Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f7c1c888-b353-3a77-9098-348c3ece7808.roa
File:                     f7c1c888-b353-3a77-9098-348c3ece7808.roa (raw, json)
Hash identifier:          tlfQhO4VNprQW8oq28T5gVXJRj2ZBBjGw6MZj4XPCFM=
Subject key identifier:   04:35:95:F9:B0:DE:FA:7A:8C:55:13:ED:45:53:6A:F4:DB:9D:95:5D
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E7FBED8AEE918385A57FE24C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f7c1c888-b353-3a77-9098-348c3ece7808.roa
Signing time:             Thu 07 Jul 2022 12:00:00 +0000
ROA not before:           Thu 07 Jul 2022 12:00:00 +0000
ROA not after:            Fri 12 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        160.223.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:7f:be:d8:ae:e9:18:38:5a:57:fe:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul  7 12:00:00 2022 GMT
            Not After : Aug 12 04:00:00 2022 GMT
        Subject: CN=eb0754ca-d9a1-4b17-8de1-cf1a58779e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ca:bb:77:7c:f6:cb:e2:cc:f4:67:01:a8:98:
                    46:2b:7c:44:76:e8:1c:44:c3:26:c6:81:5a:40:98:
                    15:df:12:d2:00:a2:a5:9f:42:3d:ad:34:14:66:c5:
                    c2:50:8e:90:14:b0:5c:c9:a4:46:54:73:7d:04:b2:
                    b4:ac:14:2d:39:e5:95:c3:b6:61:26:08:af:d0:d8:
                    ed:34:6b:b5:da:d6:a8:41:ab:94:ae:c4:89:a0:88:
                    73:30:6b:75:96:d9:e1:d6:85:b4:ad:8f:a7:be:42:
                    5e:cd:1a:38:af:73:55:d9:b4:c0:d5:27:e2:7e:86:
                    b5:54:a8:4d:59:8f:cc:c6:68:f6:fc:7c:dd:21:98:
                    33:0e:6e:ca:91:96:5f:33:58:2c:d5:9d:01:c3:3a:
                    01:3a:9c:72:5c:c6:3f:a8:db:52:0f:57:ca:bb:09:
                    e9:b4:8b:c6:39:04:22:be:5f:03:d3:b0:6b:06:b2:
                    7e:25:5a:86:1d:28:22:45:1f:e5:db:fa:b5:af:5c:
                    b5:8b:ee:35:c0:f4:78:e8:91:31:0b:34:6e:c0:13:
                    de:b3:65:a8:cd:75:42:ee:f0:17:9d:c7:26:fc:17:
                    d9:af:b6:49:b1:5d:c8:58:30:77:53:3c:6f:a0:f1:
                    f9:fd:1c:ee:fb:82:3d:f8:f6:3d:4e:cf:44:28:02:
                    d4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:35:95:F9:B0:DE:FA:7A:8C:55:13:ED:45:53:6A:F4:DB:9D:95:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f7c1c888-b353-3a77-9098-348c3ece7808.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.223.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:d3:96:64:b7:e6:43:dd:85:24:32:77:da:2b:a8:c0:e8:23:
         88:a9:32:9a:df:72:25:cb:e4:1b:0f:14:4b:ff:76:2e:e6:f5:
         d1:9e:ea:9b:de:62:d0:79:33:d7:78:39:13:23:62:28:a0:e8:
         c8:bc:b4:9a:4e:c5:8a:4d:02:4a:1d:50:d0:14:90:8d:67:28:
         af:af:5d:61:0a:e0:d5:68:d3:c6:12:f5:54:e9:fe:5d:d8:09:
         03:a3:b4:57:c9:97:98:00:df:ba:88:48:1a:89:17:35:01:cd:
         49:d3:62:31:0b:28:74:0b:58:e3:e7:4f:a6:0c:84:2e:10:38:
         ff:47:77:16:8f:bf:00:4d:03:5d:92:82:6a:70:13:2b:ca:67:
         57:a4:50:db:a5:be:c9:4e:5e:3e:12:01:2b:54:2b:ae:49:91:
         49:7f:90:29:37:d2:59:31:d7:b4:f5:c2:ac:c1:86:19:41:31:
         f2:dc:43:8d:d7:c8:32:4a:31:aa:c3:19:9d:e7:52:d1:98:ff:
         b3:ff:a5:c1:cf:c7:5f:a6:a1:18:d6:12:83:a0:d7:0b:cc:92:
         2a:32:e8:d2:01:50:c1:df:4e:bc:8e:a7:90:f3:9e:e8:98:cc:
         55:43:8a:0c:f5:fb:6c:bb:53:47:d6:eb:46:8a:89:11:5f:bd:
         ba:36:cb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:25 2025 by rpki-client