Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf1f794e-5f6e-398e-a6e2-6c4e686ff028.roa
File:                     bf1f794e-5f6e-398e-a6e2-6c4e686ff028.roa (raw, json)
Hash identifier:          srfU7j8BFRFG3iD3ebp2WNG0kmtskoTL1VE4bogcDDg=
Subject key identifier:   7D:2F:12:42:1F:BA:25:98:2A:5F:5D:22:35:64:C3:CF:02:1F:9E:80
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F3061D8FC0F9724D4D4950480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf1f794e-5f6e-398e-a6e2-6c4e686ff028.roa
Signing time:             Thu 08 Sep 2022 12:00:00 +0000
ROA not before:           Thu 08 Sep 2022 12:00:00 +0000
ROA not after:            Fri 14 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        2620:107:4000::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:30:61:d8:fc:0f:97:24:d4:d4:95:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep  8 12:00:00 2022 GMT
            Not After : Oct 14 04:00:00 2022 GMT
        Subject: CN=83921ea4-5fc2-45c1-a500-e36fab6400c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:de:f2:0a:69:e5:4c:1f:d2:0f:9d:d1:a8:03:
                    a5:0f:df:17:13:c5:6f:ef:79:e2:26:5a:1f:ca:9e:
                    e2:4c:9f:34:57:c9:a2:8a:83:3e:3a:19:49:c5:69:
                    54:e2:6b:be:9d:e7:de:51:cf:47:bb:9d:14:a5:65:
                    c8:f2:f3:ba:94:bc:aa:ef:6a:5e:51:f8:08:c8:6b:
                    24:b4:04:fc:3d:74:c2:d7:4b:83:4a:10:5c:dd:bd:
                    f5:44:61:97:23:77:fb:2b:4f:05:5d:8a:82:dd:4d:
                    f9:a8:dc:8e:4c:67:20:60:b5:d8:89:07:41:9f:a6:
                    1c:00:ff:4e:7f:ed:20:00:ad:22:e1:dc:a7:87:c9:
                    68:67:3f:4b:66:4e:29:cb:df:bb:0e:1f:96:46:ee:
                    38:8d:2b:b3:2f:75:5c:4c:3a:7a:62:eb:80:94:89:
                    b8:4a:98:77:e1:bb:38:17:27:bd:5d:44:89:3d:b8:
                    d0:80:e0:c8:fe:ed:a3:84:cc:cf:3b:60:c8:6b:59:
                    f4:ce:55:03:e4:85:99:ae:2a:14:b0:0f:a5:f1:cb:
                    10:a9:14:7d:1d:0d:83:63:f6:6c:f3:00:74:10:d0:
                    72:a5:88:24:08:af:03:8d:02:df:71:ec:15:69:65:
                    fc:74:bf:e1:1f:58:ba:08:be:f3:67:c5:42:14:e5:
                    a6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2F:12:42:1F:BA:25:98:2A:5F:5D:22:35:64:C3:CF:02:1F:9E:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf1f794e-5f6e-398e-a6e2-6c4e686ff028.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:107:4000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:d2:52:c7:41:90:0e:d3:a2:78:a8:2e:e8:91:55:af:4c:3d:
         92:a5:b0:d7:0e:49:27:17:fc:05:2e:1f:af:92:c1:63:ed:17:
         61:9c:6e:1d:58:48:0e:a9:56:58:99:ce:59:4b:16:1b:44:32:
         34:32:61:52:8e:99:c4:6b:18:3e:fd:65:bd:e1:01:a0:66:ad:
         1f:30:56:45:54:a0:fc:aa:1e:2e:e1:09:23:63:60:b9:57:da:
         c7:95:9c:ab:fe:dc:15:8d:2c:27:d6:ae:e2:85:a6:b2:36:8c:
         71:c9:b8:1a:c4:4c:51:79:0e:ac:90:5e:de:72:2c:9e:a2:8c:
         71:dd:58:a7:15:bd:7d:1e:89:c8:f0:4a:f2:56:5f:d4:ad:57:
         33:58:71:d5:6c:a0:bb:21:67:b2:30:24:f9:9d:4d:8c:ef:4c:
         de:b9:4d:54:b3:a9:dc:c7:98:f1:41:b2:6d:f3:71:f7:4e:f5:
         6a:85:c5:53:29:8b:e4:ae:73:ce:50:07:97:36:5f:e2:95:27:
         1c:48:f3:59:e7:10:2f:9c:b2:03:79:0e:7f:4c:a4:7f:1b:ed:
         a5:ce:b3:bd:14:e9:1f:24:dd:94:49:cb:87:7a:23:b3:9e:f8:
         5d:41:46:79:09:96:d2:51:be:9d:dd:83:c4:aa:f5:df:a7:ff:
         d4:24:d2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:41:24 2025 by rpki-client