Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cab342c5-d41b-338d-b017-6a4dc19b8275.roa
File:                     cab342c5-d41b-338d-b017-6a4dc19b8275.roa (raw, json)
Hash identifier:          rat0naidBXtB1n+Qm3CQnkeB6VhbYv8zNfRuS9u+XuI=
Subject key identifier:   AA:C4:69:EC:81:29:B7:F7:E1:DC:21:30:38:09:14:05:92:26:E0:48
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E6DEB4554033BA748EAFC8880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cab342c5-d41b-338d-b017-6a4dc19b8275.roa
Signing time:             Fri 01 Jul 2022 12:00:00 +0000
ROA not before:           Fri 01 Jul 2022 12:00:00 +0000
ROA not after:            Sat 06 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        173.228.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6d:eb:45:54:03:3b:a7:48:ea:fc:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul  1 12:00:00 2022 GMT
            Not After : Aug  6 04:00:00 2022 GMT
        Subject: CN=ccf75c8d-7e30-42ae-b437-b3a2fd99c91b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:98:58:3d:0c:98:f7:69:83:20:2b:a8:60:6b:
                    bd:f7:60:e5:f7:03:5e:6b:d8:ac:a3:43:f3:81:12:
                    63:48:40:78:86:9f:71:e3:74:16:f2:be:5c:e2:59:
                    e0:ea:8d:ef:08:b8:8d:85:77:d6:69:eb:f6:ae:25:
                    b6:92:cc:d8:3a:27:b3:c7:d1:d2:b1:04:ec:61:2e:
                    26:68:11:43:e2:04:12:ec:7b:1d:03:5a:95:13:50:
                    c6:49:02:4f:c8:fa:29:37:d4:32:d8:e5:75:2c:36:
                    9d:f0:dc:6f:11:9d:ca:2d:57:7b:ec:ca:3e:17:8c:
                    f0:c6:b9:05:ce:6a:3d:67:6f:31:0d:8e:f0:0c:19:
                    12:c3:60:2d:56:2a:29:fe:aa:11:0c:2e:b0:8c:5d:
                    e5:a1:b1:5e:31:ff:c6:ed:26:10:69:c2:2e:63:0f:
                    62:9e:e7:dc:2e:ad:12:24:e4:a8:5b:a0:35:8d:62:
                    2f:d4:13:90:2c:57:2c:f5:aa:56:f0:e3:3c:37:29:
                    ca:2f:4c:0c:48:9d:3d:1a:8f:e4:fe:b1:19:ad:b5:
                    65:53:4b:b9:54:00:91:bc:d9:7b:b6:3d:84:54:f1:
                    81:55:a6:7f:d6:4b:0a:fe:9b:36:98:f3:41:15:8c:
                    a7:0c:88:32:de:04:43:97:20:30:b6:03:29:6c:74:
                    ba:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C4:69:EC:81:29:B7:F7:E1:DC:21:30:38:09:14:05:92:26:E0:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cab342c5-d41b-338d-b017-6a4dc19b8275.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.228.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:c1:54:a7:82:97:2c:e2:e6:7b:06:ef:1a:f0:38:ce:d2:76:
         6c:ae:55:cf:f0:ae:38:d4:07:4c:1f:29:44:4c:4b:4e:6b:cf:
         be:ab:1c:2e:25:22:ff:b7:e9:06:9b:c0:9f:ab:a3:d9:25:59:
         3b:ec:eb:c2:4a:8a:4a:8b:a3:35:46:28:c9:d4:53:25:92:31:
         1b:a0:92:e8:83:5d:b2:a8:d5:f1:5a:2b:da:fb:45:d7:86:71:
         d4:17:d5:e6:44:da:dd:9f:3f:f2:89:36:fe:af:d0:1b:f6:26:
         80:aa:1e:48:6b:8d:58:60:dc:1c:c8:2b:59:c7:75:6b:df:f7:
         71:e7:66:13:24:8b:ca:17:31:e6:02:e8:b3:bd:4a:c3:6b:27:
         ad:b1:97:6d:55:a7:80:b0:e7:de:19:90:fa:0d:b0:b4:79:a6:
         fc:f2:96:bd:43:4f:00:5d:2a:8e:6c:79:2e:a9:45:b2:b3:12:
         73:6d:62:be:75:18:02:47:5d:4f:dd:e0:bd:45:e4:9f:79:4e:
         ca:26:8d:30:36:69:db:5e:58:00:30:cb:33:a5:5a:e7:d9:19:
         51:29:6d:b3:f4:59:d5:54:9c:1c:29:ce:b6:2f:08:ca:e9:c1:
         e4:29:99:70:f2:4b:2e:9c:b6:0c:b4:92:9b:37:87:18:d1:13:
         75:6d:02:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:53:12 2025 by rpki-client