Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/deb2809b-008a-3561-9306-aa7f2d0071fe.roa
File:                     deb2809b-008a-3561-9306-aa7f2d0071fe.roa (raw, json)
Hash identifier:          LsjaiHVcdxT2JZ/fHKjGJbC4miiIT3Y9OoYhJqJScMU=
Subject key identifier:   91:BA:B1:D5:7D:4E:FA:2C:8E:98:3B:C3:80:FC:5B:A4:96:B7:C4:C4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF33FEEF3F58C0CB01AEFED80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/deb2809b-008a-3561-9306-aa7f2d0071fe.roa
Signing time:             Thu 17 Nov 2022 12:00:00 +0000
ROA not before:           Thu 17 Nov 2022 12:00:00 +0000
ROA not after:            Fri 23 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        130.176.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f3:3f:ee:f3:f5:8c:0c:b0:1a:ef:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 17 12:00:00 2022 GMT
            Not After : Dec 23 05:00:00 2022 GMT
        Subject: CN=187a2b00-0543-4446-bbab-6937f6b39a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d4:e4:8e:93:82:4b:36:2b:0b:b3:19:c1:68:
                    35:3f:cc:34:25:fe:e0:13:63:d2:c2:78:ef:a2:05:
                    b8:6b:6a:87:6d:8c:93:30:e6:f3:52:7c:77:05:cf:
                    b7:8a:01:73:e6:0a:de:4e:ba:16:e6:46:0e:c9:b7:
                    5e:c2:15:4b:fb:4c:4e:07:b5:3d:50:42:eb:ea:fb:
                    1e:f1:8e:a2:64:6e:5f:ef:ed:2a:45:9f:47:89:98:
                    d7:ab:e0:95:46:9f:92:97:36:f9:fa:fc:b0:b7:30:
                    21:a0:2d:36:a4:25:40:d2:e1:c3:3a:90:0d:71:8c:
                    9b:53:fc:a3:5d:b2:2d:ee:ad:10:1d:33:5a:7a:0a:
                    19:a6:a5:a3:a8:9c:1b:af:9c:b3:c2:7a:f6:e6:18:
                    e9:5a:19:0f:a6:2d:ef:45:b0:a3:74:14:35:a6:e5:
                    01:b8:39:7e:2e:c4:c9:73:77:fa:8c:be:0a:df:a0:
                    f3:63:1d:81:32:6e:56:6f:51:b5:86:bb:fb:d7:fa:
                    13:5d:af:59:12:6a:62:31:fb:ff:79:da:37:52:27:
                    da:e6:e5:c3:f4:b9:c0:7b:85:bc:85:d6:13:b9:f0:
                    45:3d:06:48:73:4a:e1:4b:6d:03:0f:6b:8b:86:83:
                    ee:d6:ef:62:52:00:1e:35:85:be:44:9e:d0:fd:8e:
                    d5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BA:B1:D5:7D:4E:FA:2C:8E:98:3B:C3:80:FC:5B:A4:96:B7:C4:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/deb2809b-008a-3561-9306-aa7f2d0071fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:a3:0b:84:7d:84:ef:2e:1a:56:f9:54:0f:b5:a5:31:f7:41:
         19:fb:3d:67:18:21:2d:8f:48:e4:36:94:30:bd:51:7a:2c:16:
         1b:ce:da:32:1f:20:81:15:f6:0c:7e:ef:9e:4c:ce:7c:1e:21:
         b4:b2:72:c4:10:97:a0:d5:d3:0e:96:dc:10:4f:1a:cb:e1:6a:
         f8:69:0a:66:ce:57:fe:72:6d:83:45:9d:2d:80:57:48:be:3b:
         ac:08:90:53:73:a8:67:3f:dc:08:04:7e:50:b9:a3:9d:69:83:
         07:34:7c:ce:2b:11:71:d1:4a:b8:6e:b6:74:4d:09:ba:03:36:
         19:4a:d5:cc:db:7c:7a:42:f1:b4:ba:c7:d7:d6:f9:ce:8e:51:
         d5:4e:9f:83:e6:c5:9c:83:60:93:23:d9:80:1a:4c:d7:33:a8:
         d4:60:c4:a0:b4:7e:76:c7:a3:ce:ef:1c:32:2a:ee:89:1d:62:
         2f:01:5e:ec:df:58:cd:be:ac:fe:ef:b6:77:22:73:28:97:1c:
         e5:fe:c7:7c:7d:d5:8d:3f:a2:85:f2:dd:39:cb:e2:cc:58:5d:
         99:76:5d:44:2c:d1:37:5e:99:5f:b9:67:d7:44:bd:a5:f6:5d:
         e6:98:0e:c5:30:c3:ec:ee:c2:c4:5e:69:c2:2b:d0:d3:b8:61:
         a6:a7:5d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:05 2025 by rpki-client