Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e8b70891-c6ad-3b4b-9a76-df5783d2a088.roa
File:                     e8b70891-c6ad-3b4b-9a76-df5783d2a088.roa (raw, json)
Hash identifier:          C0uEUTUqfKIQlgH6PZUnqlBAZygQkhzY4bHx4G/Wi0I=
Subject key identifier:   1F:DC:88:49:B6:DC:B3:CB:03:44:6C:A8:CA:BA:4D:CC:6C:18:A7:D5
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584061C8F6AD23F98C981480AD00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e8b70891-c6ad-3b4b-9a76-df5783d2a088.roa
Signing time:             Tue 27 Dec 2022 12:00:00 +0000
ROA not before:           Tue 27 Dec 2022 12:00:00 +0000
ROA not after:            Wed 01 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        164.178.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:61:c8:f6:ad:23:f9:8c:98:14:80:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 27 12:00:00 2022 GMT
            Not After : Feb  1 05:00:00 2023 GMT
        Subject: CN=570a0fcb-cae4-4c22-a81d-428f79b28ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:90:01:47:e2:1c:49:4c:25:48:ec:29:c0:4a:
                    46:b7:74:9b:64:17:ba:f8:13:49:92:63:2d:82:a8:
                    5c:da:ea:f1:68:58:7a:af:8d:e0:f3:40:d5:c9:ad:
                    8b:61:e3:f7:ec:89:65:66:f7:7f:4f:1d:bc:ad:75:
                    ee:5f:f4:29:1c:b7:7e:36:3c:38:1b:36:7b:12:5d:
                    b2:48:11:d6:0b:1c:7e:dc:50:b0:fc:59:6f:18:26:
                    10:6d:fb:15:81:2c:62:ee:ac:c8:23:07:82:8c:d5:
                    e4:9f:2c:33:28:0b:e4:3d:00:f5:68:80:97:b2:a7:
                    cd:59:83:55:8f:a8:86:31:8e:5e:9b:65:00:c5:0b:
                    bc:64:74:97:69:b9:2d:17:f1:9b:59:de:7b:58:8c:
                    1b:3f:84:37:59:b9:a2:1f:df:fd:c4:aa:2c:41:a4:
                    de:cb:37:3d:5f:6a:1e:4e:a1:70:02:c9:33:5b:9d:
                    57:e4:7b:e6:bd:3b:ab:8c:07:ad:13:3f:c0:eb:a9:
                    44:f0:e9:f8:c3:3f:7b:6b:25:37:ad:7b:6e:21:74:
                    1d:fb:00:f2:71:07:4c:e9:5e:10:f3:c9:8d:d0:e3:
                    47:e8:f0:05:3c:03:1e:48:5a:fd:bb:f3:23:b2:f8:
                    60:4c:19:fa:8b:4c:22:2e:c8:cb:dc:66:ba:e8:a2:
                    c4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DC:88:49:B6:DC:B3:CB:03:44:6C:A8:CA:BA:4D:CC:6C:18:A7:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e8b70891-c6ad-3b4b-9a76-df5783d2a088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.178.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:63:92:d7:56:a9:a8:fa:2e:3d:9c:87:a1:e9:fc:a9:4d:ab:
         98:7e:58:09:48:c4:e1:d0:ea:30:a0:18:a3:0f:87:f1:af:da:
         60:4d:d5:34:71:e6:34:27:a9:57:c7:3c:12:b9:cc:06:c5:d7:
         ad:1a:5d:d1:25:7d:97:62:91:1c:8a:f0:9c:79:ba:7a:1b:3d:
         67:de:ba:07:04:ce:83:bf:54:f9:69:e2:93:15:58:6b:e6:7a:
         93:5b:f6:46:fa:92:0d:f4:4d:9f:ce:08:41:7e:b8:73:16:80:
         82:c4:6c:69:f8:8c:78:68:dd:69:24:ab:cd:0c:65:29:90:be:
         78:43:1d:ae:7c:c8:ef:3c:bf:46:b0:d9:08:12:9a:20:88:97:
         e9:82:82:af:f7:33:f5:1e:16:1e:85:f0:d2:dd:97:64:92:3c:
         de:58:3d:23:fa:25:8f:3c:cb:db:51:35:01:3a:78:08:a4:1a:
         ae:cd:37:02:6f:c0:d5:95:e5:ae:8a:a1:36:5a:ee:9d:a8:3e:
         1e:07:4a:c6:87:55:ef:5e:ea:72:6d:70:88:36:fd:d3:32:46:
         10:ee:7d:0c:d4:d2:b9:84:b1:22:c2:72:e6:9d:7d:fb:3c:fb:
         1a:cc:f8:ec:69:aa:d5:e5:dd:c4:50:6c:2d:46:c7:bb:b4:f3:
         27:32:59:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:12 2025 by rpki-client