Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cfd15d0e-925b-37db-b7fb-cabe2b107cc0.roa
File:                     cfd15d0e-925b-37db-b7fb-cabe2b107cc0.roa (raw, json)
Hash identifier:          JmEU+JUmCfPFYGBSnGTujyUVfIfm9vyJ4Z/9OHJODDY=
Subject key identifier:   99:24:67:0F:86:E0:8B:F3:A2:02:29:C5:3D:99:8B:CF:46:14:1A:8D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D512A7144B244CFAB17DE2510
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cfd15d0e-925b-37db-b7fb-cabe2b107cc0.roa
Signing time:             Tue 22 Mar 2022 04:00:00 +0000
ROA not before:           Tue 22 Mar 2022 04:00:00 +0000
ROA not after:            Tue 26 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        162.208.123.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:51:2a:71:44:b2:44:cf:ab:17:de:25:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 22 04:00:00 2022 GMT
            Not After : Apr 26 04:00:00 2022 GMT
        Subject: CN=8960d987-aecc-4476-a5ba-043b26dfa634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:98:f1:b4:e7:98:61:67:35:a6:24:72:c1:0c:
                    20:77:9c:c4:4e:b7:08:04:c6:59:21:3f:04:b1:41:
                    6d:23:b9:15:65:90:64:dc:86:a9:15:a9:07:2d:ae:
                    b2:f5:37:01:de:0f:fd:8f:c8:2a:d2:c3:3d:5b:53:
                    ce:fc:f4:f8:02:59:36:f2:0a:3b:91:be:6f:c6:1b:
                    1e:0c:8f:42:11:b2:60:4c:4d:2f:75:16:32:79:a8:
                    b5:19:e9:4e:93:3a:24:77:0a:c1:f4:7e:af:21:9f:
                    c8:ec:3b:d5:ef:32:9a:a8:48:4b:e3:be:2c:77:72:
                    99:df:c4:a3:5b:4b:47:0f:72:04:1b:c4:f7:c3:41:
                    20:7d:14:da:44:40:d8:cf:b7:3b:2e:c3:6b:d4:6a:
                    ee:e5:30:05:80:b6:6d:7f:29:3b:cf:43:a4:91:53:
                    17:ee:ac:b4:47:08:e6:ea:c1:c1:b1:b7:52:a1:15:
                    35:77:76:4e:06:af:a5:3c:d3:4a:6b:5c:3f:5c:8a:
                    ac:0c:57:0f:09:30:61:46:5f:8a:f6:7c:82:ec:d7:
                    78:20:00:27:15:6a:1c:10:ff:31:6f:a5:08:32:d3:
                    bd:ab:0e:88:23:3f:e3:a2:9e:47:c1:e4:85:9b:cb:
                    10:9b:ee:e1:8a:7a:a2:54:e7:4c:87:f9:88:12:35:
                    64:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:24:67:0F:86:E0:8B:F3:A2:02:29:C5:3D:99:8B:CF:46:14:1A:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cfd15d0e-925b-37db-b7fb-cabe2b107cc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:57:24:07:69:ab:66:a0:71:36:f2:9d:6f:6e:e2:32:ff:f4:
         d6:bc:af:9c:b8:19:41:11:a7:77:d5:56:ac:47:85:56:3c:12:
         a0:6c:8a:9f:5d:45:39:ca:2a:6f:a5:66:cd:45:b5:0c:6f:a9:
         b6:bd:77:25:0d:a9:3f:ca:34:b1:65:f5:8f:e8:a5:ed:28:bc:
         ed:83:f3:54:04:6c:3f:46:2e:eb:57:ad:84:3c:a7:e3:e0:ba:
         a1:bc:7f:bc:6e:1d:16:de:ee:4a:db:8c:e0:c5:55:16:fd:08:
         f1:f2:8b:9a:b2:77:a1:54:f5:fe:ff:42:bf:6e:99:78:da:a8:
         f5:ab:5b:b5:77:b6:5e:7c:94:7a:85:c5:af:30:9f:ef:a9:84:
         f6:1e:51:a6:40:ad:6d:62:62:33:f6:f8:6a:4c:18:66:93:9e:
         95:e9:06:a2:57:ee:b0:72:7b:15:f2:21:a1:75:e5:31:d4:b0:
         64:61:f4:14:87:d4:52:45:44:5f:c7:b3:15:54:12:10:e7:fe:
         e5:3f:74:8e:c6:cb:cd:bf:e3:9e:fa:6e:3f:f1:b9:b7:f6:90:
         cb:a0:b3:29:72:4d:75:75:38:ce:7d:a0:6e:94:93:76:37:82:
         5d:e4:df:d9:92:f7:99:ff:36:5d:fa:b0:49:cb:cf:d5:0a:c0:
         e7:15:a0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:07 2025 by rpki-client