:2d:cf:12:8a:
         0e:c3:ba:0a:66:96:f5:a7:26:cb:79:0d:e9:61:8e:d5:19:30:
         ef:7f:36:40:bb:fa:07:43:17:8c:64:62:aa:93:5c:da:01:74:
         36:cc:16:9a:df:42:58:8c:c3:a1:36:fd:3b:40:44:22:ab:6f:
         a3:48:9d:e7:cf:be:1a:4d:e9:a8:00:f1:49:59:c6:d2:5b:8d:
         a9:58:7f:2e:f9:d3:ab:e5:11:11:5e:f1:bc:3b:8b:95:3a:61:
         6d:48:1e:f9:70:e7:f8:78:3d:ea:66:19:f9:3d:9c:12:08:ef:
         96:c1:44:ba:bd:d2:36:de:e7:1c:70:85:ed:10:c6:cf:e9:26:
         6e:08:7c:4f:8a:fc:b0:91:78:90:bf:dc:9a:ba:74:d9:02:a2:
         c8:43:20:0f:b0:73:e4:b2:f6:f5:f4:36:77:89:10:ad:cd:b3:
         41:de:8e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:00 2025 by rpki-client