Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e6eba52f-58b3-3c85-bcd2-8408a208e720.roa
File:                     e6eba52f-58b3-3c85-bcd2-8408a208e720.roa (raw, json)
Hash identifier:          V29Ch9z1SZuVldi0lUKekucx1geo5147GpssC5k9o10=
Subject key identifier:   D7:A2:3F:05:E7:09:C9:8F:49:CB:F9:2F:40:E0:54:99:1D:9B:13:3F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858400013134D56DEDFDAF46811C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e6eba52f-58b3-3c85-bcd2-8408a208e720.roa
Signing time:             Tue 22 Nov 2022 12:00:00 +0000
ROA not before:           Tue 22 Nov 2022 12:00:00 +0000
ROA not after:            Wed 28 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        199.205.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:00:13:13:4d:56:de:df:da:f4:68:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 22 12:00:00 2022 GMT
            Not After : Dec 28 05:00:00 2022 GMT
        Subject: CN=51590d45-34be-4e96-9f59-2d62fbc097d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ad:53:01:e0:61:23:7b:64:f9:7d:08:8d:2d:
                    6e:30:f7:10:fd:d0:6f:4f:dd:d7:88:6e:80:97:c4:
                    2f:80:51:2b:60:56:76:92:03:06:69:bc:48:bb:a7:
                    e1:6c:32:d1:a1:da:c5:52:5a:38:20:cb:ca:ef:a9:
                    81:6b:e4:e1:2a:99:83:6d:5c:93:fc:dc:45:67:71:
                    a6:e3:21:01:1b:98:d7:4e:17:88:54:ab:5f:97:98:
                    38:9d:94:1e:64:c0:9a:43:15:37:1b:04:2f:5e:ce:
                    0e:6b:99:42:b3:47:cb:be:83:be:f8:2b:c2:c7:38:
                    5a:c6:fa:82:85:f9:34:0e:8b:87:79:f9:83:0a:aa:
                    26:85:13:cf:8b:56:46:f2:33:dd:37:ba:9d:6c:e1:
                    cd:4b:68:7c:21:71:ba:08:3b:84:c5:55:c4:0c:2f:
                    13:2c:a2:b9:f5:d1:68:ba:a1:9c:77:ac:36:85:6f:
                    74:a0:85:ac:d8:58:e7:31:cd:f2:e4:40:74:ca:a5:
                    f5:5b:35:04:ea:c9:8e:de:c3:84:30:ae:65:47:4f:
                    a7:a4:4a:5a:fe:0b:2b:e0:d1:27:82:68:54:23:e6:
                    01:fb:c5:c4:20:83:45:13:5d:9d:cb:e9:e6:f6:3e:
                    5c:05:5b:f9:b9:f2:2c:4a:77:8d:c1:f7:ad:d6:9c:
                    59:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A2:3F:05:E7:09:C9:8F:49:CB:F9:2F:40:E0:54:99:1D:9B:13:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e6eba52f-58b3-3c85-bcd2-8408a208e720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.205.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:a0:ac:fd:e6:f5:83:cc:c7:a1:68:3c:2c:44:d5:d3:dd:ff:
         90:44:cf:f9:86:83:98:f8:34:da:30:4c:7c:27:9c:eb:13:4d:
         3f:82:3d:24:01:f3:47:37:9a:e9:b2:e9:6c:4a:ff:dc:ae:dd:
         af:e3:ce:85:3b:ac:ba:f3:fe:20:33:1d:4d:ec:da:38:49:83:
         ba:3b:41:1e:79:99:4b:1d:99:04:ba:20:6f:68:8d:92:39:3f:
         c9:dd:42:97:56:7c:9b:71:b1:29:70:f2:ac:2c:47:d2:a1:b8:
         44:8d:35:b7:85:fe:16:af:ab:14:68:34:23:d6:99:aa:ad:97:
         1a:58:25:a2:d8:96:bb:32:42:63:8d:68:52:75:d9:7b:e2:80:
         bb:a5:f7:b3:4f:72:c8:85:c0:75:0b:f0:84:9f:1e:9a:27:79:
         7d:c8:14:62:0e:07:36:74:36:ad:9a:9e:5c:82:05:b9:33:e4:
         78:32:eb:dd:29:b2:db:d7:b7:e6:49:30:fd:bb:ed:98:2e:d1:
         a3:04:e9:ea:76:b4:8a:cc:5f:07:60:fe:2a:31:06:67:37:b6:
         e5:0d:99:90:f6:0b:9a:eb:b1:dd:74:38:96:35:a8:51:00:91:
         50:2f:f5:50:f1:d9:e6:7b:74:b7:85:c5:44:dd:e9:e0:fc:d2:
         f1:c8:f6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:10:15 2025 by rpki-client