Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf650bf8-6015-365d-b8a9-3e8ef38186ad.roa
File:                     cf650bf8-6015-365d-b8a9-3e8ef38186ad.roa (raw, json)
Hash identifier:          OtrDmq8zGC88f6RAdYxtgXWedfY9BSXdBAElmSeejlg=
Subject key identifier:   95:63:1B:76:30:9B:E4:98:BA:FC:A7:92:3D:5B:FD:32:E3:AB:F9:C1
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D67BA7E82D0340F915D048A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf650bf8-6015-365d-b8a9-3e8ef38186ad.roa
Signing time:             Wed 30 Mar 2022 04:00:00 +0000
ROA not before:           Wed 30 Mar 2022 04:00:00 +0000
ROA not after:            Wed 04 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        204.45.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:67:ba:7e:82:d0:34:0f:91:5d:04:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 30 04:00:00 2022 GMT
            Not After : May  4 04:00:00 2022 GMT
        Subject: CN=7339ed21-f8e4-4a7c-9017-c38ca377517c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:96:09:8f:10:c0:4e:d5:06:a8:9f:e9:1d:63:
                    b9:e1:78:c6:6f:0e:30:5f:9f:2e:7b:02:17:05:46:
                    6c:d1:7e:d2:e3:2b:70:c2:03:85:bf:ea:ac:d4:28:
                    9a:15:cd:97:46:05:4a:e9:17:cd:91:3e:79:8e:b0:
                    f5:81:36:77:59:03:f3:6e:6a:a5:3f:b2:c7:41:df:
                    18:28:e5:94:07:6f:8f:b6:44:48:6b:bc:dd:3f:0a:
                    f6:c8:59:77:6c:de:a9:2d:2b:ff:2a:51:e1:d5:10:
                    32:b3:85:fe:88:8d:22:6d:cb:25:9e:bd:d7:10:da:
                    d7:a2:05:8c:70:16:3f:aa:13:95:ef:7a:0b:58:b0:
                    ed:ea:f0:a5:be:d2:ac:45:2a:bb:5d:a9:4a:76:56:
                    73:c5:37:f4:e5:40:50:34:98:8b:f3:fb:41:27:2a:
                    ea:35:14:c1:eb:8d:f1:42:b8:38:21:84:09:d7:dc:
                    1e:0b:87:e6:54:9e:98:97:6c:bc:01:85:43:2f:79:
                    d2:b4:3f:62:e0:61:58:10:28:b0:df:b2:cc:c5:3c:
                    db:22:85:fc:3f:6e:98:71:34:42:ba:1b:d4:2b:52:
                    f8:95:10:40:96:7d:1c:20:9e:54:75:5a:e5:f8:bb:
                    d7:96:b8:5b:d5:ef:2c:77:50:a9:c5:a3:5f:b9:76:
                    41:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:63:1B:76:30:9B:E4:98:BA:FC:A7:92:3D:5B:FD:32:E3:AB:F9:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf650bf8-6015-365d-b8a9-3e8ef38186ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.45.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:e1:ee:09:c3:b7:22:18:9f:cd:19:b5:3a:cb:e9:d5:68:93:
         e4:91:d3:0d:61:7f:f1:89:b1:fa:be:ca:6a:f4:1e:99:1b:d1:
         1f:df:2b:7f:66:92:3c:b9:76:27:25:29:2d:ea:da:41:f7:9c:
         f2:a9:c5:3f:4c:55:85:1e:50:e9:7e:d3:2c:b3:9b:c9:e3:4f:
         4e:35:ec:79:81:0c:82:ac:2f:20:4f:28:9a:09:a3:ba:79:b4:
         42:05:37:10:bf:8d:2d:59:c1:4c:b7:99:37:f3:6b:90:2a:e0:
         7a:86:dd:bd:a3:14:4b:a0:a6:b7:10:f3:6b:29:c3:fe:94:ed:
         24:ee:e8:d7:7d:43:43:7c:65:88:7b:c9:fd:01:ed:2f:71:53:
         21:2b:a9:28:5e:00:31:91:8b:85:ad:06:5f:15:81:86:08:56:
         a2:de:07:9f:d9:33:88:46:9c:87:22:fa:55:20:c7:dd:61:60:
         8c:6a:62:09:d8:a0:5d:bc:9a:07:0a:ad:e4:ec:09:19:94:3e:
         57:94:da:95:e9:00:d1:f4:73:26:45:e4:56:21:ce:a9:9e:33:
         d3:65:01:46:20:ea:43:f8:c0:f9:28:45:74:36:27:21:9c:4c:
         09:13:aa:21:4f:ce:a4:42:83:c7:a3:16:c7:2e:09:7a:de:39:
         d1:19:34:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:00:53 2025 by rpki-client