Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c5d9f48d-ab71-37e8-b8ea-7d7039b641aa.roa
File:                     c5d9f48d-ab71-37e8-b8ea-7d7039b641aa.roa (raw, json)
Hash identifier:          XJQ9ttcvZqyjMuIBicKbQL6Sui8RbNjIgKNTgSe9Ql8=
Subject key identifier:   D3:63:4B:24:72:EE:16:CE:72:F9:2E:EB:F9:C1:99:AB:AB:DC:FF:05
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FFD9A6D34F947648262868420
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c5d9f48d-ab71-37e8-b8ea-7d7039b641aa.roa
Signing time:             Mon 21 Nov 2022 12:00:00 +0000
ROA not before:           Mon 21 Nov 2022 12:00:00 +0000
ROA not after:            Tue 27 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        164.168.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:fd:9a:6d:34:f9:47:64:82:62:86:84:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 21 12:00:00 2022 GMT
            Not After : Dec 27 05:00:00 2022 GMT
        Subject: CN=e96a3359-13a4-415b-a184-0ef4a5b09fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fd:a7:0d:ac:d3:d1:7b:c0:58:35:5f:73:d6:
                    8f:ac:a1:cc:55:8d:5c:30:02:66:55:ae:8b:c3:f0:
                    62:89:1f:2f:48:f3:1c:d0:44:f7:92:49:9e:ab:89:
                    83:02:6e:c5:b8:f7:b3:38:03:27:6d:ae:82:16:96:
                    0e:e0:9a:6d:ba:f4:f3:84:41:b1:fc:ef:37:82:30:
                    b7:07:0f:95:7e:ec:1d:ce:8a:f4:01:c5:c3:4a:c3:
                    5e:6b:c9:cd:01:a5:ae:d0:d3:fc:35:6a:6b:b3:af:
                    87:bd:6e:66:aa:1d:0b:a9:fe:8f:ee:ed:33:61:31:
                    8a:48:2f:ca:fd:74:be:9b:f5:84:23:0b:ef:b8:54:
                    30:99:1c:af:09:fa:89:36:bb:0a:f6:a8:5e:ff:6b:
                    c3:c2:f1:de:f7:70:07:1e:1a:89:65:75:a0:65:46:
                    aa:ac:74:6c:83:69:31:be:30:55:d7:a1:d5:c5:e6:
                    16:1e:61:ae:2c:3a:4a:12:7d:f9:a2:28:06:a1:77:
                    41:33:02:95:f7:4b:b0:9c:1a:c6:b8:b8:78:4e:b1:
                    f4:47:cf:00:1c:ce:e2:32:11:6c:f7:6b:16:24:9f:
                    19:38:f1:26:93:85:88:a4:3f:39:16:b5:24:00:f4:
                    9e:e7:18:f4:2f:9b:65:c1:8b:a9:8e:43:34:3b:d9:
                    d0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:63:4B:24:72:EE:16:CE:72:F9:2E:EB:F9:C1:99:AB:AB:DC:FF:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c5d9f48d-ab71-37e8-b8ea-7d7039b641aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.168.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:27:90:50:ad:84:bd:96:72:bf:7a:93:2b:6b:ab:54:c5:9a:
         84:ce:96:6b:16:22:f3:1e:95:a9:23:67:60:c4:cd:13:dc:9d:
         18:ea:94:53:f2:2e:32:cc:00:64:b1:dc:8f:f5:84:02:78:a2:
         3b:46:53:53:a2:b1:89:08:b9:19:67:7a:c4:ad:71:70:22:a5:
         75:38:58:d4:10:c0:b2:8b:82:6b:43:73:12:ae:34:cd:38:ea:
         57:57:c1:f6:61:12:8a:56:16:e2:dc:97:bb:f3:49:d0:7d:63:
         43:5a:0d:18:64:45:e2:08:bd:fb:d7:78:2c:a8:e6:d1:2a:af:
         b0:5e:8b:c8:0a:4f:3f:c1:93:77:ea:d1:62:67:ca:34:74:22:
         99:56:0f:9a:73:81:0c:0f:65:66:2a:1c:58:75:9f:b5:ee:fd:
         b1:02:ec:f7:5a:bd:e1:4b:58:95:86:75:bb:0c:8a:94:80:11:
         25:e1:77:8d:3d:ad:ed:52:f5:30:ea:d5:58:24:7c:ed:8f:5f:
         a4:60:71:2e:da:a9:e9:49:fb:db:21:61:94:9c:b7:23:00:31:
         68:5d:4b:b8:34:2a:1d:53:bf:8c:da:58:9e:20:63:99:7f:c5:
         97:a9:f9:ca:3a:e0:61:89:74:20:f4:ea:6e:81:3e:bc:81:a2:
         85:c7:07:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:24:46 2025 by rpki-client