Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb392832-6170-384e-89bf-528100e3e43d.roa
File:                     cb392832-6170-384e-89bf-528100e3e43d.roa (raw, json)
Hash identifier:          xoGJaJt2+49elsKojv8LD7ThBSTuKxaceFiMeSkrJrY=
Subject key identifier:   05:DE:B6:59:DD:70:0B:48:8C:19:F6:D4:9B:12:BF:30:9F:6F:4D:3D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D33716F1C66222F7C78F6DE00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb392832-6170-384e-89bf-528100e3e43d.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        192.189.197.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:71:6f:1c:66:22:2f:7c:78:f6:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=6ff87391-a82b-4f9c-a9ff-394ef5242250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:27:df:50:6a:ff:f1:59:5d:88:29:75:c6:27:
                    b1:0e:ac:67:94:00:63:7e:0f:3d:b8:67:33:9c:90:
                    7e:ba:a4:0a:8f:b6:20:aa:37:32:dc:c1:a0:0e:eb:
                    78:5a:44:32:24:5e:04:e1:dc:ea:21:cf:df:e5:68:
                    49:37:96:50:b4:cb:51:92:b3:8e:23:60:57:77:7b:
                    31:6b:00:b0:c1:a2:1d:a6:90:0b:e0:a0:cf:a1:02:
                    dc:29:71:cd:aa:77:59:4e:4a:03:b0:c8:54:a0:79:
                    63:a1:aa:07:5a:e7:73:c8:f1:1e:49:3f:34:d6:dd:
                    e7:ad:92:ea:a5:b8:35:a9:46:94:c2:28:a0:bb:ac:
                    88:9a:b9:c0:a0:92:e9:7b:bb:23:3f:e6:2d:6a:07:
                    a1:74:f1:19:64:19:d8:69:4c:17:5e:88:03:a7:d0:
                    fa:da:f6:a9:54:45:1c:f7:70:18:c7:95:0a:ad:04:
                    9d:d3:1d:60:49:f9:d5:1f:3f:fd:71:e4:c3:e8:6c:
                    fb:67:d6:2c:d3:bc:6a:c2:0f:1b:f4:16:2b:1d:74:
                    38:d2:89:ec:ef:92:c8:9a:f6:4e:94:ab:b4:53:ec:
                    a5:f9:93:74:e0:03:64:19:72:c1:25:2b:c3:59:3e:
                    f0:55:af:aa:6d:3f:c2:ae:c9:f8:35:fe:96:51:28:
                    bd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DE:B6:59:DD:70:0B:48:8C:19:F6:D4:9B:12:BF:30:9F:6F:4D:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb392832-6170-384e-89bf-528100e3e43d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:97:d8:ca:98:30:2c:73:ee:12:50:9b:ea:97:6f:25:84:c4:
         93:c8:1a:9f:b5:8d:e7:d6:6e:2d:5b:9f:24:f0:18:18:1a:38:
         d8:7f:a8:a6:bc:43:68:9b:e3:73:de:dd:8c:92:b8:56:56:43:
         cd:bb:5f:e4:20:4c:bc:f3:aa:71:1a:19:87:e6:eb:51:2d:b7:
         da:ad:4f:71:4d:d0:d6:03:36:f5:46:62:77:ed:75:21:69:f1:
         4d:e2:7c:1a:6b:21:a1:b5:62:b5:c2:1b:1e:25:15:e4:14:e6:
         fa:e7:29:77:8d:e5:5a:95:9a:c6:07:73:9f:d7:de:48:e9:de:
         de:45:0c:6d:54:c2:70:e5:d2:43:74:64:0b:8e:97:c5:61:8e:
         cc:39:87:95:fc:55:8d:85:44:af:ee:3f:47:1f:45:21:f1:18:
         27:c4:cf:6b:8c:22:7f:4c:bd:63:78:39:d5:8a:df:26:ee:90:
         bd:6c:c9:43:ac:b9:21:40:7f:66:ce:f3:82:70:31:d1:81:38:
         61:99:57:68:b1:ac:4e:20:20:ea:77:f7:c9:0e:6d:27:eb:40:
         af:3e:d9:ed:99:3e:b4:7a:59:e0:52:aa:57:9c:c8:71:9a:2f:
         51:aa:06:eb:f2:28:cf:1b:37:c5:41:c8:68:9c:a4:fe:b8:7d:
         26:b7:1e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:24 2025 by rpki-client