Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d2c76b18-61e8-3ac9-966d-c1f84e7613fc.roa
File:                     d2c76b18-61e8-3ac9-966d-c1f84e7613fc.roa (raw, json)
Hash identifier:          UrKkGwc+2Ku7eV5k4ouYAQMYpPdk1Fe6uRTqvZXwu4I=
Subject key identifier:   DB:D9:2E:19:0A:39:8A:2D:03:AC:00:DD:C7:C0:5E:E8:5E:33:2F:3C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E50D6ABD3AADBA31DBF08B420
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d2c76b18-61e8-3ac9-966d-c1f84e7613fc.roa
Signing time:             Mon 20 Jun 2022 12:00:00 +0000
ROA not before:           Mon 20 Jun 2022 12:00:00 +0000
ROA not after:            Tue 26 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        164.168.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:50:d6:ab:d3:aa:db:a3:1d:bf:08:b4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 20 12:00:00 2022 GMT
            Not After : Jul 26 04:00:00 2022 GMT
        Subject: CN=2b2badf5-6f00-4789-877a-2a9a995e5dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b0:69:83:e4:a0:d7:ab:ba:11:be:86:46:ed:
                    1c:d7:da:5a:b9:29:a7:91:a7:73:89:6b:f2:33:d6:
                    49:d7:a7:c9:4c:de:49:2d:81:d0:57:4b:74:36:81:
                    a5:b2:61:05:be:f6:65:81:2f:c4:32:b3:3b:f8:a2:
                    92:91:41:30:69:81:64:df:b5:5f:05:6a:3e:18:08:
                    b3:a7:fc:3e:a8:ee:dd:18:b5:9d:cb:61:8b:e2:15:
                    23:60:b8:4c:e1:ce:9d:b4:d8:30:a1:23:da:8d:e1:
                    0c:2b:1b:d5:d7:34:3f:fd:ef:34:7e:7d:36:5b:55:
                    d6:d1:49:88:67:c4:d3:b0:3f:6c:97:d0:a6:2e:74:
                    7a:1e:af:0f:26:15:a0:78:ab:bf:55:8d:92:0e:0a:
                    e4:9c:61:86:7e:8f:3f:5b:0b:e5:5b:66:a6:3e:f5:
                    dc:6e:5e:23:3a:ff:60:56:64:00:f4:65:5d:d6:d7:
                    60:7c:32:d2:86:66:9d:69:b6:d6:57:24:b5:90:e4:
                    b7:e6:ea:ec:97:3d:a9:bb:71:ed:74:e0:24:8c:81:
                    b5:a9:df:6a:df:1b:b6:c2:60:46:1d:a2:73:79:98:
                    04:25:33:5c:81:fb:af:9f:4c:76:87:03:a3:d7:c0:
                    f6:dc:96:6f:05:10:8b:70:1a:39:1e:c4:e2:4c:8e:
                    76:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D9:2E:19:0A:39:8A:2D:03:AC:00:DD:C7:C0:5E:E8:5E:33:2F:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d2c76b18-61e8-3ac9-966d-c1f84e7613fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.168.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:ec:27:55:b0:a1:a6:80:55:f0:03:9d:64:55:6d:5a:44:c8:
         59:97:41:f7:2c:b0:cd:06:49:2b:25:f0:f3:19:b2:02:ec:98:
         5a:92:23:cf:c0:7c:f5:00:5f:a9:27:d7:28:91:0c:d6:18:a5:
         dc:81:e0:4e:bf:bf:29:f0:ca:bf:28:34:90:e6:e0:1b:9d:c1:
         a7:16:38:09:92:f0:d9:de:dc:17:05:84:80:64:1e:6b:e4:2e:
         bd:5b:e6:ea:13:ec:e0:ab:19:b0:94:03:50:37:c9:97:70:e7:
         65:c1:c5:75:9a:da:4e:e9:66:57:ec:de:07:04:d0:95:ab:16:
         98:4a:bb:ad:0d:44:91:e8:c2:a8:36:31:1e:d1:6a:24:55:1e:
         b8:24:d6:e2:5d:bd:da:f9:46:d2:ca:6e:6b:0c:35:3e:0f:ba:
         96:80:e4:0a:e4:df:d0:bd:e7:9e:f0:33:37:3a:f6:13:a6:1e:
         32:a7:03:d0:52:81:f4:03:8c:6f:cf:6d:eb:7a:ae:dc:23:65:
         01:a2:6f:b0:dc:7a:82:72:5a:6c:d8:a5:95:ba:1a:03:a4:86:
         d6:bf:6d:5e:1c:4b:c8:79:72:7b:a9:e2:5c:6d:3c:08:cc:8e:
         73:af:9a:b8:eb:8c:8d:66:02:90:2b:fc:dd:a8:86:50:f5:37:
         08:dc:71:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:26 2025 by rpki-client