Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f5ef8493-ed6c-3b73-baf8-7dd821c41ed2.roa
File:                     f5ef8493-ed6c-3b73-baf8-7dd821c41ed2.roa (raw, json)
Hash identifier:          nrStLqJRJb26IR71mHCjnZhf/JT0UqwcHZW3900IP14=
Subject key identifier:   C0:05:80:1E:71:03:AB:F4:F0:38:7F:57:3F:9A:48:46:43:BC:5E:28
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583C6FEEE90254B2537545946E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f5ef8493-ed6c-3b73-baf8-7dd821c41ed2.roa
Signing time:             Fri 31 Dec 2021 05:00:00 +0000
ROA not before:           Fri 31 Dec 2021 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        162.213.232.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6f:ee:e9:02:54:b2:53:75:45:94:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 31 05:00:00 2021 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=0247f372-98c6-41e8-8b1c-e2b334d48ccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:36:a3:96:f4:44:1d:de:02:ba:75:66:fd:c5:
                    ba:11:8d:f4:25:5d:da:87:ba:8b:9f:76:1e:a5:1c:
                    72:fd:1f:bc:c5:5c:ed:dc:d5:66:b7:d7:ca:1a:81:
                    fc:92:4e:6c:26:59:bc:20:84:9d:e1:dd:fa:25:de:
                    1b:17:06:4a:19:cc:d3:29:e1:bf:31:20:a0:70:88:
                    36:25:61:74:0a:33:3a:1a:07:b0:24:f9:a2:f5:2b:
                    72:91:9b:e5:08:5e:52:e9:d1:6a:3d:66:d3:1c:a4:
                    0e:50:3b:34:70:60:d6:d6:74:91:f4:3b:8e:38:27:
                    27:65:1c:ef:15:ad:6a:f4:bb:0d:96:0c:be:6a:42:
                    90:56:23:ba:af:61:a6:f5:ca:83:80:aa:38:c0:1d:
                    fe:59:31:0e:1f:49:35:7d:7b:b4:5c:56:22:3a:9b:
                    e7:4e:8f:22:4d:53:4a:fe:60:7d:02:fe:43:eb:49:
                    96:61:0d:46:fe:88:b4:c2:fa:31:ba:2e:25:38:07:
                    2a:10:bd:7e:57:a0:b7:34:20:53:b7:6c:f6:d5:0c:
                    1d:c4:cb:8a:ff:87:c7:9d:c1:57:d3:ad:ca:66:c1:
                    18:6e:3f:e7:66:f0:c0:94:61:8e:eb:32:3d:34:17:
                    be:ac:a2:5e:30:d9:57:94:8d:84:a2:e6:4b:85:c2:
                    e6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:05:80:1E:71:03:AB:F4:F0:38:7F:57:3F:9A:48:46:43:BC:5E:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f5ef8493-ed6c-3b73-baf8-7dd821c41ed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:68:fd:c6:af:46:0f:d5:de:26:fd:9c:75:93:a8:79:0a:4f:
         d9:05:88:33:a2:59:c0:f3:20:88:25:1f:2f:f6:3b:20:01:0f:
         43:b1:d5:0c:f1:6b:ac:0a:21:a1:9f:2b:86:02:29:29:7e:7d:
         a2:0c:23:fa:ac:97:9d:fe:3c:88:2a:98:e0:b1:d7:f7:c2:84:
         6b:7f:b7:3a:2f:ca:fb:34:c8:b2:a8:ac:0b:4c:3c:a0:86:42:
         ac:16:e4:2b:24:f3:84:4c:30:ed:1a:3c:47:14:91:06:55:d3:
         56:09:a5:12:36:ed:da:56:82:ff:9c:28:8d:ca:5e:48:57:75:
         05:fa:ca:3f:44:dc:8b:d8:20:c6:1f:56:8f:c5:c1:e4:fe:21:
         5f:a1:b9:16:19:e3:94:72:94:42:6e:da:ca:07:c5:a5:3c:a2:
         28:88:ff:b6:02:69:97:79:a0:08:52:01:9b:25:b1:8d:e2:33:
         66:c3:57:98:25:b3:fc:73:85:16:3d:58:cf:75:02:94:7e:b2:
         a3:38:87:47:92:2c:d7:7b:a8:02:a4:07:34:a9:ad:5e:e4:7a:
         4a:44:bc:05:af:8c:63:e8:e1:af:71:61:26:0a:e9:86:5d:4b:
         c1:ff:bd:85:48:9e:21:4d:be:0c:53:30:e0:b8:8a:05:c8:98:
         bf:e5:4d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:03 2025 by rpki-client