Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d0064d9c-7ca6-3da7-9622-22d23095da62.roa
File:                     d0064d9c-7ca6-3da7-9622-22d23095da62.roa (raw, json)
Hash identifier:          KXx7VcWDnhbY/bbk56fcPRi+O550CNLxTf94djrjziU=
Subject key identifier:   57:0C:F1:32:4F:E2:AA:D4:2D:5F:41:76:C9:A6:44:80:7A:12:EB:46
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E6DB72BD53768F21D5A882560
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d0064d9c-7ca6-3da7-9622-22d23095da62.roa
Signing time:             Fri 01 Jul 2022 12:00:00 +0000
ROA not before:           Fri 01 Jul 2022 12:00:00 +0000
ROA not after:            Sat 06 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        192.189.197.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6d:b7:2b:d5:37:68:f2:1d:5a:88:25:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul  1 12:00:00 2022 GMT
            Not After : Aug  6 04:00:00 2022 GMT
        Subject: CN=3b8815b5-cd12-468d-a76a-0e701b6f6f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:43:f4:e3:12:05:44:5b:aa:a3:f2:ce:04:f9:
                    2f:a2:ee:a2:ca:2c:06:d2:5b:3e:54:24:65:44:3b:
                    ae:d4:be:d1:a6:32:4f:e9:0e:84:fc:ba:4c:f0:0e:
                    8a:02:9c:22:14:f3:4a:32:39:b1:a4:b7:87:80:1a:
                    79:69:cb:47:c8:68:58:b7:b2:e0:a5:6f:56:43:2d:
                    38:6a:b0:21:04:f0:ce:81:30:97:e5:2c:02:de:74:
                    a9:dc:b1:11:56:a6:36:2b:60:7c:07:7c:eb:1c:95:
                    39:e5:61:55:09:07:85:98:f9:b6:39:e5:8c:f0:84:
                    de:e1:d2:bc:d2:c0:ac:f8:be:a2:13:a5:b5:d5:b6:
                    57:ba:63:7f:0c:d7:59:fc:84:92:7d:f3:3b:5f:2d:
                    29:cd:86:bc:1e:bb:7c:f8:0c:dc:fb:86:c3:48:e8:
                    38:c6:35:1f:99:79:f6:c7:2f:19:77:54:34:61:43:
                    87:77:15:56:d6:55:20:99:17:1d:87:26:57:a4:53:
                    ca:01:0f:83:05:7e:e9:09:09:2a:44:14:a7:e8:21:
                    58:08:dc:cc:53:d3:73:57:8f:22:51:23:dd:cb:67:
                    a7:c1:f0:fd:94:51:14:9d:db:f6:70:a3:37:b1:e1:
                    71:0e:48:85:fb:7d:d8:88:be:28:e1:ab:43:0b:fc:
                    37:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0C:F1:32:4F:E2:AA:D4:2D:5F:41:76:C9:A6:44:80:7A:12:EB:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d0064d9c-7ca6-3da7-9622-22d23095da62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:94:a9:9d:da:86:c5:4e:a8:d9:e0:e0:a2:44:fd:72:37:8b:
         30:5a:48:df:db:55:85:59:1e:32:40:b4:2d:5d:05:97:f5:d5:
         1e:76:88:20:f3:dd:e0:73:1b:46:e7:87:20:40:bf:55:9e:a7:
         34:a1:88:1b:8b:e6:d3:f7:de:c1:54:f2:eb:e0:a9:db:4b:4b:
         2e:a8:69:61:39:5a:77:63:1b:68:8c:a8:9a:02:41:af:ad:78:
         40:12:9d:f8:0c:fa:5b:1d:99:0b:8b:37:5f:31:d6:96:08:72:
         55:f1:30:9a:86:c5:d6:5d:f4:b5:85:54:2c:5c:b3:cd:64:66:
         27:63:61:01:41:84:46:19:fa:05:f7:96:be:73:6b:84:1f:c8:
         97:97:48:22:50:a9:fb:58:54:cd:3c:fe:0c:21:90:c4:45:5e:
         04:85:60:2e:e9:82:9c:15:fd:2d:d7:e7:9f:77:a5:c6:f8:27:
         ca:8d:1f:01:74:ec:21:19:d4:6c:5d:82:26:f2:f7:70:f4:78:
         d4:06:51:14:ac:03:0a:b0:d7:8a:86:35:e8:ec:cd:af:f5:d2:
         37:df:c8:c2:89:b3:42:0d:4e:c2:88:d6:c2:75:75:39:fc:d4:
         4a:d8:0d:87:a9:ad:c8:cd:bd:37:7a:49:6b:0c:f7:87:70:af:
         25:93:80:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:46 2025 by rpki-client