Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e85c2da2-80ef-383e-9555-3114e5612b7f.roa
File:                     e85c2da2-80ef-383e-9555-3114e5612b7f.roa (raw, json)
Hash identifier:          rcZaaQmdr+oavub4tetmOkElAsObRlQC9+DA4GTG8CU=
Subject key identifier:   87:57:92:7B:F4:73:76:D7:5D:5F:2A:F4:3A:5F:69:D8:E2:2C:94:A3
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DA9EAC3D15F39E9A20B1E6C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e85c2da2-80ef-383e-9555-3114e5612b7f.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        209.54.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a9:ea:c3:d1:5f:39:e9:a2:0b:1e:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=5ad3cca0-0b80-487a-a3f7-d0801657c954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fc:99:e2:ac:77:6d:ee:e8:f9:ce:b3:99:d3:
                    7d:ae:dd:74:ec:b3:17:60:f2:cf:03:c1:05:85:9c:
                    11:15:cb:2e:43:3e:cd:79:e9:d7:d5:db:6b:f2:23:
                    3f:4f:e4:b2:99:02:10:7d:0d:6b:23:19:30:4b:e1:
                    a2:61:c3:c0:14:9d:b9:8b:31:33:42:63:d8:25:12:
                    5e:55:d7:7b:73:85:9d:7b:ab:52:53:8d:17:5a:0c:
                    b6:17:bb:b8:97:92:6d:7e:a8:70:8b:68:40:6d:91:
                    ea:27:19:4c:84:b4:a2:e9:6e:21:52:34:e0:0b:e9:
                    33:dd:a6:77:50:33:20:ca:32:46:33:a5:3c:66:1a:
                    ed:6f:d7:f4:ec:cc:e1:04:d9:39:cb:04:36:ad:dd:
                    13:39:89:e2:76:67:19:84:46:65:a5:16:27:04:f8:
                    d0:d8:72:a5:00:b8:07:f6:1c:e6:64:21:3e:b6:57:
                    84:c8:70:80:7e:05:f5:93:1c:3d:2b:e6:10:e6:82:
                    ec:e1:29:00:f3:55:b7:55:d3:72:1a:39:af:92:5f:
                    4d:bb:e6:ee:32:64:4b:6a:f3:a5:ea:e8:2e:d7:cd:
                    01:59:0f:3e:cd:b2:b0:b0:d4:be:22:0a:1b:0c:33:
                    54:13:91:81:63:55:f4:6f:02:4a:1a:2c:5c:66:ae:
                    31:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:57:92:7B:F4:73:76:D7:5D:5F:2A:F4:3A:5F:69:D8:E2:2C:94:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e85c2da2-80ef-383e-9555-3114e5612b7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.54.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:d8:af:f3:79:07:23:d0:b6:70:77:1a:ad:bb:b6:5f:1f:a6:
         1e:75:2a:23:ff:84:83:94:7d:d4:43:7c:e5:59:8f:1f:f2:87:
         b1:a0:69:d4:fb:7c:8b:7c:0c:9b:7a:18:8f:29:69:2f:12:9d:
         28:f3:bd:c2:03:9f:d0:a0:bb:a9:27:09:c3:98:78:52:01:3c:
         27:24:e1:de:39:af:1d:43:e0:85:02:ea:1c:1f:31:26:c3:a8:
         4c:31:f4:bc:b0:70:23:ef:b1:32:55:84:19:d0:07:a0:de:18:
         72:8f:02:2c:51:34:bf:6b:3e:b5:51:90:7f:e0:93:5f:61:e5:
         2d:2a:41:b7:e3:6d:1b:08:51:97:12:01:b4:bd:ea:5e:56:51:
         21:d7:c5:6e:f8:36:fd:82:68:6d:e1:cd:a3:57:82:42:3a:f9:
         a5:c2:ef:fa:fd:7f:af:10:bc:82:c9:3a:2c:c9:f1:ca:2e:7d:
         89:f6:2d:2d:fb:9d:8a:e0:af:74:2b:66:0c:d7:d3:8d:9b:01:
         92:9e:9d:d2:82:90:48:26:a2:2f:e9:7c:18:f9:5d:b0:1d:2c:
         a3:a3:2a:22:a7:69:11:1c:22:37:80:a0:5f:7d:b7:e5:3f:95:
         ab:cb:fd:4e:c5:3a:99:f6:1c:30:c5:6c:39:57:3b:33:d6:05:
         a9:e6:fa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:09:24 2025 by rpki-client