Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cc5d2bbb-eff0-3de5-86d3-1ea743f37104.roa
File:                     cc5d2bbb-eff0-3de5-86d3-1ea743f37104.roa (raw, json)
Hash identifier:          6DW76yrL6vCQcbzyywKLxozEe6gYXeF+YYOG0ZQ6mTU=
Subject key identifier:   A3:96:C0:C6:4E:22:D9:11:0B:41:02:20:BA:48:8E:E4:DD:FF:3E:51
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D8E42A63C591B7F2BDAB076C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cc5d2bbb-eff0-3de5-86d3-1ea743f37104.roa
Signing time:             Wed 13 Apr 2022 04:00:00 +0000
ROA not before:           Wed 13 Apr 2022 04:00:00 +0000
ROA not after:            Wed 18 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        152.227.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:8e:42:a6:3c:59:1b:7f:2b:da:b0:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 13 04:00:00 2022 GMT
            Not After : May 18 04:00:00 2022 GMT
        Subject: CN=8c1d78c5-a34f-4604-8301-6ea30b568ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f5:39:db:c9:49:1d:50:19:fb:55:1a:83:2c:
                    65:b9:e4:9d:09:0b:63:91:ea:52:22:fe:36:5a:40:
                    80:82:5e:67:a9:39:fb:1c:8a:dd:46:04:f2:ed:0f:
                    4f:79:75:2d:fa:0f:d3:67:79:c1:6a:0f:6b:dd:72:
                    fc:fb:2e:ec:8c:3e:7e:ba:21:4b:77:49:fa:c5:0d:
                    97:31:44:15:a1:c0:ee:fc:e0:8c:cd:2e:1a:b5:d3:
                    5e:3f:27:67:32:0b:3c:c3:5b:8b:61:7b:99:d6:42:
                    ad:5a:34:48:e0:cd:bc:04:9f:58:72:7e:88:40:fc:
                    85:23:e2:4a:d8:58:aa:a4:f1:58:61:cf:cd:1e:81:
                    84:a3:f6:d9:60:53:8e:98:0f:04:6d:a4:8b:78:37:
                    a5:76:b1:ba:bc:40:c3:71:a4:bf:39:fd:47:b0:6a:
                    a1:85:26:e8:3f:cb:2f:8b:40:69:74:2a:1e:d4:ef:
                    9f:e9:1f:3c:1e:16:3b:9c:29:00:5b:4a:50:e0:dd:
                    3d:f6:40:06:e0:da:12:ee:21:70:82:83:8a:74:c6:
                    37:d8:c6:60:d6:a4:11:cc:e1:04:6c:c4:50:44:de:
                    80:05:c9:89:72:5b:ed:15:d2:dd:71:a0:cb:75:5f:
                    93:96:27:b3:80:93:b9:c8:c5:d6:85:9b:67:47:f0:
                    3e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:96:C0:C6:4E:22:D9:11:0B:41:02:20:BA:48:8E:E4:DD:FF:3E:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cc5d2bbb-eff0-3de5-86d3-1ea743f37104.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.227.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:e3:2f:5b:39:f8:91:ec:cf:a1:0a:a4:53:5f:86:b9:c6:e3:
         ef:57:a6:92:ca:cc:1b:6f:49:34:51:42:09:f8:e2:2f:4b:23:
         29:35:ab:13:11:e2:52:dc:b9:f8:9f:b1:7b:96:45:bb:05:a7:
         12:e2:45:6b:e6:14:22:e5:ed:e7:6f:ba:f0:de:9a:be:6d:8d:
         12:13:f1:48:90:a1:21:dd:16:6f:d2:fe:15:68:ff:fe:d4:45:
         63:81:a9:71:88:e9:f7:b6:2b:16:9a:e0:23:3e:db:60:4a:5f:
         46:8c:8c:91:1f:07:cd:8e:51:87:d8:2b:3d:d3:0c:7a:92:8e:
         4f:cc:38:e2:e8:0b:cd:0f:db:32:85:ef:51:94:f5:bd:19:7e:
         2a:55:4f:f8:96:c2:fa:0f:c9:4b:0f:c2:09:ee:b3:f2:95:23:
         e3:e1:6e:28:7a:04:83:71:a4:42:5f:0f:b3:77:9e:8c:b7:dc:
         e1:9d:1a:46:9f:1b:b4:65:85:bd:2d:8e:9b:25:7b:21:e2:55:
         1a:c7:c9:a1:cf:6f:2f:e7:75:c7:17:47:e7:c6:70:3d:b0:75:
         45:de:7b:bf:28:a2:c1:ac:fd:8c:46:c5:ec:50:eb:a8:07:af:
         05:e5:b6:79:b5:e6:2d:62:f7:b3:b1:f6:a6:90:b3:dc:8e:ca:
         d0:42:08:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:52 2025 by rpki-client