Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/daaec66d-d22d-37c0-a615-44308cd81014.roa
File:                     daaec66d-d22d-37c0-a615-44308cd81014.roa (raw, json)
Hash identifier:          82xezga6qAdsJ/lXvatHT1qnOXaI8yr9+uQsyVchR2o=
Subject key identifier:   8E:79:74:ED:C1:43:DF:28:C4:BC:7A:77:A6:5F:46:9C:F8:52:FE:D4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E4577CDAB077C1A786CF72480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/daaec66d-d22d-37c0-a615-44308cd81014.roa
Signing time:             Thu 16 Jun 2022 12:00:00 +0000
ROA not before:           Thu 16 Jun 2022 12:00:00 +0000
ROA not after:            Fri 22 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        100.20.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:45:77:cd:ab:07:7c:1a:78:6c:f7:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 16 12:00:00 2022 GMT
            Not After : Jul 22 04:00:00 2022 GMT
        Subject: CN=46e87ec8-6a85-490b-b7c7-44e0e1443f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:05:25:57:4d:0f:6f:dc:87:a6:f5:b0:87:f2:
                    6d:5d:ea:9a:81:86:d4:3c:2e:fb:6e:42:76:f5:e8:
                    de:34:a4:47:b9:bd:85:e0:d9:bd:2e:e7:45:a3:d6:
                    22:ea:51:69:18:a7:d2:e0:e8:f7:50:ec:b2:9e:9c:
                    9b:ba:f2:b3:86:95:e3:6b:75:47:9a:61:7a:04:15:
                    12:c8:1c:f1:d8:b1:24:57:cc:28:39:d2:13:4c:81:
                    9e:6b:56:53:c6:1a:a5:3a:cd:27:ae:64:f8:6c:3e:
                    34:d1:a6:ae:08:87:c7:1d:1d:ba:75:0f:41:90:81:
                    b9:58:91:34:d7:f3:e3:99:6c:6b:cd:6c:58:b2:0c:
                    53:7e:21:7a:76:66:85:e3:4f:19:b9:da:b3:c8:5a:
                    36:f6:0d:b4:e1:c4:91:71:41:8b:4f:7c:f2:56:33:
                    6f:42:c0:8f:e7:e2:e4:e3:70:bf:b2:f6:9b:5a:1c:
                    39:8f:ea:f5:ef:e9:66:e0:6f:32:d1:50:cd:9b:e4:
                    95:dc:08:97:de:ad:83:e8:a5:f7:54:91:bd:15:95:
                    b1:91:1a:3f:d9:92:a5:4f:4f:7b:4b:12:b9:60:ae:
                    db:5b:a6:5b:93:c6:5b:40:67:51:86:bb:c0:f7:99:
                    57:bd:1e:88:b3:74:6f:55:9e:c1:b7:1f:19:13:b3:
                    8b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:79:74:ED:C1:43:DF:28:C4:BC:7A:77:A6:5F:46:9C:F8:52:FE:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/daaec66d-d22d-37c0-a615-44308cd81014.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.20.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:0d:81:9e:4f:94:ca:0f:36:3b:3a:ce:b9:e6:ac:5d:44:0f:
         72:16:d7:e1:7a:ae:f6:27:92:95:8e:2b:24:9d:6b:b6:ee:54:
         14:ca:dc:45:32:e7:1a:47:79:8e:23:0c:c2:58:24:cc:a7:c1:
         54:1a:68:e9:1c:71:f8:a9:2d:82:12:5b:70:b6:52:22:3c:31:
         87:58:11:f5:e3:4e:ba:db:16:99:f7:61:a7:9f:41:fc:0a:ce:
         41:53:aa:8b:3a:9b:60:e0:03:51:9f:3a:32:4e:a8:24:c8:9d:
         e8:ae:ba:be:56:ff:2f:6a:16:c7:db:35:d5:cc:13:00:aa:32:
         ee:97:15:b4:46:33:ad:22:63:32:41:98:64:ae:c5:3a:52:76:
         1a:6e:34:61:5c:38:98:0d:c8:a3:dd:10:7a:0b:e9:c2:0b:33:
         9c:0f:92:d8:6a:36:92:a6:c5:f0:e5:77:1d:82:76:83:3f:30:
         aa:3a:e3:92:22:02:43:d2:5d:ba:76:f4:29:3b:36:e6:37:5e:
         22:62:5f:f4:31:70:eb:41:f1:66:f3:91:8e:b8:23:d8:52:ce:
         04:80:6b:5c:a4:8d:7b:84:3c:5d:de:9d:22:20:d9:3b:3a:81:
         f8:bb:e6:54:cf:01:47:56:8d:99:02:b5:74:ea:a9:d0:f0:4d:
         cd:78:69:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:17:31 2025 by rpki-client