Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df06cac8-d2e7-33d1-9cf2-d68747a4387b.roa
File:                     df06cac8-d2e7-33d1-9cf2-d68747a4387b.roa (raw, json)
Hash identifier:          wnAjGqTintCQ9ednHbPi8cAZhSug108eE5/Ei3tiMyI=
Subject key identifier:   B3:EE:25:5D:D1:42:D0:F1:D3:05:C3:A8:43:90:FA:B9:76:73:38:0E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E1FB8EC97A27F7EBE13F20300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df06cac8-d2e7-33d1-9cf2-d68747a4387b.roa
Signing time:             Fri 03 Jun 2022 20:03:08 +0000
ROA not before:           Fri 03 Jun 2022 20:03:08 +0000
ROA not after:            Sat 09 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        184.32.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1f:b8:ec:97:a2:7f:7e:be:13:f2:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun  3 20:03:08 2022 GMT
            Not After : Jul  9 04:00:00 2022 GMT
        Subject: CN=cd3f89ec-83fb-407b-94e3-c170bae7e5e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2c:7b:7a:4e:72:a0:ac:6f:95:99:01:71:2d:
                    e7:5f:c7:4b:d8:da:3c:75:6b:51:d8:90:50:52:1a:
                    bf:0d:4d:7b:10:77:b6:bc:30:b5:f7:3c:bc:c0:01:
                    39:49:dd:b2:f1:a3:c1:9d:18:40:73:62:1a:c9:c0:
                    ee:83:b9:e9:89:f5:23:38:72:27:a7:6e:75:57:5a:
                    ca:7c:5e:4c:6b:5c:90:e7:0e:b3:f5:ed:ab:07:d7:
                    57:3b:2d:e7:b3:7b:8a:0f:79:df:e6:2a:2f:fe:24:
                    1c:2a:36:b2:4d:a5:b6:25:af:6c:6f:0a:bd:97:4d:
                    a5:76:93:65:8e:5c:b1:79:df:f2:89:84:af:64:c0:
                    0b:cf:12:14:a9:3a:18:a4:35:e9:ca:6c:a5:ef:c4:
                    b4:72:8d:fb:10:de:9f:6d:90:cd:71:dc:67:22:23:
                    df:2f:3a:dc:c7:e7:cb:af:d6:4d:5f:99:ec:fb:29:
                    26:53:01:d9:6c:16:64:b5:64:4e:36:73:2a:fb:97:
                    cd:35:f5:fc:82:ec:b6:cc:6e:cd:a4:3d:7f:c4:67:
                    82:01:ca:d4:6b:1b:37:d7:2d:d0:b8:99:20:89:18:
                    e6:2e:ef:82:5b:18:06:90:b1:7c:24:a1:36:bf:28:
                    46:76:fd:c2:2c:78:af:50:c3:f2:f9:2f:ca:b0:53:
                    f8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EE:25:5D:D1:42:D0:F1:D3:05:C3:A8:43:90:FA:B9:76:73:38:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df06cac8-d2e7-33d1-9cf2-d68747a4387b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.32.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:9a:d8:7a:f0:04:e8:db:a8:6d:8a:2f:bd:b1:f2:3b:56:a8:
         5b:88:4d:26:8d:47:4f:4b:3f:40:4d:74:07:50:42:31:aa:e8:
         03:ef:ae:40:91:8a:55:f3:92:6c:70:bc:19:c9:5b:d3:de:5e:
         c7:63:9f:3f:15:a7:32:1a:d1:5c:a0:39:2e:e7:10:cb:1c:3b:
         b8:38:7d:9f:f0:08:a0:d9:2d:b4:d6:6b:b5:18:00:96:35:be:
         a1:49:c4:06:34:15:ff:29:6b:dc:36:67:19:0d:be:80:1b:b5:
         61:44:3c:fd:47:3c:7c:bc:e6:ac:21:b5:57:14:99:42:17:95:
         82:30:be:43:d4:6c:8a:25:f7:6e:34:eb:d4:78:32:78:5e:9e:
         4f:9c:f0:e0:22:73:77:d6:7f:0b:55:7c:04:f1:76:24:a5:d7:
         cc:72:fd:58:c8:94:30:01:3c:e1:80:1c:68:1f:0e:2f:f6:56:
         17:5f:42:8d:e8:8e:cb:cf:aa:32:07:53:58:9a:78:c6:83:ff:
         99:e4:fe:85:51:ef:ac:3d:ef:fd:9e:13:55:e2:99:6f:fa:0e:
         42:5f:b6:c5:30:92:5e:4e:9d:77:ee:90:82:4b:84:32:19:99:
         0a:fc:ec:4c:c4:db:00:5c:dc:36:b0:40:58:cb:46:c7:6f:c2:
         3a:04:e9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:11 2025 by rpki-client