Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f12700f9-139b-3dad-86bd-576b7d2a89a1.roa
File:                     f12700f9-139b-3dad-86bd-576b7d2a89a1.roa (raw, json)
Hash identifier:          j8SF4DWfFFWn9FFaCp6F0avvqb3buBQH10FjWj3J7+c=
Subject key identifier:   DD:17:A0:94:68:61:BE:8F:6E:16:BA:E9:80:5D:65:91:47:B7:02:11
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E6250E3E6AE2194E45BB6DD80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f12700f9-139b-3dad-86bd-576b7d2a89a1.roa
Signing time:             Mon 27 Jun 2022 12:00:00 +0000
ROA not before:           Mon 27 Jun 2022 12:00:00 +0000
ROA not after:            Tue 02 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        143.227.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:62:50:e3:e6:ae:21:94:e4:5b:b6:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun 27 12:00:00 2022 GMT
            Not After : Aug  2 04:00:00 2022 GMT
        Subject: CN=6cb74722-17ef-40b7-9b8f-95a5d1e35755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5c:0e:77:e2:b9:25:c9:fb:32:b7:24:48:19:
                    62:ed:7b:55:ec:7d:4b:87:8f:98:81:b4:38:28:c9:
                    f0:4b:5c:d2:6a:f6:e0:0d:0c:df:d7:56:67:ad:76:
                    ee:91:56:85:3d:98:59:29:11:76:f1:38:36:48:85:
                    1a:66:b8:15:f6:f5:48:a5:84:d0:2e:f9:dd:9e:d0:
                    c4:a4:75:e6:fe:e9:41:41:bc:74:eb:b2:72:5c:0c:
                    ab:99:c7:5c:9e:6e:21:31:0c:dc:40:fc:92:83:da:
                    82:11:ab:db:52:26:00:9f:9f:36:43:6a:b3:bf:7b:
                    f9:83:59:7c:25:d9:12:59:f1:04:f3:eb:03:39:12:
                    9c:68:15:e3:dd:ce:e8:6c:4d:46:4e:fc:cf:07:18:
                    e2:93:bd:1b:bf:de:29:6f:2b:10:4f:92:f5:4f:66:
                    f7:20:fa:2e:37:2b:ee:6a:51:50:5d:d0:44:fd:b5:
                    31:2e:57:6b:4e:b0:87:28:c3:30:46:31:15:2b:bd:
                    2e:3b:de:73:af:43:76:78:7d:01:47:ff:dd:00:f7:
                    1f:ee:e9:3c:30:69:ec:8b:6c:06:91:1e:4b:44:d5:
                    5f:05:b5:13:b0:9f:3d:56:35:df:28:44:33:3d:5a:
                    49:cf:0d:30:71:a1:67:97:05:ec:b7:c2:c6:d5:3f:
                    2e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:17:A0:94:68:61:BE:8F:6E:16:BA:E9:80:5D:65:91:47:B7:02:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f12700f9-139b-3dad-86bd-576b7d2a89a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.227.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:2e:f8:d1:f5:dd:bb:69:da:fc:15:aa:82:a3:f2:a2:61:fe:
         d9:1d:f0:9b:49:a7:ac:04:ec:68:2d:91:6e:9f:d5:1d:e8:df:
         3f:78:8f:65:1e:03:c2:a8:0a:ca:2b:7f:80:e2:98:7d:ed:15:
         dc:09:a4:3c:2f:af:3a:2c:5c:2c:72:93:c8:57:65:02:23:4c:
         cb:e7:7b:bd:fc:10:dd:79:36:fd:a0:b2:a4:f5:89:82:03:ad:
         07:05:4e:3d:e5:f0:6c:f7:53:61:2e:9f:7f:5b:7b:ef:fc:4e:
         58:a2:48:68:78:70:e7:6c:9e:e5:c1:96:c4:3a:c4:30:4b:58:
         fe:eb:68:1a:26:fd:c8:59:30:78:12:7e:9b:bf:12:bc:df:93:
         23:b4:8d:cf:68:c4:fa:b0:93:f7:57:e3:18:48:9c:fd:55:44:
         ef:84:09:61:8d:ef:a7:c4:7b:5e:72:eb:4e:90:99:6c:92:fb:
         12:1a:f4:84:1c:f4:7d:af:e4:bc:3a:d3:7f:c2:57:33:3d:52:
         ef:6d:29:7b:ce:fb:95:6b:db:91:5e:1a:cb:87:86:53:a5:1d:
         b3:f7:94:8f:77:72:a8:40:70:85:1c:c7:8d:93:d7:e4:91:da:
         66:1a:ed:6a:c1:2f:53:af:11:fe:e9:d8:9d:27:2d:24:0c:61:
         52:75:c0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:07:17 2025 by rpki-client