Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dc7970ff-505c-3a0a-bff1-fe86776e23cb.roa
File:                     dc7970ff-505c-3a0a-bff1-fe86776e23cb.roa (raw, json)
Hash identifier:          ByXZJZ8wHyjUft0WTHdO67vud0EmlN0hOdphHNX1+H8=
Subject key identifier:   38:95:5B:2F:EA:0F:AA:46:D3:80:B6:FD:98:D0:8D:32:46:A5:5F:5D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D2EE09A20C9F34B452C7BCB20
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dc7970ff-505c-3a0a-bff1-fe86776e23cb.roa
Signing time:             Wed 09 Mar 2022 05:00:00 +0000
ROA not before:           Wed 09 Mar 2022 05:00:00 +0000
ROA not after:            Wed 13 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        40.165.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:2e:e0:9a:20:c9:f3:4b:45:2c:7b:cb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar  9 05:00:00 2022 GMT
            Not After : Apr 13 04:00:00 2022 GMT
        Subject: CN=a2c41c09-88dc-4e23-b308-ace36272ff31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:20:11:df:db:1a:8e:ff:cb:ad:b9:d9:26:cf:
                    f4:aa:82:b5:a0:67:8a:f6:12:fd:3c:a9:aa:ad:34:
                    a1:66:bf:23:80:71:13:c2:5d:20:87:e2:1f:b8:14:
                    6f:b2:a1:4a:51:45:bc:36:02:4c:26:88:33:85:51:
                    66:6a:71:ac:f4:ba:5d:e4:e3:06:9f:06:35:3a:e5:
                    c8:7c:67:6b:35:62:4b:ed:64:8f:a6:b1:8b:8b:7d:
                    10:37:a6:6a:a6:3e:71:60:3e:2a:9c:8d:97:fd:40:
                    d9:67:70:89:7c:c0:44:f7:df:ca:d2:36:5f:4f:f6:
                    95:d1:d2:2d:67:ed:9b:d7:b4:c4:c9:c2:ed:b6:7c:
                    f8:eb:58:78:04:ee:97:2a:9b:93:fe:db:e7:35:3e:
                    62:70:12:8b:1f:0a:4d:41:68:d1:9d:2a:3d:c4:9d:
                    b6:55:5d:53:57:ea:4f:b8:a9:39:08:5f:c9:14:60:
                    41:7f:09:8d:6c:e6:71:03:fb:b4:5b:da:57:43:fc:
                    5b:d1:ba:8f:a0:2c:c4:ac:e2:2f:3f:b6:56:1f:ee:
                    d0:c4:dd:dc:f0:71:44:44:20:04:09:30:2f:35:41:
                    83:cd:8b:c2:b1:b7:41:47:e4:51:1d:6e:5e:f6:1f:
                    c6:b7:ac:74:c7:fc:1b:6e:19:a5:8e:78:fa:99:e5:
                    f4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:95:5B:2F:EA:0F:AA:46:D3:80:B6:FD:98:D0:8D:32:46:A5:5F:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dc7970ff-505c-3a0a-bff1-fe86776e23cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.165.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:d6:1b:9d:1e:97:f4:e0:ad:25:d4:3c:ee:ea:fa:b3:9b:ce:
         7f:ad:0b:ba:67:bc:6b:40:e3:a5:fb:46:ae:f2:84:52:46:13:
         99:60:2a:cd:46:c1:0d:91:81:8a:96:fd:59:cc:77:e7:de:8e:
         a6:13:8b:ea:db:f2:67:f4:75:43:0f:69:70:7b:fc:30:a0:9e:
         67:98:6c:eb:7b:9c:dc:87:81:72:ba:53:89:fe:42:4d:05:5e:
         b6:b6:61:4a:42:9e:e5:f1:38:ac:0e:cc:2d:c2:1d:31:0e:45:
         27:07:55:ba:65:18:25:23:6a:73:89:89:83:e1:cc:31:67:a9:
         6c:1b:75:dd:ed:76:b5:6a:58:41:d4:e4:a7:55:ed:a7:a5:ad:
         a7:3a:7f:20:75:f2:b8:08:ae:78:17:72:e9:89:5d:90:aa:df:
         a5:88:40:8c:95:84:dd:68:ad:93:ff:43:32:78:07:2c:96:56:
         e8:75:67:b3:f6:70:5a:08:13:37:c3:53:f2:b0:46:e5:90:b6:
         6a:6c:33:26:d2:5d:04:fc:a5:91:b1:e6:8d:cd:6c:85:75:00:
         0c:f4:4c:6e:a5:47:2a:01:1c:e6:b9:88:db:04:25:23:b5:89:
         a1:f3:55:2c:fb:f7:cb:66:fd:b4:e0:77:b6:84:15:68:e1:38:
         e1:d3:16:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:10:17 2025 by rpki-client