Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d1ff1d06-3eee-3ee8-8ab3-ac68fb1192a5.roa
File:                     d1ff1d06-3eee-3ee8-8ab3-ac68fb1192a5.roa (raw, json)
Hash identifier:          gQy530zU9+qozkRJaxb/eCp0ig9W/VEpzkCKUL3Rmdk=
Subject key identifier:   BA:AB:69:0B:56:CA:4F:6A:DA:E3:05:29:FB:D9:C7:B4:81:30:83:BF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DD2E422A4856A4527E0A1FE00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d1ff1d06-3eee-3ee8-8ab3-ac68fb1192a5.roa
Signing time:             Fri 06 May 2022 12:00:00 +0000
ROA not before:           Fri 06 May 2022 12:00:00 +0000
ROA not after:            Sat 11 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        23.20.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d2:e4:22:a4:85:6a:45:27:e0:a1:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  6 12:00:00 2022 GMT
            Not After : Jun 11 04:00:00 2022 GMT
        Subject: CN=666f2580-ce48-4ba1-bd7b-5236a1ca11a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0d:83:fb:29:8c:85:2f:a9:8a:ca:4a:30:78:
                    78:92:50:fb:80:e8:5c:31:f5:15:9e:9e:6d:73:76:
                    11:08:b9:6c:4f:79:8c:70:35:68:59:de:34:c1:bc:
                    a2:6e:4a:07:43:d9:84:a9:e3:72:a3:ce:03:f7:29:
                    56:ee:8d:c6:90:29:24:9d:c1:0a:49:31:a5:ad:cd:
                    27:a8:f8:d9:2f:cb:de:f8:53:51:7d:c1:a0:80:fa:
                    ca:dc:46:f6:e3:77:6e:42:ea:15:8e:f3:13:c5:0b:
                    16:08:c9:31:33:0f:82:2e:71:d5:41:62:ab:17:0c:
                    8b:c4:c2:35:f7:c5:f1:7d:39:0c:91:48:4b:2f:26:
                    07:c9:4b:b9:c5:2c:30:c7:6e:c2:76:ae:67:50:bb:
                    eb:20:81:4d:40:0b:0e:72:74:21:20:76:af:70:39:
                    71:3c:18:3f:03:2b:45:db:4a:48:63:1f:10:91:05:
                    2d:d2:93:9e:48:e8:ea:e5:92:37:53:0e:d2:38:2b:
                    b9:44:b7:f1:70:10:3a:18:a0:c5:7a:ed:36:a3:45:
                    db:7b:28:84:5b:02:e5:9f:a7:29:93:4c:79:68:62:
                    01:b3:8a:3c:f0:7a:e0:e8:87:b7:b6:c1:ea:10:47:
                    e3:5a:61:b6:41:a8:c3:7a:df:46:45:30:f6:8f:90:
                    d3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AB:69:0B:56:CA:4F:6A:DA:E3:05:29:FB:D9:C7:B4:81:30:83:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d1ff1d06-3eee-3ee8-8ab3-ac68fb1192a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.20.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:93:06:4b:96:f3:3b:33:13:9e:ac:9e:7a:49:de:a5:20:a8:
         6a:40:cd:23:e7:bb:c5:fc:e9:23:84:a0:43:0f:24:56:32:4b:
         27:c7:ec:8f:2b:c4:9b:15:3f:18:13:7d:85:f2:a9:2a:42:ef:
         b3:ac:ac:91:8a:51:95:14:c9:e4:d5:40:3d:5e:18:30:6d:71:
         f6:dd:9e:91:a2:a6:34:d3:88:01:4e:c7:9b:2d:60:b6:83:64:
         a8:06:60:9b:b3:91:41:ef:f9:26:d0:80:2c:25:7c:e2:09:c3:
         5c:a7:7a:b7:54:4f:1f:49:28:01:2d:92:8a:ed:e3:90:f6:6f:
         59:e0:f0:13:ee:d8:15:7b:ce:20:fc:28:fe:ab:50:1e:c5:0b:
         ab:47:b5:81:cb:d1:67:06:d0:e7:e8:e9:bc:d5:09:d7:03:ba:
         44:3a:4c:ea:ff:94:82:1f:fd:dd:91:32:09:09:af:65:dd:4b:
         a7:6a:ef:1f:da:bb:f2:58:3d:13:e6:d0:8f:33:18:78:5a:f7:
         d2:d8:b5:0a:f8:93:62:91:02:a2:6f:82:0a:b4:fa:fa:82:0c:
         56:b0:d6:00:ce:b1:ff:6b:93:0e:02:d1:7f:75:9c:59:53:54:
         35:57:77:33:7b:09:dc:db:2d:c1:82:6c:44:c0:ed:3c:bc:51:
         eb:79:0d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:17 2025 by rpki-client