Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef6aeab0-f19a-3fc7-bd19-506d6365a3c8.roa
File:                     ef6aeab0-f19a-3fc7-bd19-506d6365a3c8.roa (raw, json)
Hash identifier:          fDANSe662o5mZ3n2ZTRxRanZmH5D0tsdEy22V5ieyjw=
Subject key identifier:   73:39:28:07:6E:1F:D6:3D:B8:79:88:7A:57:CE:A9:99:8E:FD:3E:C9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FFA3AAA0F395B584F10CC2CE8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef6aeab0-f19a-3fc7-bd19-506d6365a3c8.roa
Signing time:             Sun 20 Nov 2022 12:00:00 +0000
ROA not before:           Sun 20 Nov 2022 12:00:00 +0000
ROA not after:            Mon 26 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        194.21.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:fa:3a:aa:0f:39:5b:58:4f:10:cc:2c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 20 12:00:00 2022 GMT
            Not After : Dec 26 05:00:00 2022 GMT
        Subject: CN=566f8151-dc86-4842-a23f-e66a573801f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:85:75:2d:8f:14:e2:f4:e3:90:eb:16:0c:3f:
                    54:31:e9:6a:b4:99:b6:b7:5f:86:17:c9:87:ba:b2:
                    13:81:d7:4e:5b:ff:66:58:85:d5:f3:3e:5b:3d:40:
                    4a:4a:86:42:37:7e:52:04:cd:17:49:9a:10:df:c3:
                    a2:2a:4b:c0:5f:45:0f:1e:7f:66:9f:a4:e2:66:a9:
                    c2:48:28:aa:0a:90:07:38:62:d0:07:bb:b5:23:8e:
                    90:a1:83:52:ab:7f:15:93:dc:44:c8:7f:88:c5:a3:
                    43:05:ba:97:6f:55:bf:e4:0d:ae:2d:47:28:a5:6c:
                    e3:9a:a0:f3:df:b5:df:60:11:2c:0f:6d:43:09:1f:
                    34:66:81:9c:ba:0c:94:df:4a:9d:40:1c:72:e7:dd:
                    36:f6:60:c4:99:fa:18:75:22:f5:2d:95:25:09:5f:
                    5b:2c:51:22:2f:46:b6:6a:36:8b:35:b0:31:19:af:
                    75:19:2e:3d:ce:de:2a:fe:d0:ef:11:45:17:bf:ce:
                    c8:7e:c5:93:e5:08:e5:ec:fe:ba:73:64:00:45:33:
                    e0:36:1c:f0:d6:05:c2:30:9a:75:f8:3a:b1:ca:4b:
                    a7:8a:33:13:d1:70:37:3b:b7:65:b4:4d:45:46:f9:
                    f7:97:a3:42:00:37:05:3c:f6:f2:13:76:af:ee:4c:
                    51:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:39:28:07:6E:1F:D6:3D:B8:79:88:7A:57:CE:A9:99:8E:FD:3E:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef6aeab0-f19a-3fc7-bd19-506d6365a3c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.21.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:0b:fb:75:b2:2b:00:5e:c1:df:a0:29:72:45:96:3c:f9:8f:
         8e:df:00:81:f8:3b:8e:16:5f:8b:44:2c:06:15:b9:a6:93:83:
         27:df:47:8d:55:db:b8:ba:2c:9c:c4:fd:5b:04:c6:0e:39:4c:
         60:a5:88:2b:28:6f:19:22:6c:1a:f1:ca:6d:ee:7a:3d:9b:d1:
         5f:5a:87:af:29:60:78:aa:3c:d0:88:91:39:39:0c:8d:69:59:
         57:65:20:cd:29:ef:50:7c:2d:ef:4a:27:01:83:57:e2:2f:1e:
         35:27:71:a6:f0:54:4e:76:42:8c:9a:23:4b:59:90:a5:84:f7:
         2b:69:17:61:47:b1:52:ea:ad:ea:60:8a:2d:04:dd:d2:8e:7a:
         8b:06:81:c3:50:7f:31:81:e2:ad:93:9b:88:e8:ee:e7:b2:61:
         f8:9c:72:a5:3d:76:09:06:0e:50:5d:19:33:23:7b:82:84:f9:
         b3:8e:fc:d7:84:e1:6d:44:9e:6d:ec:38:69:11:27:77:44:df:
         b7:41:6e:63:50:5c:d4:03:9e:8d:9e:68:70:b5:d8:ab:e5:f6:
         fc:22:e8:46:35:64:bc:f3:51:90:2c:e4:6b:fd:06:c1:10:db:
         9f:f0:a7:07:2d:63:55:f2:55:58:0d:a9:19:a0:c9:f2:27:43:
         4d:55:48:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:59:34 2025 by rpki-client