Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/debb5388-25f7-39cf-81e7-4c065b74a472.roa
File:                     debb5388-25f7-39cf-81e7-4c065b74a472.roa (raw, json)
Hash identifier:          aE8xnBwBazNtDPJdZv123ALnpk8SeaZ9cWbF2Nk3qGg=
Subject key identifier:   11:9E:89:86:44:50:F5:86:57:CC:19:A1:17:FD:D6:94:21:31:A1:1C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FC335A5F159905522B674BAA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/debb5388-25f7-39cf-81e7-4c065b74a472.roa
Signing time:             Mon 31 Oct 2022 12:00:00 +0000
ROA not before:           Mon 31 Oct 2022 12:00:00 +0000
ROA not after:            Tue 06 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        151.148.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c3:35:a5:f1:59:90:55:22:b6:74:ba:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 31 12:00:00 2022 GMT
            Not After : Dec  6 05:00:00 2022 GMT
        Subject: CN=b0a97f48-88ed-46e9-8402-e52d2c60f530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6c:f2:7f:9f:3a:89:ea:4b:90:92:93:b7:b9:
                    aa:fa:89:50:87:c4:01:f0:2e:91:4c:b3:d4:dc:11:
                    f9:21:8c:2d:28:6a:13:04:89:b8:cf:87:7a:8c:72:
                    0f:d1:34:f4:64:53:35:c8:1c:b5:5d:45:89:ee:28:
                    96:70:8f:9c:9e:74:fa:64:9d:a9:e7:f5:60:52:d9:
                    53:f8:78:73:81:8a:26:aa:71:c0:a2:c5:41:59:81:
                    de:ea:0c:d3:6a:f2:57:64:1f:a3:4f:56:72:a8:80:
                    cc:f7:8b:f6:43:7f:4b:e7:ff:aa:f0:a6:c2:e4:de:
                    78:a6:eb:11:4a:12:2c:ed:3a:3a:27:f6:44:84:aa:
                    c3:92:20:26:ce:7d:f4:44:0a:29:91:d8:9b:07:1a:
                    d1:49:6f:5c:d3:fa:7f:c2:85:ce:3b:90:31:1e:de:
                    ba:ac:92:e1:c8:0b:cc:89:66:25:6e:d2:a5:31:e3:
                    02:8b:f3:d0:7b:81:27:74:43:4c:5b:6c:d9:37:ba:
                    c7:ee:bf:56:16:7f:4c:94:cf:f7:ea:8e:88:ba:69:
                    28:d6:18:d0:e7:2d:b1:85:8b:96:0f:ad:75:83:c0:
                    d4:0c:5b:3b:2f:a9:14:d2:c1:82:e9:4c:0e:fe:ca:
                    c6:37:91:78:fd:a6:c9:8d:ea:ee:de:19:a3:8c:62:
                    86:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9E:89:86:44:50:F5:86:57:CC:19:A1:17:FD:D6:94:21:31:A1:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/debb5388-25f7-39cf-81e7-4c065b74a472.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.148.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:fb:9b:27:e1:ef:49:6c:cd:86:7a:49:45:71:15:0a:d8:b3:
         56:06:07:d7:57:b6:49:62:c6:9b:45:07:81:eb:dd:d5:88:b7:
         31:77:47:4f:b4:b4:f1:ec:c2:fc:78:35:1d:e0:61:24:13:b6:
         be:a3:7d:c8:db:6e:17:87:99:36:a6:ba:0f:84:3a:4b:f7:54:
         15:4e:0d:b5:9c:32:6a:03:7b:09:67:9e:2d:c2:6a:45:75:8f:
         a2:14:f5:78:76:9a:40:87:ff:cd:aa:8c:a4:6a:a2:61:42:19:
         5a:72:c5:67:ba:44:d8:02:93:9b:1d:cf:8d:78:ca:51:b8:db:
         45:24:65:6b:53:b1:cf:e0:0d:fb:13:82:89:0b:e5:21:d5:0c:
         88:29:39:3d:15:8a:da:46:23:af:21:6d:53:f0:bc:38:2c:7c:
         27:87:2a:37:37:18:72:87:df:82:6d:55:ec:a5:83:4f:5d:ac:
         eb:c4:de:db:a3:8f:9a:9d:46:69:ab:65:d1:91:ad:9a:8d:f4:
         9e:92:0c:e7:4e:a4:ca:4e:74:ee:1f:21:81:44:44:e1:d2:93:
         26:91:b5:ef:36:ee:65:c2:73:e2:fa:81:6c:9b:f9:38:8d:4f:
         62:c7:64:bf:02:f8:e1:9d:3c:9c:68:32:4c:32:ba:67:0b:ca:
         9f:6e:fa:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:28 2025 by rpki-client