Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f682dce6-7626-39a3-9dc3-f6a662793091.roa
File:                     f682dce6-7626-39a3-9dc3-f6a662793091.roa (raw, json)
Hash identifier:          496pGW5q1+sE9TnXZUBKL6ZyJgW/7z9MsaZJJ5dRO8o=
Subject key identifier:   AF:4C:F4:D2:40:E2:4A:13:F6:3B:65:96:A4:C0:A5:29:31:3C:B6:75
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583EC62DB025D6EA05EAFD06F100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f682dce6-7626-39a3-9dc3-f6a662793091.roa
Signing time:             Mon 01 Aug 2022 20:39:08 +0000
ROA not before:           Mon 01 Aug 2022 20:39:08 +0000
ROA not after:            Tue 06 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        164.168.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:c6:2d:b0:25:d6:ea:05:ea:fd:06:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug  1 20:39:08 2022 GMT
            Not After : Sep  6 04:00:00 2022 GMT
        Subject: CN=f6bbdac4-d1d6-403e-8ea3-35d7f4ce5f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:66:e9:1a:69:7b:26:c3:0c:4a:c7:d8:ce:07:
                    cb:f2:fe:7c:58:d7:c6:57:be:cd:c0:42:f3:b3:6e:
                    31:c5:4b:63:da:a7:cf:89:98:b3:d8:ce:75:d7:ab:
                    7e:a1:5d:dc:cc:24:7c:06:b1:f5:65:b6:b9:6d:a5:
                    59:d9:fd:15:81:ef:f0:24:f4:ca:cf:a8:fa:a6:2e:
                    83:ec:6c:56:be:63:65:04:3d:52:2b:95:48:32:30:
                    d3:08:39:b7:f9:b7:16:af:d4:da:40:9d:79:c6:ad:
                    31:04:ec:54:49:f3:3b:4a:d1:e3:19:20:0f:1f:7a:
                    10:8d:8a:27:d7:c0:66:85:36:11:ea:ef:c0:54:47:
                    4a:4a:c5:5c:4d:1d:aa:68:b1:cd:c4:cd:bc:51:8e:
                    f2:b4:0f:73:6b:0d:4e:7e:1d:c2:42:28:5d:74:80:
                    65:0c:49:c9:8f:e0:4e:fe:e8:8e:82:bb:fb:88:f6:
                    5c:02:d9:0a:bd:26:16:7d:e6:bb:86:b3:e2:73:0a:
                    7f:61:53:20:5a:a6:66:b3:7a:d2:cf:72:04:44:b3:
                    a1:d9:24:86:2a:47:b4:2c:c7:4d:d9:0e:c0:eb:21:
                    e2:e8:e3:49:e3:65:fe:98:1f:32:c3:17:36:6c:6a:
                    1d:ec:06:74:46:a3:10:3d:96:57:9f:95:80:d8:8c:
                    7e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4C:F4:D2:40:E2:4A:13:F6:3B:65:96:A4:C0:A5:29:31:3C:B6:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f682dce6-7626-39a3-9dc3-f6a662793091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.168.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ac:c6:78:55:55:c6:ae:4e:00:a4:03:e3:5f:c6:ae:11:da:
         3a:53:29:8e:2f:90:72:fc:2d:74:f8:52:c7:8a:a5:e8:6b:eb:
         ac:09:0c:13:50:2c:31:f3:26:6a:69:5e:6f:ba:83:3f:c8:ac:
         ec:41:d8:e7:7c:6a:11:65:13:8f:c7:d3:c7:d3:55:55:91:2b:
         3e:2c:0f:ed:db:33:16:da:d8:bf:f2:d0:93:6b:d3:3a:02:4d:
         16:59:65:cb:3f:48:81:e4:b9:eb:da:87:ef:2d:f2:38:a4:73:
         15:9a:5b:cb:54:fa:9b:e4:62:e0:60:ed:6f:2d:65:5f:ec:f4:
         fc:58:57:51:bc:70:e6:b8:89:4f:c9:79:97:fd:35:39:ff:0e:
         2c:a6:7a:12:f3:53:2c:6c:a9:3e:d1:4b:5c:5f:a0:96:93:87:
         97:55:fb:dc:0a:21:ce:2d:3d:03:59:4b:78:7b:eb:25:70:90:
         54:28:41:16:34:fb:cc:6d:87:c2:92:48:79:05:72:d8:e6:1b:
         cf:23:4b:3f:9c:72:a7:58:78:cd:63:9c:a1:1e:30:34:12:5b:
         a3:d0:a5:08:4c:db:8a:88:1e:ab:ac:76:b0:af:58:1b:26:69:
         43:84:61:f5:46:11:65:c5:12:4a:e6:65:f2:f2:8f:f6:c3:5d:
         fb:88:be:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:06 2025 by rpki-client