Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c21da594-1c15-35bf-b494-5ddc637ef62c.roa
File:                     c21da594-1c15-35bf-b494-5ddc637ef62c.roa (raw, json)
Hash identifier:          n27cZ4M5nncz+I/bV05LUqyNMJ+f5kZ+aEcxWDNPGKk=
Subject key identifier:   E8:B6:C4:EA:39:FA:FE:E0:B3:06:22:6B:8D:3D:A0:25:15:59:E0:C3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C8D994CD6EA884C5C38E2D580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c21da594-1c15-35bf-b494-5ddc637ef62c.roa
Signing time:             Tue 11 Jan 2022 05:00:00 +0000
ROA not before:           Tue 11 Jan 2022 05:00:00 +0000
ROA not after:            Tue 15 Feb 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        162.208.123.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:8d:99:4c:d6:ea:88:4c:5c:38:e2:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 11 05:00:00 2022 GMT
            Not After : Feb 15 05:00:00 2022 GMT
        Subject: CN=92d639e7-d005-44be-8241-135980377589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:41:5b:51:3d:98:5d:4d:e1:d3:5f:e1:77:31:
                    e9:9c:13:f8:e3:36:4a:8b:3d:8a:24:9d:fa:c1:e3:
                    02:49:fd:ce:52:63:06:7f:d6:1a:2e:d0:d7:63:64:
                    d5:90:01:89:1c:1c:04:ba:0d:bf:a5:3b:4d:4f:e6:
                    78:39:30:31:b0:94:ad:83:46:c8:61:93:5c:e9:69:
                    9f:00:a1:7d:d9:16:8f:d0:0d:72:af:ba:b2:0f:92:
                    2a:b3:95:1a:b4:b4:e6:fc:8e:aa:78:de:71:6e:a4:
                    26:9a:d8:14:ec:74:ed:9a:99:84:6a:21:17:f5:ac:
                    27:a5:1b:db:e2:8f:ce:47:e6:7c:2a:a9:6a:2c:d6:
                    52:be:5f:2d:6f:21:19:96:07:a6:76:65:87:0d:e9:
                    0d:3a:f0:f7:72:d6:e7:a3:59:f0:38:9c:97:a3:5b:
                    b8:0f:95:1e:87:70:e7:72:14:87:e4:d3:70:44:7c:
                    5e:c4:7a:81:d1:e4:55:1c:af:9b:ad:32:f3:d4:d3:
                    2f:e9:e3:1b:2d:c3:56:e9:43:89:27:4e:f3:83:70:
                    d2:a7:0c:5d:8d:fb:c2:00:96:c2:a4:30:fd:29:ed:
                    14:43:f5:1c:78:cc:c5:b1:0a:a9:ea:ff:36:c5:05:
                    72:bf:2d:ce:40:bd:75:ae:14:33:7f:3a:6c:0b:8d:
                    aa:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B6:C4:EA:39:FA:FE:E0:B3:06:22:6B:8D:3D:A0:25:15:59:E0:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c21da594-1c15-35bf-b494-5ddc637ef62c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:dd:36:4c:fd:70:20:d5:8b:95:64:8d:f3:95:2e:59:47:2e:
         da:b2:95:e6:1e:bc:04:49:c6:64:c0:98:a2:7f:f2:c0:36:e1:
         66:30:09:d3:9a:91:f9:3d:4b:13:32:c9:be:70:8e:56:2d:18:
         77:5f:ef:28:74:c3:19:50:53:2d:fa:f5:33:49:6b:20:7f:0f:
         5d:91:b6:ac:f2:0b:3b:cd:94:ae:99:14:0c:cb:c4:a0:cb:6a:
         a5:c1:3a:03:6c:43:6a:05:86:4c:aa:19:5c:60:10:39:f9:97:
         57:12:06:46:fd:de:ed:14:0e:d5:86:0f:56:67:a8:ea:87:4f:
         35:ea:8c:35:c6:91:65:5d:2e:16:98:1a:ce:5a:a7:91:bf:2a:
         0e:36:37:da:b5:7c:34:73:24:5f:32:ae:a9:dc:d3:fa:3e:5b:
         44:08:6a:93:27:a4:83:7a:88:4f:38:f8:17:68:08:d9:b8:3e:
         67:5e:69:53:cf:1a:60:95:ef:4a:fa:d8:52:17:1e:ee:d5:d9:
         63:16:80:13:ea:16:8c:bf:cf:d3:27:e6:e9:cc:36:4d:7c:cc:
         95:6b:b5:37:39:27:d6:64:e0:30:ac:bf:8d:9b:af:99:3d:fa:
         a5:6d:5e:c2:7e:91:ce:5b:d1:de:e5:05:0a:04:2d:06:3b:ef:
         2a:5d:d5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:44 2025 by rpki-client