Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f00a453b-522c-37c1-b0cd-8a7674231135.roa
File:                     f00a453b-522c-37c1-b0cd-8a7674231135.roa (raw, json)
Hash identifier:          UAj04Dcr9M2SDNY7uxVqSkDQBLGHkkm4qFewr2KKIBY=
Subject key identifier:   25:CD:FC:5F:56:23:48:C4:84:41:26:BF:6E:66:B6:B8:61:0C:B0:09
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F8508CC786448655C3756F640
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f00a453b-522c-37c1-b0cd-8a7674231135.roa
Signing time:             Sun 09 Oct 2022 12:00:00 +0000
ROA not before:           Sun 09 Oct 2022 12:00:00 +0000
ROA not after:            Mon 14 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        143.135.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:85:08:cc:78:64:48:65:5c:37:56:f6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct  9 12:00:00 2022 GMT
            Not After : Nov 14 05:00:00 2022 GMT
        Subject: CN=ac334e1a-f9b7-4036-b694-83ecbbb8aa2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:33:b9:14:62:bf:c4:c7:29:d9:23:75:24:20:
                    7e:ea:a9:18:95:45:0d:c4:f1:fb:38:6a:61:bd:b9:
                    42:a6:db:77:bc:8e:45:72:d7:5e:0d:b2:00:63:b3:
                    12:42:ff:18:c6:bc:dc:c7:fe:b3:23:b5:c5:57:0e:
                    a6:b6:8e:ee:ef:4b:f4:7a:02:95:30:66:b5:db:82:
                    67:e3:bc:6d:cd:b7:97:36:5b:8d:7f:88:e9:da:20:
                    90:b3:ba:93:0f:82:e8:27:00:83:bc:e3:0c:41:07:
                    f3:16:82:0a:af:2a:e3:17:cc:0c:89:89:5d:7d:8a:
                    a7:df:fa:dd:46:d0:79:e7:32:c2:72:b6:37:0a:6f:
                    2b:75:55:a2:7b:54:61:33:cd:66:06:c0:9a:40:eb:
                    40:5a:23:55:10:86:ce:1c:df:79:10:c7:49:05:0c:
                    02:cc:74:77:01:b6:b4:00:9b:62:87:13:58:78:9f:
                    5c:f2:b2:5e:ef:72:cc:9f:8a:48:5c:94:46:64:a0:
                    96:00:de:aa:57:18:7b:c2:29:40:32:40:b9:e2:4f:
                    f3:e5:ee:3a:20:54:a9:32:a3:30:56:23:84:85:0a:
                    97:8e:70:c0:c9:3a:8e:61:e1:e4:cd:aa:35:24:84:
                    c7:af:cb:d6:9c:1b:8e:7e:3c:99:f8:93:d1:ae:16:
                    52:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CD:FC:5F:56:23:48:C4:84:41:26:BF:6E:66:B6:B8:61:0C:B0:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f00a453b-522c-37c1-b0cd-8a7674231135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.135.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:67:bf:14:e3:05:fb:ab:18:c1:e8:cb:c7:e1:6c:ff:89:47:
         01:b6:bb:d4:9d:8a:20:2a:83:e8:78:2f:85:16:e2:98:2c:d3:
         d4:a3:a7:4e:dd:b4:95:66:18:ad:77:37:0e:f8:f9:2f:5a:d3:
         4f:63:33:cb:71:87:b0:97:5d:4b:54:9b:b5:38:ed:35:7e:79:
         64:99:20:bf:de:72:0d:de:c2:fb:fd:3b:9a:f9:3d:7a:54:dc:
         9b:eb:f1:38:69:40:08:29:bf:25:04:a8:81:57:17:29:28:d8:
         7a:8c:f9:1e:fb:77:99:62:ca:ce:1b:3e:51:27:9b:a6:5e:0e:
         dd:53:e3:55:7e:22:c5:b5:37:3d:fe:0c:15:8d:48:b1:0d:41:
         02:7c:00:3a:a3:b2:c7:f2:49:d7:5e:60:6c:63:c9:a8:54:a0:
         87:b4:95:4e:d2:6f:5c:7d:9a:a3:d5:6d:87:14:c3:ea:fa:6a:
         b7:71:12:16:cd:a2:ae:ea:60:34:83:1f:79:d1:da:ca:92:b6:
         17:dc:b9:26:01:10:77:41:9a:8b:93:54:c0:e5:e4:81:c7:fb:
         3c:71:b1:99:e4:c1:d9:45:03:09:05:18:c1:a0:0f:af:8c:50:
         48:7e:34:0b:1d:78:6e:45:d3:54:40:20:db:27:1d:20:7b:71:
         c7:c8:c7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:28 2025 by rpki-client