Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cfdcb8e7-34d1-32bd-bb23-7a17ac4b7c08.roa
File:                     cfdcb8e7-34d1-32bd-bb23-7a17ac4b7c08.roa (raw, json)
Hash identifier:          nerJMnoMu1fLKC12j6xukGDZMsT0RoqZqlXRBL5CQVw=
Subject key identifier:   EA:C2:9C:70:34:C4:4D:9F:B9:29:51:A0:95:99:87:03:E7:A4:EF:C6
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D0C0A25F491E3F33C5C357B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cfdcb8e7-34d1-32bd-bb23-7a17ac4b7c08.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        107.150.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0c:0a:25:f4:91:e3:f3:3c:5c:35:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=14bdfaff-be66-485e-85d9-106281b16a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b1:47:de:8a:0c:46:3a:ef:16:13:4c:88:50:
                    d0:0f:cb:ea:9e:40:a8:78:a5:e6:95:fe:df:58:79:
                    89:48:32:ec:3c:68:93:f1:81:19:3e:e6:17:2a:8c:
                    80:54:24:9d:e3:1b:57:f9:4c:aa:b9:e3:1c:2f:ed:
                    cd:05:11:f2:1a:d1:9e:73:18:d6:3a:cd:b9:59:40:
                    ce:70:07:97:d8:7a:6b:c1:f4:c4:ba:e7:d1:bd:d9:
                    e6:ad:a5:90:3e:5f:b5:16:99:a6:87:50:46:a4:e3:
                    9c:aa:d6:19:5c:c5:00:28:1b:fe:c2:a4:32:84:af:
                    81:27:48:8b:65:29:89:83:44:55:74:68:58:04:16:
                    8a:9e:a9:13:e9:a4:58:1b:35:99:d4:9e:97:79:e7:
                    e0:60:37:5b:1f:e6:fa:77:bc:4c:53:e4:e7:d6:2c:
                    83:78:42:1d:2f:bb:ef:0c:36:62:bc:4d:42:bc:57:
                    48:e4:20:0c:68:48:68:f7:88:dc:b8:87:bb:e5:4e:
                    3a:da:10:69:cf:9a:d1:99:4d:d1:8f:67:bf:ec:82:
                    76:fd:09:1a:04:ec:5e:a1:5b:be:9c:0d:da:00:65:
                    0f:ba:6e:cd:ea:50:4f:2c:42:ca:cb:a6:0e:dc:65:
                    39:43:b2:10:9b:24:0c:5d:da:04:5f:61:1e:fe:20:
                    02:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C2:9C:70:34:C4:4D:9F:B9:29:51:A0:95:99:87:03:E7:A4:EF:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cfdcb8e7-34d1-32bd-bb23-7a17ac4b7c08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.150.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:b4:ba:67:6b:ce:e2:ed:54:bc:81:24:41:84:32:fa:5d:ba:
         bc:d5:f4:32:8c:6a:22:bc:b1:a5:ce:41:75:ff:31:e0:5c:6c:
         5c:b4:65:00:5c:69:f6:65:92:5f:15:6f:ce:1f:f4:6d:d0:fc:
         22:cd:d5:1d:93:60:c2:7a:e2:18:90:5c:1c:af:7c:de:10:6e:
         f5:e6:bd:77:51:0b:1a:01:71:0d:6b:41:1d:db:e1:8a:20:f9:
         af:4b:a8:9c:8d:48:56:be:40:69:9b:3c:7b:91:d5:8c:65:a1:
         58:51:49:46:0d:a1:61:b5:1b:6b:64:d8:c6:1c:5c:ef:39:ba:
         94:a7:ca:51:62:48:ea:25:4d:ce:15:d8:95:76:8b:69:75:92:
         e8:f3:d6:b2:45:08:26:58:03:12:f9:c3:36:00:43:a0:0f:ca:
         3e:da:84:f3:1f:4e:8e:91:56:f0:18:47:62:36:86:66:eb:11:
         5a:98:b0:83:04:2f:44:8a:16:b9:bf:5f:f2:f0:19:50:12:0b:
         6f:8b:4d:9a:9e:18:f7:32:26:46:1b:98:48:69:bc:c3:d5:97:
         c6:2e:bf:a8:9d:e1:b5:0d:37:27:a2:a5:bd:3b:2c:aa:6e:de:
         73:76:48:d4:9c:8a:de:29:6d:90:39:00:07:56:26:34:c8:6e:
         27:36:d6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:03 2025 by rpki-client