Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ee36903f-c592-3422-aef5-be69c6efe7e6.roa
File:                     ee36903f-c592-3422-aef5-be69c6efe7e6.roa (raw, json)
Hash identifier:          qpQNE4iDtK0+HaXesJ4a78eyA1QcAo/k58FZV71bMIw=
Subject key identifier:   23:14:32:9F:53:C2:32:84:C0:4F:44:31:74:26:B2:40:EB:53:65:47
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C6F6939F1F2DB1FB655642C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ee36903f-c592-3422-aef5-be69c6efe7e6.roa
Signing time:             Fri 31 Dec 2021 05:00:00 +0000
ROA not before:           Fri 31 Dec 2021 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        108.156.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6f:69:39:f1:f2:db:1f:b6:55:64:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 31 05:00:00 2021 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=b70d1078-c522-4f4f-b06a-e987ad06c112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:87:31:ec:6c:f2:2d:e1:eb:f8:16:7a:8c:cd:
                    f8:1c:a6:cf:a2:14:4a:05:f1:f6:1a:d2:e9:bf:c7:
                    9a:28:68:47:17:13:91:ee:1d:54:d6:7a:39:0e:77:
                    ca:ea:39:45:bb:8a:2b:ec:5b:68:94:99:8a:e0:70:
                    43:f4:3b:58:ad:0e:9a:77:93:84:1c:c8:e5:a4:d2:
                    7e:2e:d1:bd:02:4a:ef:1f:86:d8:86:67:78:06:5c:
                    f7:69:5f:5f:1e:be:95:49:6d:2d:9d:14:bc:e5:28:
                    80:1e:e5:be:b1:5e:da:cf:21:a6:ac:9c:7b:8c:fd:
                    d2:9d:d2:04:6e:01:e0:31:ff:5d:ea:20:e2:79:d9:
                    a3:fe:be:67:9e:e0:f1:79:78:cd:82:3c:bd:8c:7c:
                    ac:af:45:5b:8f:f8:20:c8:7c:f7:e9:8e:f5:ad:84:
                    76:5e:9c:40:44:5a:43:0a:6b:dd:16:68:60:12:d4:
                    66:63:94:3c:02:42:57:e7:0b:15:05:f5:2d:d9:d3:
                    0d:62:1c:0e:0e:a8:c8:09:19:01:14:58:47:b1:c9:
                    4e:8e:91:fd:a8:5c:ef:88:a0:79:c1:e1:40:70:d5:
                    1c:fa:6a:76:1d:39:0d:ec:97:a0:e1:cd:2c:dd:0f:
                    e4:a5:e7:b1:1e:a9:1b:7c:dd:c4:16:5e:4d:a8:0c:
                    fb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:14:32:9F:53:C2:32:84:C0:4F:44:31:74:26:B2:40:EB:53:65:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ee36903f-c592-3422-aef5-be69c6efe7e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.156.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:27:f1:49:5c:c8:37:61:74:cb:1f:36:47:9a:25:d2:21:f7:
         4a:97:fe:20:f1:6c:a2:f2:c1:58:4c:db:bd:91:54:df:89:98:
         38:30:52:c6:e4:bd:aa:f0:2f:b2:1c:48:fb:b6:db:ae:ba:62:
         4b:3c:0b:2b:01:1b:90:52:2f:2a:0a:81:97:81:b3:c5:5a:0b:
         d9:28:b9:4d:4e:6b:16:f0:34:07:0d:48:93:9d:59:a4:7e:b4:
         d6:77:65:e2:d6:1f:1f:c7:52:c0:de:cf:52:5f:bd:bd:74:73:
         26:4a:f4:7e:69:c0:80:f5:b9:64:4e:fd:97:2d:ea:26:42:d6:
         28:c4:a8:1f:38:6d:81:5c:9a:d5:a1:1a:11:9a:1d:17:a7:50:
         d5:69:5a:1d:8f:e3:d3:bd:2d:db:bf:76:de:a1:6d:06:05:aa:
         4f:5b:a1:03:a9:2c:3a:63:c8:e8:54:34:e3:3a:a5:48:07:b6:
         76:7c:c7:ed:92:28:d9:5e:f8:da:d6:88:b5:fe:36:24:89:25:
         c3:d3:da:7b:ee:38:b2:3a:db:1d:9a:b8:73:d5:96:75:53:76:
         2a:ba:db:10:0b:28:e1:81:a3:e9:4e:fe:e8:f2:5d:25:33:c7:
         a7:67:b5:16:8d:93:d7:5f:51:dd:a1:26:b2:20:de:46:fb:d3:
         1f:85:52:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:15:11 2025 by rpki-client