Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d26f04ec-16d3-3f87-85f4-eb6b1fe58b4f.roa
File:                     d26f04ec-16d3-3f87-85f4-eb6b1fe58b4f.roa (raw, json)
Hash identifier:          9K7euXr6jkmz55ePj6X3FOkmARaG1HsUdARv4hq+X80=
Subject key identifier:   DA:8C:61:8D:7D:1E:5D:67:E9:F0:14:EE:28:5D:8B:38:77:9E:B0:67
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858402447B5D8AB5C28E530423540
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d26f04ec-16d3-3f87-85f4-eb6b1fe58b4f.roa
Signing time:             Mon 05 Dec 2022 12:00:00 +0000
ROA not before:           Mon 05 Dec 2022 12:00:00 +0000
ROA not after:            Tue 10 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        16.145.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:24:47:b5:d8:ab:5c:28:e5:30:42:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  5 12:00:00 2022 GMT
            Not After : Jan 10 05:00:00 2023 GMT
        Subject: CN=6457a58d-9743-4cb8-a49f-0dce5d5cafd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:78:e6:34:f6:03:de:20:fc:a5:b8:f4:a7:84:
                    ec:d4:fd:86:03:0f:c0:3c:99:2e:0b:15:0a:af:1b:
                    c2:c5:94:7e:f8:59:70:37:57:8e:1f:d3:c0:01:f0:
                    5a:01:52:40:b4:4c:60:9c:76:a0:d8:4b:14:c9:3e:
                    cb:3a:5e:5a:31:bc:a9:37:7b:c5:71:8f:24:ea:6d:
                    c8:69:cd:41:27:ae:35:04:f9:2f:c9:e9:b5:07:61:
                    a4:04:1a:90:af:96:76:60:06:27:70:67:b5:f1:8d:
                    63:9f:1f:32:a9:5f:de:4f:ff:d8:c5:3a:5a:a5:2f:
                    ad:6b:5a:dc:29:5e:99:61:54:da:fa:9c:c7:39:e8:
                    d2:ef:87:c6:bd:da:d4:42:ac:63:4f:f0:bc:2f:e7:
                    71:0b:69:23:ad:69:f1:96:8b:dd:4d:db:5b:98:99:
                    25:e6:fe:76:84:0d:e7:85:06:fa:41:02:44:95:42:
                    84:42:72:d3:53:9e:ee:36:4d:ee:bd:32:a3:a2:bd:
                    95:57:ae:75:1b:1b:73:6b:e8:2d:02:b5:ba:fc:b0:
                    36:64:ae:2f:7c:d4:89:00:0f:06:51:a0:ad:ab:f4:
                    19:04:22:23:6d:9b:ba:48:a6:d9:4c:10:5a:63:e8:
                    13:8c:75:c6:00:25:ff:24:05:9f:12:ea:23:31:e7:
                    16:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8C:61:8D:7D:1E:5D:67:E9:F0:14:EE:28:5D:8B:38:77:9E:B0:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d26f04ec-16d3-3f87-85f4-eb6b1fe58b4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.145.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:94:de:7d:46:ec:08:ff:26:d4:9d:db:f8:ec:3f:6a:2a:73:
         e3:72:05:23:cb:4e:04:22:dd:b0:30:74:de:7d:3a:bc:04:e1:
         2a:a9:5a:e3:d4:5e:21:aa:3f:5a:89:73:92:8b:7c:04:00:d4:
         03:ac:f3:2c:ea:6f:9b:6c:f2:85:8d:9b:cf:02:6f:18:fb:b6:
         94:4f:19:23:ef:5c:2c:65:e3:df:70:c2:c1:64:05:a8:a4:2c:
         f2:85:66:f1:e6:82:68:5f:18:e3:93:9a:51:84:ba:5a:f8:c5:
         71:9f:7a:27:c6:88:97:59:80:7f:57:db:d5:f4:8d:93:09:4e:
         83:d4:32:52:6f:5e:04:22:9e:8c:44:2c:3e:de:04:f7:68:03:
         ca:e0:29:ae:bc:37:8e:71:64:58:23:ba:8c:aa:c4:85:48:e5:
         5f:2e:4a:c7:01:cc:c8:a8:b6:7f:a1:51:e3:59:bc:1c:99:17:
         9b:55:90:60:9d:5a:31:0d:7c:83:f1:df:10:a9:26:15:3c:2f:
         d6:51:22:b3:e9:b0:c6:74:48:67:29:9c:38:b4:b5:10:bc:d4:
         92:9c:52:55:d8:e0:51:c9:ec:ad:05:5d:5a:5b:79:77:da:5d:
         2a:c3:a2:f2:eb:1c:5f:83:91:be:89:58:b7:95:93:09:1c:5f:
         df:53:fb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:49 2025 by rpki-client