Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/edd37d9d-45c8-3756-8805-92c1dbedf77a.roa
File:                     edd37d9d-45c8-3756-8805-92c1dbedf77a.roa (raw, json)
Hash identifier:          vuoYX/NDCskNikQNaZGPlcHHTIwGZH0fms2kM0fhXDA=
Subject key identifier:   E2:E8:72:CE:CC:89:A5:0E:41:92:6C:A8:59:4A:90:99:E4:4A:86:7E
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EE34A0271A3D82B6EB609B580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/edd37d9d-45c8-3756-8805-92c1dbedf77a.roa
Signing time:             Fri 12 Aug 2022 14:42:08 +0000
ROA not before:           Fri 12 Aug 2022 14:42:08 +0000
ROA not after:            Sat 17 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        184.32.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e3:4a:02:71:a3:d8:2b:6e:b6:09:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 12 14:42:08 2022 GMT
            Not After : Sep 17 04:00:00 2022 GMT
        Subject: CN=793e7fc2-7e8c-4ebe-8273-42f6c6bdbcbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6a:d0:43:56:bc:6c:11:f3:49:8e:e8:b3:9d:
                    10:4b:27:03:fe:58:08:ec:c3:b5:64:3b:47:99:c3:
                    00:d5:37:6e:0d:d5:47:21:5e:5a:61:91:17:27:62:
                    25:7a:b5:b4:0c:a6:1a:ad:6e:29:b9:ea:a3:1b:fc:
                    b3:a6:ba:03:fb:8c:2c:8a:9d:5b:25:f1:96:90:eb:
                    05:d7:59:54:4e:b5:1f:5a:49:fe:7b:4b:68:e7:b8:
                    aa:ef:a8:b5:5c:c6:53:c5:2c:2d:cb:41:64:76:f5:
                    44:a0:66:40:b3:82:39:c9:4b:cf:e0:ca:49:84:f8:
                    72:3c:73:c8:1e:a1:31:69:3e:dc:5c:e5:5a:33:51:
                    28:93:f3:47:10:92:87:36:89:bc:37:ca:61:20:f5:
                    4b:53:84:30:21:b3:6a:da:d6:42:eb:95:8e:af:60:
                    51:60:0c:f7:3a:7d:0f:58:56:5a:7a:00:f9:46:29:
                    59:f1:8a:d4:28:c0:bc:a1:a0:ef:3d:3a:5d:23:75:
                    87:a2:63:e0:27:31:c4:ea:24:0d:6b:14:2d:3f:5c:
                    e9:64:81:4d:1f:fc:e9:54:92:dd:94:ab:3d:11:08:
                    0a:80:4c:de:a1:6a:61:5d:4b:9a:b9:1a:a0:19:7f:
                    87:61:98:8c:bc:9a:f4:cc:49:f8:05:0b:6a:80:37:
                    ad:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E8:72:CE:CC:89:A5:0E:41:92:6C:A8:59:4A:90:99:E4:4A:86:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/edd37d9d-45c8-3756-8805-92c1dbedf77a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.32.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:34:7c:0c:30:42:4f:fe:a9:68:09:8a:9c:c0:54:85:9b:55:
         94:fe:19:e9:8e:19:13:b4:d2:52:90:5b:cb:81:50:0d:66:1f:
         a2:fd:99:9c:61:6f:37:6a:28:33:47:8c:a3:64:8c:f5:e5:f0:
         fa:12:27:5f:a3:6c:93:fa:9f:92:72:a2:29:64:40:16:e2:d0:
         de:c7:53:ee:fd:ed:83:c1:12:e0:0a:db:d4:02:f2:2c:7c:bc:
         f2:ef:af:c8:30:ff:c1:66:33:2c:4a:c5:ba:6d:c6:75:2d:28:
         27:42:07:19:db:e2:37:88:6d:7b:15:1d:54:d2:11:20:fe:94:
         ca:fe:c1:0a:a0:e2:ab:2e:b7:0a:21:4a:01:f6:61:60:8b:72:
         68:79:25:67:2f:44:97:c2:c2:0f:d2:5c:02:cc:df:20:2b:d0:
         6d:f1:bb:2e:f5:77:9f:74:57:96:e4:8a:d1:35:4e:20:74:63:
         51:1f:66:c1:a8:22:cd:7b:39:0f:30:3b:18:c9:d4:9e:a8:05:
         a2:4d:2f:54:ab:39:d3:b7:a4:82:30:c9:09:8a:19:a6:9e:8a:
         c3:54:4e:10:0d:a6:21:29:e5:c5:3e:63:b9:85:a6:69:e4:ec:
         6d:1b:71:47:83:55:3d:a3:d6:23:9d:e3:89:5d:ac:ce:e7:a6:
         e8:5c:a0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:33 2025 by rpki-client