Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bd482aec-6de6-3b33-ae19-fe631696c112.roa
File:                     bd482aec-6de6-3b33-ae19-fe631696c112.roa (raw, json)
Hash identifier:          vEPL8GfJ8SHtMfpgXT3WkcX3I4ulNc5cWIdPXjoBEOo=
Subject key identifier:   39:0C:A6:97:E1:4C:C9:9C:DC:1D:72:04:64:B6:34:35:5E:02:02:7C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D2EE7BD3427565A6409571180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bd482aec-6de6-3b33-ae19-fe631696c112.roa
Signing time:             Wed 09 Mar 2022 05:00:00 +0000
ROA not before:           Wed 09 Mar 2022 05:00:00 +0000
ROA not after:            Wed 13 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        40.166.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:2e:e7:bd:34:27:56:5a:64:09:57:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar  9 05:00:00 2022 GMT
            Not After : Apr 13 04:00:00 2022 GMT
        Subject: CN=9c4ebea1-a5a5-4e4d-8663-262abac7af61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7c:86:15:09:90:91:26:2e:f4:77:70:1d:c3:
                    ac:50:d2:a4:68:9f:2c:6d:2a:9b:d4:d0:e3:8e:7c:
                    99:b3:72:56:61:8f:7f:c3:17:59:51:c8:fb:bb:4e:
                    bf:74:5b:63:76:75:be:66:6c:c5:8b:08:da:1f:8e:
                    94:cf:cd:65:15:d6:13:a7:07:50:9a:9e:85:9c:16:
                    ba:3d:13:e4:d1:21:e1:55:b7:f5:7a:39:89:4a:38:
                    00:38:ae:54:77:f7:0e:11:97:be:94:fe:89:b0:ba:
                    13:df:97:7d:cf:1d:33:94:93:ae:6b:d8:b0:f6:2c:
                    bd:3f:74:b6:db:26:37:ac:6a:4e:44:a4:5e:00:ce:
                    96:ef:20:0c:a8:15:5f:31:a8:e2:6a:01:ec:2d:ef:
                    ec:40:33:24:92:b8:1c:a1:cc:2c:be:d4:98:b1:89:
                    a9:d3:1e:c5:23:f3:f2:93:29:6d:ce:fa:d3:fc:83:
                    e5:93:6e:4a:2a:0a:87:34:fe:03:c1:cf:bd:93:d2:
                    6b:0d:c4:ca:d3:c3:5d:ea:95:58:34:fd:72:a3:7e:
                    12:3e:f8:e1:22:c7:ab:1c:05:23:15:51:76:82:81:
                    f4:84:35:5b:ba:4a:49:66:80:43:cb:7e:35:fe:98:
                    c2:6b:bc:f9:b0:e5:d0:06:5f:8f:5c:f5:6b:b5:29:
                    f7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0C:A6:97:E1:4C:C9:9C:DC:1D:72:04:64:B6:34:35:5E:02:02:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bd482aec-6de6-3b33-ae19-fe631696c112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.166.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:75:fd:18:e3:93:a2:ce:9e:71:3f:f2:3b:a9:63:bd:fb:88:
         1c:1e:66:a5:f1:57:df:bf:e7:42:69:14:34:cc:56:8a:80:73:
         b9:c5:3e:61:85:1d:2c:55:21:84:c2:b1:a3:bf:a5:17:af:01:
         0a:4a:bf:62:bb:fa:86:43:b2:fa:2c:69:56:ef:17:59:da:60:
         fc:77:43:81:49:3e:5d:d7:73:98:1f:f7:db:9f:2b:bb:2a:5e:
         28:3f:c7:e1:b0:83:83:19:79:ff:69:8e:f8:26:81:b6:e5:be:
         74:0c:33:22:ee:ae:99:6b:f9:26:61:ad:e9:46:8d:48:d0:3f:
         f2:66:be:eb:6b:f8:ad:8d:57:be:2b:f7:db:c3:62:8d:d0:64:
         5a:03:6a:ff:ea:ba:02:c4:e0:8f:04:c5:12:5f:d0:81:8d:8c:
         e2:2b:3a:7e:5d:ec:c4:f4:bf:78:a1:46:8e:33:3b:0c:32:ec:
         fb:33:f6:a3:d0:cf:1c:e2:9a:fe:62:73:75:e5:c0:c9:dc:44:
         d4:0c:4b:8d:c2:16:ba:e0:d6:c4:e7:96:bd:91:ca:a2:23:f8:
         54:2a:6c:1c:df:9d:52:01:c8:f2:49:62:fe:7d:2f:b4:40:2b:
         9b:d0:86:b4:6c:d8:62:30:9a:c7:d0:0b:2c:67:b5:5c:8c:55:
         e6:99:9d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:23 2025 by rpki-client