Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/eed085d4-c6b5-3de3-acd5-86f642387f59.roa
File:                     eed085d4-c6b5-3de3-acd5-86f642387f59.roa (raw, json)
Hash identifier:          KwRo1sl0XgCdadCnQox67ekS9daSzBIck2E0jpevz+I=
Subject key identifier:   52:B8:EC:E8:36:CE:74:F5:F5:AA:E9:D3:1E:A4:0C:22:75:72:EF:96
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C6F9DCB3ACE199F696814A440
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/eed085d4-c6b5-3de3-acd5-86f642387f59.roa
Signing time:             Fri 31 Dec 2021 05:00:00 +0000
ROA not before:           Fri 31 Dec 2021 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        130.176.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6f:9d:cb:3a:ce:19:9f:69:68:14:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 31 05:00:00 2021 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=a5d6beec-db04-4a5e-a837-cd0ac549d50a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ba:1e:ec:42:78:6a:8a:7d:32:bd:6a:bb:b5:
                    c6:62:13:4c:2f:a8:1c:75:7f:26:e1:8c:a0:40:fb:
                    72:e8:bb:a5:5a:fe:7c:cc:80:fe:88:e3:c7:13:8f:
                    8a:c6:d7:49:96:93:a3:36:16:14:f2:e5:35:5c:99:
                    41:1f:26:af:1e:7d:09:93:8d:2f:46:ce:89:29:f7:
                    46:fc:b9:97:52:09:17:b3:b9:18:0c:a9:65:5f:4b:
                    71:68:a2:5c:48:9d:df:34:a1:53:58:30:da:49:15:
                    29:4f:cd:74:8b:97:29:68:72:f1:fb:7f:f6:a4:35:
                    ea:df:95:47:b8:44:82:ee:50:91:e1:79:47:c5:1f:
                    ed:c6:70:73:a4:a5:58:05:b6:01:61:2f:6f:ae:f9:
                    89:e7:16:90:1e:16:ec:e2:e1:04:97:00:c0:21:15:
                    5a:ea:d0:a2:fc:d5:87:9a:c7:89:70:7e:d0:37:59:
                    75:a8:b6:95:87:e8:f0:b5:3b:bd:47:68:f2:18:ea:
                    d0:77:b9:ea:0b:9a:31:da:81:6c:9d:e8:15:1a:6a:
                    dd:3c:f5:bf:26:e4:3d:1b:e8:df:de:e0:b6:a5:7a:
                    1a:25:66:d0:fe:7c:fc:a6:ae:dc:a8:58:c4:bb:09:
                    26:e7:e9:63:9f:93:7a:d8:e0:39:7a:1e:a3:14:2f:
                    28:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B8:EC:E8:36:CE:74:F5:F5:AA:E9:D3:1E:A4:0C:22:75:72:EF:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/eed085d4-c6b5-3de3-acd5-86f642387f59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:62:e9:27:7a:f2:09:75:53:a5:46:0f:97:f0:52:bb:7b:75:
         1b:8b:dc:d9:e0:28:2f:49:2c:0f:a3:00:a8:c5:8f:2a:90:c1:
         d7:18:11:98:ae:6e:57:c8:f5:8c:10:4e:10:4e:4c:93:38:b5:
         d8:47:de:eb:58:8b:b7:2b:65:73:86:80:f7:42:f4:94:56:75:
         a0:d3:e8:c0:98:9d:33:18:77:76:f3:2a:c4:01:ac:62:4e:24:
         e1:ad:82:fe:72:45:e4:4f:1b:80:cf:15:64:60:3f:9a:d5:ea:
         1e:5d:b7:ec:ed:9f:f5:72:a9:20:1c:c1:a8:0c:3b:c2:09:51:
         73:1c:29:36:35:13:49:e0:50:2c:17:05:da:24:08:38:d3:9d:
         49:0a:2b:76:bf:8e:ca:eb:8d:32:1f:dc:a3:00:0e:dd:72:94:
         76:10:0c:80:74:6c:75:a9:8f:0b:de:29:bf:1e:4a:21:02:32:
         3a:fa:61:83:58:f1:4f:13:93:d6:58:cf:c4:06:10:ba:cc:a8:
         db:8a:56:19:53:f6:7c:2e:34:2a:96:75:0b:0f:c0:a1:0b:4e:
         d7:fc:6b:b6:2d:4e:06:4c:bc:fa:ad:6b:f4:73:04:b6:b0:83:
         67:f6:f1:b8:be:45:52:6f:e7:38:01:89:b0:bd:5e:61:fb:e2:
         55:f5:02:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:17 2025 by rpki-client