Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c1e9486a-ee08-318f-84d0-43b6caec1b23.roa
File:                     c1e9486a-ee08-318f-84d0-43b6caec1b23.roa (raw, json)
Hash identifier:          65EPKDF65ul8AZc7soTcpPAE21q8JCjDqwx1LxDVx+w=
Subject key identifier:   8A:83:B6:40:5A:E6:5C:6E:58:88:17:76:A6:D7:8F:63:0D:DA:0E:08
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858406AF24407B0CACC6FFB697B40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c1e9486a-ee08-318f-84d0-43b6caec1b23.roa
Signing time:             Fri 30 Dec 2022 19:54:08 +0000
ROA not before:           Fri 30 Dec 2022 19:54:08 +0000
ROA not after:            Sat 04 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        173.246.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6a:f2:44:07:b0:ca:cc:6f:fb:69:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 30 19:54:08 2022 GMT
            Not After : Feb  4 05:00:00 2023 GMT
        Subject: CN=8b49c90e-aa6e-4b21-aa7c-d9e781e450c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6a:28:21:23:7b:71:d1:7e:a8:cf:7d:1d:6f:
                    2b:d6:65:a6:c4:e9:0a:a7:ed:19:63:43:92:9c:02:
                    0b:b8:6c:48:11:d0:02:fd:02:08:c7:2d:92:be:e8:
                    a1:8a:a0:87:42:03:fb:77:7a:56:13:98:ea:32:ac:
                    bd:7d:1d:25:1f:ba:fb:1e:1b:0b:c1:0a:85:7c:dc:
                    a0:98:26:26:bf:1e:f4:45:eb:8e:bb:f6:a6:a2:e4:
                    14:30:69:ee:b7:ff:04:26:f2:e7:5c:6d:f3:a5:12:
                    69:5b:4a:00:64:c8:18:1e:33:21:ed:8e:96:e7:4e:
                    1a:e1:86:83:95:ea:0f:4a:56:42:f3:37:a4:7b:5d:
                    22:79:53:b9:13:e4:59:c9:9b:6b:b3:20:44:c7:cd:
                    6c:fd:6c:de:c1:b6:8c:00:ae:cb:cc:08:2b:bc:2b:
                    7c:2b:b6:c1:95:6e:6e:86:44:2b:a8:ab:9c:6f:ef:
                    f2:ac:40:a0:41:e2:35:31:23:a9:25:b5:1c:aa:a2:
                    69:23:2a:ef:25:f5:85:8c:3a:6e:51:91:d7:9b:f9:
                    12:3d:b2:d2:b6:76:28:4e:e1:03:93:07:98:8a:ad:
                    f1:9f:fb:c6:7e:df:3b:4e:0d:3a:3b:e1:29:a9:fc:
                    e4:5d:ec:d0:82:0e:d8:27:02:3d:4f:fe:90:39:46:
                    41:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:83:B6:40:5A:E6:5C:6E:58:88:17:76:A6:D7:8F:63:0D:DA:0E:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c1e9486a-ee08-318f-84d0-43b6caec1b23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.246.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:a4:36:29:cf:ed:48:9a:a0:4d:88:b3:da:ae:7c:7d:a7:6c:
         91:29:45:32:a0:2a:fa:bc:4a:b9:70:a2:99:0d:ad:74:83:7a:
         54:5b:70:03:ed:2d:d9:ef:ef:d0:59:a9:2d:72:2e:77:79:2a:
         6c:14:31:7c:81:a1:49:f4:87:f6:cc:2b:d5:c7:63:15:66:85:
         41:23:39:be:c9:b8:9a:68:0b:1c:75:08:b3:2c:b8:fa:9a:a0:
         e2:40:25:47:34:5f:42:c4:3a:21:02:68:aa:80:3a:97:59:f9:
         ea:0c:c1:9f:25:07:0c:43:37:2a:da:5c:d9:3b:09:af:9f:69:
         e1:65:f5:63:34:98:0f:8c:91:2f:32:6d:f9:92:20:b4:2d:0d:
         29:e9:65:51:43:1b:ba:1f:eb:84:d0:12:52:c0:51:c9:48:22:
         72:7f:38:11:91:26:f0:5e:35:c3:57:37:51:3a:c6:f3:68:3f:
         0e:a5:f0:59:44:39:ea:44:fc:3d:5d:86:e5:77:d6:13:67:ad:
         f9:f3:f1:e9:ed:06:a2:41:bc:b2:b5:93:c0:b4:ec:f2:80:8b:
         fb:af:7c:c9:62:b8:12:bb:2f:b9:1c:d6:e2:66:f1:5f:7d:84:
         e2:60:40:c4:86:04:4b:8c:9c:bb:54:a8:81:0c:f7:95:bd:e9:
         ff:98:e9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:17 2025 by rpki-client