Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/eacda525-c3ae-35e4-8ccc-0288c71a966e.roa
File:                     eacda525-c3ae-35e4-8ccc-0288c71a966e.roa (raw, json)
Hash identifier:          iWn5+H2JP5BbDceNBN5m7pBXkonW8noDd9yAcHiinAk=
Subject key identifier:   70:FB:FE:32:56:19:20:9C:1F:E7:1C:12:FF:80:0F:30:4A:99:28:31
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D0C5BB123275C49DD366ADF80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/eacda525-c3ae-35e4-8ccc-0288c71a966e.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        157.175.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0c:5b:b1:23:27:5c:49:dd:36:6a:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=62900b61-5c43-49c9-be9a-1af25ae73187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:4c:45:c0:51:1e:50:59:db:88:64:78:62:
                    f4:94:28:ee:91:f9:83:98:49:27:19:51:cc:65:3c:
                    65:ee:9e:86:d2:2c:3d:58:71:bb:43:01:2d:4c:d2:
                    83:c0:79:ea:14:e1:84:74:9a:6d:ae:0b:7c:a3:55:
                    6e:d6:d9:e2:ba:c2:9d:e1:ab:60:34:63:10:2c:8e:
                    f7:a1:ce:5f:87:37:c7:f1:06:f1:7c:58:5c:aa:12:
                    79:8a:8f:02:64:42:c5:f8:70:20:24:c3:79:0e:51:
                    16:c3:0c:8d:bc:09:0e:77:34:0e:cf:ab:cf:d2:70:
                    57:f8:eb:fb:63:1c:4e:83:49:29:15:ce:7b:67:1d:
                    06:0d:4a:46:25:68:06:f6:e8:2f:20:61:e0:05:9c:
                    fc:7f:a8:b8:75:23:2c:59:38:b9:f9:5d:69:14:06:
                    62:00:eb:9b:07:4e:78:6f:bc:a7:40:26:01:85:b0:
                    f0:95:50:97:84:92:38:77:dc:46:11:8b:19:5b:06:
                    58:4f:42:05:3a:dd:e6:4e:74:5e:37:87:76:fc:2b:
                    15:94:9c:1b:9b:a3:72:85:a6:42:c1:70:a0:c8:8e:
                    99:78:1e:69:a1:41:cd:89:e5:62:cc:73:8a:b4:bc:
                    84:04:8d:51:4a:57:fc:9c:ac:1b:62:2d:44:5b:36:
                    be:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FB:FE:32:56:19:20:9C:1F:E7:1C:12:FF:80:0F:30:4A:99:28:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/eacda525-c3ae-35e4-8ccc-0288c71a966e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.175.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:1e:e3:14:f3:28:8d:b4:21:c0:eb:59:81:a2:49:e5:06:ea:
         ea:92:16:ec:12:27:2b:5d:e9:e1:d0:87:d5:a2:f6:c1:f6:73:
         f5:60:46:4c:98:92:f6:16:5c:25:71:fa:62:90:f8:30:3b:a3:
         4d:1b:d5:3e:ee:26:cf:b3:5f:ee:ba:6c:9c:09:49:f6:d2:cf:
         96:1b:47:a2:a4:85:b0:74:d0:22:70:42:c1:f7:b1:29:d3:53:
         9f:c8:c2:7b:3e:5d:2c:b4:f4:84:53:bf:47:61:5d:0e:23:90:
         41:c9:a6:88:00:4b:b9:1a:20:da:96:8f:b3:87:cc:4c:d8:c4:
         53:12:8b:e3:ec:bf:30:df:e2:87:14:ba:7f:84:84:a5:f6:38:
         12:16:8a:75:bb:31:ba:5c:d8:74:68:5e:d7:01:07:da:67:9d:
         7a:d7:02:7d:be:94:93:2f:35:12:69:fc:b4:59:ca:32:f8:20:
         89:b7:e4:1f:72:68:e8:7e:46:3c:6f:75:18:c8:e5:1c:95:19:
         52:24:ce:4a:86:2f:a4:86:89:9e:0a:37:90:08:e5:eb:f8:7a:
         13:f7:b3:4f:a6:0e:13:e6:3d:bf:06:4e:89:01:9b:08:79:a4:
         0f:43:d0:13:1f:e5:d8:f0:2a:f5:0f:44:cf:4a:d7:76:b3:5a:
         0e:8c:e3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:45 2025 by rpki-client