Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f3a76b70-37bc-357a-a226-1f9fbceccece.roa
File:                     f3a76b70-37bc-357a-a226-1f9fbceccece.roa (raw, json)
Hash identifier:          U4bd2t0HYWO7ercH2wyiO/SYGvLiaADSsGrd8At/IWY=
Subject key identifier:   69:87:71:8D:1A:71:06:CB:F9:B9:D5:8D:1B:9B:64:4D:1E:28:A4:95
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FAC1E611F96B74C67AF4FB1A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f3a76b70-37bc-357a-a226-1f9fbceccece.roa
Signing time:             Sun 23 Oct 2022 12:00:00 +0000
ROA not before:           Sun 23 Oct 2022 12:00:00 +0000
ROA not after:            Mon 28 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        194.21.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ac:1e:61:1f:96:b7:4c:67:af:4f:b1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Oct 23 12:00:00 2022 GMT
            Not After : Nov 28 05:00:00 2022 GMT
        Subject: CN=28df1f56-c2b1-4a71-96e8-d23212098334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3d:73:7d:30:28:1f:b4:9d:d9:52:2b:b1:26:
                    9b:d8:ae:c0:e9:fa:aa:46:5b:cd:fb:df:21:e7:a2:
                    f2:53:b8:1a:73:44:c8:12:dd:ab:47:5c:99:c7:8b:
                    a6:cc:4d:98:0e:b5:97:32:da:90:ea:16:dd:88:75:
                    6a:c0:a0:2e:84:b5:86:34:21:71:43:20:60:c7:04:
                    99:e2:bd:c2:dc:f9:07:ce:81:f1:2d:fb:90:8a:d5:
                    f6:0a:c7:62:da:77:11:47:1b:34:c1:e0:12:4d:ab:
                    02:24:cb:83:a4:9a:fb:c2:47:93:59:23:7d:63:49:
                    83:9f:f3:56:e1:a7:45:b4:3b:1e:12:fc:f4:c6:9d:
                    ed:90:f1:4a:b3:7b:42:1d:6d:9f:08:33:8c:f6:78:
                    85:cd:b2:9e:83:12:84:b2:4f:16:d0:af:e8:af:c5:
                    e8:f9:35:a5:b8:d1:41:e7:00:df:09:b7:92:be:80:
                    a4:52:15:6b:67:ba:ee:32:b0:0c:a7:e1:1b:53:6a:
                    11:94:92:fd:5d:1a:53:88:08:26:87:ef:8b:39:93:
                    9b:03:23:d9:51:93:2f:9b:41:f7:0a:6f:97:3f:df:
                    32:c3:9a:76:81:cd:57:88:13:f8:dd:1f:1a:40:fa:
                    53:53:b4:cf:30:71:07:ce:de:8d:55:52:9f:bd:07:
                    e6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:87:71:8D:1A:71:06:CB:F9:B9:D5:8D:1B:9B:64:4D:1E:28:A4:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f3a76b70-37bc-357a-a226-1f9fbceccece.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.21.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ac:e4:94:68:c1:eb:49:4b:4c:e3:2c:e6:08:ba:9e:69:39:
         b3:b6:5b:ab:97:32:57:d5:2a:9b:43:ad:39:e6:58:30:f9:13:
         0c:0d:b3:40:ff:1a:6f:96:aa:f3:83:06:ef:c1:08:e1:d3:97:
         a3:71:f6:6c:6d:81:ef:78:7f:5e:d5:c9:b3:ac:14:54:4b:d4:
         26:55:ef:31:f6:2b:e9:a4:ed:a3:25:d1:f5:f2:d6:c2:78:2e:
         24:98:25:14:72:d5:6a:ec:d7:c9:1e:4a:97:aa:c8:56:b8:91:
         ab:c3:29:57:b2:05:21:94:5f:6d:58:c1:ef:88:42:d6:03:ed:
         3b:1e:1c:2f:07:06:16:44:5f:ea:52:28:2a:7e:ef:e0:f0:30:
         1a:52:14:3a:85:3e:2c:9e:81:7e:78:3b:99:86:e9:af:26:1c:
         03:47:6d:c7:f7:19:7d:23:2e:4a:25:84:77:a9:04:4c:e5:ca:
         fa:6f:c2:8e:6f:7e:25:27:c7:60:2d:a6:b3:6a:1e:1f:42:86:
         35:17:e5:d3:90:cb:fb:5c:e4:3e:f1:a0:ed:e5:57:2d:02:24:
         7b:1e:34:0a:9d:67:ce:b5:a8:15:f7:35:c3:81:60:75:d5:bc:
         26:58:d8:bc:53:31:60:3f:6f:6a:6b:5a:31:1d:71:30:d2:8c:
         ba:d7:34:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:43:19 2025 by rpki-client