Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2694fba-ebbd-3ce2-8c4d-8b2928d4f897.roa
File:                     f2694fba-ebbd-3ce2-8c4d-8b2928d4f897.roa (raw, json)
Hash identifier:          B7wmKM5QSYGtl+z7rYf0lxCEn+ODgZ1qJqhkiDzTK2w=
Subject key identifier:   42:5A:88:1E:BA:93:94:99:E9:E8:21:67:C0:91:99:F4:F7:43:21:39
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F0BA6F20456EE56F8A59F9B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2694fba-ebbd-3ce2-8c4d-8b2928d4f897.roa
Signing time:             Fri 26 Aug 2022 17:36:07 +0000
ROA not before:           Fri 26 Aug 2022 17:36:07 +0000
ROA not after:            Sat 01 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        44.192.0.0/10 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:0b:a6:f2:04:56:ee:56:f8:a5:9f:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 26 17:36:07 2022 GMT
            Not After : Oct  1 04:00:00 2022 GMT
        Subject: CN=567a7a94-dcb2-4f99-9637-d1139df215ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1f:aa:ef:49:74:4a:03:95:c9:94:c6:85:fe:
                    de:63:92:cd:25:29:39:e1:1e:cb:3a:d3:a4:5a:a0:
                    af:aa:a7:fe:71:d8:af:f7:cf:7e:f7:28:b4:e4:9c:
                    11:66:6a:14:f9:0d:11:9f:d7:bc:a2:a3:41:b2:19:
                    09:84:8e:21:11:b2:de:1d:fa:65:23:b3:0c:3d:00:
                    48:9a:ce:7d:19:7e:89:d5:31:e8:9d:d8:3e:f0:c2:
                    76:ff:78:01:21:4b:cd:6a:f9:d7:76:fd:3e:98:41:
                    5f:59:5b:b0:2b:ce:25:8e:de:df:8d:36:67:0e:95:
                    ad:a5:21:a8:1a:4a:25:44:04:4a:21:c1:42:17:0b:
                    54:81:29:4e:5d:b8:67:fe:dd:27:3e:6a:47:17:2c:
                    17:bc:a3:a8:7d:22:d7:94:09:54:b8:f7:94:74:8a:
                    0f:49:b1:df:05:b9:f2:40:08:3a:6f:d4:56:2e:27:
                    b3:fe:ff:f8:44:9c:a3:40:59:0b:13:72:77:64:38:
                    57:a2:ce:20:d4:77:ec:44:12:f3:11:1b:86:c2:23:
                    20:92:c7:a2:03:26:82:7c:3b:7a:fe:e8:08:9c:03:
                    56:d4:2d:22:c9:c3:49:10:24:38:28:32:24:3c:b4:
                    3a:8f:3b:27:47:a4:43:03:c5:81:d7:db:42:72:d9:
                    ba:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:5A:88:1E:BA:93:94:99:E9:E8:21:67:C0:91:99:F4:F7:43:21:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2694fba-ebbd-3ce2-8c4d-8b2928d4f897.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  44.192.0.0/10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:82:f1:88:68:ac:0f:42:a6:59:18:d1:a3:18:7e:82:36:dd:
         35:6d:64:55:b8:92:b8:c4:66:39:42:0c:37:4a:5c:a8:a7:38:
         2d:d7:7d:60:0e:17:5b:24:10:18:e2:06:60:6d:a8:68:fa:b7:
         52:3c:97:25:14:d5:5d:37:6a:0b:b8:cc:0b:5c:2d:a3:90:40:
         98:4f:1b:8c:17:a6:99:d2:e2:ee:71:72:3e:2d:53:7e:0d:7d:
         26:a2:52:eb:b2:98:62:46:ac:d6:8c:3c:99:2b:11:39:a5:2b:
         64:33:c3:a7:f2:6c:95:6b:60:1d:d1:5e:20:fd:1c:53:71:65:
         10:d6:f9:43:29:8b:d4:e4:66:70:02:eb:6c:89:c7:11:bd:29:
         c0:87:ef:d0:bb:b5:54:5e:1d:12:1c:7a:03:c3:65:34:cf:5a:
         67:4f:36:81:29:5e:6e:51:25:d1:41:62:cc:64:79:80:bc:01:
         40:56:f9:5e:8b:8f:f2:40:b0:59:f5:a5:d5:c8:2c:69:d0:24:
         e3:77:92:c0:47:84:db:60:04:97:ab:69:af:20:50:b9:f8:40:
         a7:61:f5:cf:10:8f:d4:93:53:2d:28:e4:c0:67:68:a0:42:da:
         6c:04:cb:e4:33:e9:e0:d2:d4:9f:b5:df:c8:e9:ed:5d:01:dd:
         d8:7f:3d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:14 2025 by rpki-client