Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dad29013-4c72-3417-9569-eb4c43fe5437.roa
File:                     dad29013-4c72-3417-9569-eb4c43fe5437.roa (raw, json)
Hash identifier:          c/Oace9vWXFlhScfZuHpsiMvVpmtTQWanN1VS9v2jZw=
Subject key identifier:   65:31:CC:AB:FB:96:6E:74:87:C8:92:3A:03:FE:3A:AC:23:C2:05:34
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E1F93B09661FDEB53B017BB00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dad29013-4c72-3417-9569-eb4c43fe5437.roa
Signing time:             Fri 03 Jun 2022 20:03:08 +0000
ROA not before:           Fri 03 Jun 2022 20:03:08 +0000
ROA not after:            Sat 09 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        192.10.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1f:93:b0:96:61:fd:eb:53:b0:17:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun  3 20:03:08 2022 GMT
            Not After : Jul  9 04:00:00 2022 GMT
        Subject: CN=83ea48d1-a368-41b8-9b62-a35d244db66d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:35:08:bd:51:04:da:de:eb:c6:fb:e8:8a:fb:
                    cd:81:b4:78:2e:54:f8:0e:57:1b:4b:91:03:29:5b:
                    00:9c:34:b2:7a:50:18:fa:d4:07:cf:d0:a0:0b:8a:
                    dc:9f:36:3b:cb:51:aa:d1:db:45:ec:c3:0d:3d:f5:
                    27:28:e5:92:c6:5b:ed:c2:a9:50:5a:dc:be:79:22:
                    b5:f1:bb:2d:b5:9e:a3:8e:6d:f4:2b:14:fc:e0:8a:
                    a1:02:27:b8:16:59:72:15:c1:8d:77:33:3a:35:d4:
                    76:ae:c8:cd:19:a4:cd:38:94:01:d5:d3:7b:ea:18:
                    a5:db:e1:eb:fa:32:65:59:d9:3b:59:41:fd:ee:81:
                    e0:31:37:05:56:1d:2c:71:97:6a:2a:96:3d:35:b8:
                    e9:4e:1c:e5:16:ec:9c:62:9b:63:45:d4:b1:3b:5a:
                    65:b7:c2:d3:45:95:83:35:f7:9f:51:5e:da:a6:e2:
                    21:46:4c:e3:43:54:f3:13:61:d3:d3:17:69:20:48:
                    87:8a:b2:94:ad:9f:92:96:a8:dc:74:45:4b:27:5b:
                    a5:71:04:9c:5d:ee:ff:54:c7:9d:d6:e2:de:36:a2:
                    79:66:9c:e5:1e:b2:1e:3f:3a:1b:5e:94:4e:15:57:
                    19:7a:df:25:a8:00:1d:16:75:f1:85:13:e2:d6:43:
                    5e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:31:CC:AB:FB:96:6E:74:87:C8:92:3A:03:FE:3A:AC:23:C2:05:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dad29013-4c72-3417-9569-eb4c43fe5437.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.10.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:da:32:27:64:dc:0c:1d:60:78:cf:ad:58:f4:5d:8e:43:33:
         32:e2:e2:eb:8d:64:b8:c6:50:8c:ce:6f:b3:51:7f:ab:9e:45:
         6e:ae:f1:e8:a2:2f:03:2a:d6:5c:02:84:aa:c9:62:4d:f9:45:
         bc:de:1c:2c:27:d9:65:26:57:90:a1:4c:35:92:a1:60:b0:ec:
         b8:7d:bf:65:b7:e1:6c:bf:07:ab:26:4c:a1:cb:a0:0f:0a:1a:
         f4:c4:5b:0c:97:48:55:c0:2f:b4:f8:f7:b3:05:3c:1f:18:d4:
         81:56:50:85:db:f7:73:ca:39:d2:c7:09:f2:c5:4d:42:d0:ad:
         2e:b8:5b:93:d4:94:66:4d:02:65:94:cf:80:2b:11:68:d2:2b:
         77:e8:33:41:e3:d6:c5:a4:46:a9:32:cb:c6:34:82:6b:9d:23:
         ff:15:33:d5:de:98:41:b6:30:7a:c3:36:01:45:30:11:35:6d:
         2b:d2:82:d9:26:9a:17:b4:44:a3:2c:8f:0e:58:0e:f0:fb:8e:
         34:fb:72:f0:9d:96:2e:e7:7b:e8:d9:91:fb:8d:17:d6:dd:24:
         7c:25:9c:9f:09:ba:be:e2:03:33:de:f4:f2:80:ee:f2:b2:0a:
         4e:d5:c4:a9:06:46:eb:69:f0:94:3f:d1:39:3c:4b:12:86:71:
         5a:01:5f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:00 2025 by rpki-client