Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c384f73f-42d1-36d3-aeb4-271f4cb632b0.roa
File:                     c384f73f-42d1-36d3-aeb4-271f4cb632b0.roa (raw, json)
Hash identifier:          UdVdU7N4m/820CNLHjr9jrjuurKqPn3MCMy24D6qzLw=
Subject key identifier:   23:81:BD:78:C0:9F:69:41:52:D8:65:87:17:2A:F9:53:4F:4E:28:59
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FC10B9E705CECBFD997E64DA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c384f73f-42d1-36d3-aeb4-271f4cb632b0.roa
Signing time:             Sun 30 Oct 2022 12:00:00 +0000
ROA not before:           Sun 30 Oct 2022 12:00:00 +0000
ROA not after:            Mon 05 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        40.176.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c1:0b:9e:70:5c:ec:bf:d9:97:e6:4d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 30 12:00:00 2022 GMT
            Not After : Dec  5 05:00:00 2022 GMT
        Subject: CN=a1d722c8-63fc-4d77-80f4-622a7a2d7e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b1:66:a2:7c:48:c5:c5:6b:e3:a7:3a:08:ec:
                    cb:75:1c:fe:71:d1:4f:70:39:50:8f:ee:8a:2d:35:
                    4d:38:13:43:85:76:6b:8f:62:72:4f:69:8c:18:4c:
                    a4:c3:3b:42:ab:74:4b:98:b0:5a:4c:50:00:d2:f0:
                    c1:f5:fe:81:10:a6:93:cc:ac:dd:65:2f:1e:bc:4e:
                    eb:3f:99:26:3a:d7:ff:5e:da:9b:4a:ed:95:aa:3d:
                    f0:9c:49:d0:42:fc:ae:bd:16:19:a9:75:2e:a9:b9:
                    02:97:c2:8c:cf:41:1d:c2:10:46:a3:6a:6c:f6:06:
                    64:e4:1a:e5:ac:b9:d7:d0:44:5e:43:23:9a:85:39:
                    f6:4c:bc:ec:a2:88:6d:26:8e:90:bc:23:42:83:d5:
                    4c:60:2c:1e:9b:ed:58:e0:db:4a:f4:d8:d8:ea:35:
                    8c:8b:f3:6a:53:84:0a:23:e0:75:0c:87:57:b1:7f:
                    dd:0f:b7:bb:8e:fc:4a:31:e0:55:db:d2:a8:fd:7e:
                    8f:e9:98:db:89:f3:89:88:8e:87:67:3b:fd:91:e7:
                    c0:12:35:70:61:0a:68:b1:ed:2e:d4:84:05:59:69:
                    09:f8:3a:d7:21:69:d8:db:0a:16:15:5c:81:71:d1:
                    cb:d7:30:95:c6:a3:3c:31:4f:c3:a2:7d:43:bd:26:
                    98:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:81:BD:78:C0:9F:69:41:52:D8:65:87:17:2A:F9:53:4F:4E:28:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c384f73f-42d1-36d3-aeb4-271f4cb632b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.176.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:5c:69:b6:6e:dc:2e:06:7a:9d:e1:35:48:1a:31:3a:08:4c:
         e0:16:0e:87:53:e9:ba:0d:b8:b6:0c:a8:66:ae:90:fe:7e:f4:
         12:9f:26:51:3e:eb:7f:2e:01:c9:1a:61:90:e9:ae:8a:71:03:
         62:75:aa:6b:4c:fa:2b:87:fa:5b:5d:3d:d1:74:f3:ad:da:4b:
         e3:c7:d8:00:50:21:ca:3f:c3:49:d8:fc:d1:a2:cc:9d:b7:d4:
         4a:ae:8a:cb:28:20:e7:82:50:38:7d:07:1f:17:f9:b7:a9:f6:
         56:f6:79:4c:b9:f8:95:bb:d6:73:6c:a2:1b:75:6c:2a:dc:aa:
         7f:53:90:46:87:5b:93:7b:07:18:a0:93:19:f4:1c:77:37:56:
         bf:fb:9d:64:3b:61:8f:f9:d9:9b:a1:8a:86:c7:7a:08:3a:2a:
         cd:85:49:84:e7:1c:bb:d5:46:3d:09:60:3c:e6:23:b7:7b:59:
         0d:ed:17:6f:31:0a:d9:af:b6:4f:71:b5:90:2b:e4:bf:a0:08:
         95:ee:a9:5d:f0:20:83:aa:1b:39:88:bf:87:9f:d0:dc:87:73:
         79:b5:d1:ad:03:72:3d:25:e2:87:35:c9:d2:29:81:3c:2c:1f:
         fe:69:10:3d:eb:61:14:50:ca:cb:d1:86:46:b6:9a:79:0e:5b:
         3e:c3:68:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:46 2025 by rpki-client