Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ccc68085-41b6-39a5-aff7-2bb715995237.roa
File:                     ccc68085-41b6-39a5-aff7-2bb715995237.roa (raw, json)
Hash identifier:          VD+AzJpVW+/n79X2TjbVBb2kkYBoFKfwCiIJMJG6Uxg=
Subject key identifier:   52:AB:DF:FA:D0:40:AE:16:CA:BE:6C:04:6C:FF:6C:2B:92:E8:B3:6E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FFFFCDB8BB954D72F4E9BA880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ccc68085-41b6-39a5-aff7-2bb715995237.roa
Signing time:             Tue 22 Nov 2022 12:00:00 +0000
ROA not before:           Tue 22 Nov 2022 12:00:00 +0000
ROA not after:            Wed 28 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        128.81.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ff:fc:db:8b:b9:54:d7:2f:4e:9b:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 22 12:00:00 2022 GMT
            Not After : Dec 28 05:00:00 2022 GMT
        Subject: CN=5829f308-d10e-4073-b078-c28564e25e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:da:5b:cf:7c:2e:9b:55:96:da:58:d5:73:36:
                    1b:35:e0:a5:6d:87:90:fa:3c:77:d5:a2:b8:1f:29:
                    53:c3:77:d8:81:7d:6c:53:d5:a7:23:17:47:d1:32:
                    28:f7:dd:14:a9:ad:84:9c:d6:df:5c:78:ba:aa:ee:
                    5c:25:d6:44:14:26:62:dc:6e:1d:91:92:c8:e0:c4:
                    0f:96:0c:e0:7d:0b:68:76:71:70:fc:8b:8b:29:5a:
                    55:db:7d:bd:c7:6c:5f:39:b3:5a:b1:c6:48:d0:4c:
                    f1:54:94:ab:f0:d6:4b:68:9d:22:88:8e:b4:7b:2f:
                    40:d8:d5:44:c9:8d:fa:5e:18:50:50:f7:14:ee:b8:
                    9b:d1:23:17:f5:7c:a3:a1:69:54:82:82:96:9d:b3:
                    0a:f1:0e:19:14:d3:69:01:81:49:8f:8a:40:e6:80:
                    99:d8:f5:ed:b8:e2:c6:c3:58:9f:96:82:dd:e0:b8:
                    46:1e:1f:6c:b5:fd:fc:06:93:42:2d:17:15:ad:c9:
                    2a:62:ee:5b:24:d8:24:a6:15:07:41:a6:94:47:f2:
                    63:fe:94:0d:04:96:58:7c:0a:78:78:5a:82:f8:32:
                    d3:f1:46:60:b5:79:33:3d:c1:f1:dc:df:6e:b0:9a:
                    9a:3f:6a:cb:07:b6:cf:da:59:46:87:c8:1f:ca:e6:
                    1b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AB:DF:FA:D0:40:AE:16:CA:BE:6C:04:6C:FF:6C:2B:92:E8:B3:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ccc68085-41b6-39a5-aff7-2bb715995237.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.81.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:42:33:e6:77:fe:4b:a4:a3:68:db:12:31:53:b7:d8:6c:d4:
         c5:4f:e3:a8:3e:78:4b:4d:9d:02:d2:dc:30:8c:f6:e2:8d:dc:
         e2:b1:7d:2b:be:1b:1f:10:9c:a1:2d:4f:e2:19:7e:aa:a0:b7:
         45:5c:36:03:59:0e:e2:7e:e1:26:a9:0c:71:14:6b:50:cb:f2:
         bc:00:b8:8e:91:88:66:fd:29:b9:a4:23:dc:f9:0f:19:df:ce:
         af:31:e2:ec:62:b2:be:50:d0:50:25:d6:f4:5a:b5:99:32:37:
         a6:db:10:4b:e0:55:c8:9a:bc:89:a5:44:71:0b:db:22:f5:33:
         0e:15:96:9d:ca:7d:d8:f4:1b:57:bd:12:56:1c:74:fc:5c:6e:
         bc:4e:33:d6:cc:e1:a8:27:7f:d3:a8:55:63:8b:df:b6:e5:c5:
         57:8f:3d:43:58:2c:3a:67:a0:57:9d:8e:10:99:b3:c4:dc:bb:
         b5:93:cf:53:63:36:2a:b3:ef:66:56:3c:31:bc:b3:2f:7b:b2:
         ef:3a:83:3c:7f:b7:56:e3:78:fe:10:f2:4a:b2:f6:35:b0:24:
         9d:58:e7:82:e2:d7:05:2d:16:06:96:7e:b9:f5:f9:fa:c3:46:
         87:6e:86:66:ad:22:2f:09:93:db:5f:cc:c4:4d:e0:a8:5b:e0:
         08:7d:24:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:06 2025 by rpki-client