Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f7f18b7a-2f3d-369e-ae16-c3bc26297901.roa
File:                     f7f18b7a-2f3d-369e-ae16-c3bc26297901.roa (raw, json)
Hash identifier:          ulO6kYaTe88Uv+3wIobjFG9KaB0n+RZMk+69YO9usUQ=
Subject key identifier:   D2:D6:66:4E:1D:B8:95:D1:5D:89:33:DB:63:0E:D3:96:98:36:A6:F9
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E2C844A39C1842E56B5B0E180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f7f18b7a-2f3d-369e-ae16-c3bc26297901.roa
Signing time:             Tue 07 Jun 2022 12:00:00 +0000
ROA not before:           Tue 07 Jun 2022 12:00:00 +0000
ROA not after:            Wed 13 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        40.172.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:2c:84:4a:39:c1:84:2e:56:b5:b0:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jun  7 12:00:00 2022 GMT
            Not After : Jul 13 04:00:00 2022 GMT
        Subject: CN=78aee58b-0999-4085-bd95-966a0cce38cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:dc:96:a2:89:90:39:bc:6f:a7:92:14:5d:84:
                    b7:c9:e8:6a:9b:6c:ce:cb:2f:6c:9a:49:bb:b8:9f:
                    d0:98:90:99:5c:1e:19:49:b0:dd:32:15:78:8b:f5:
                    e3:5c:3e:9b:e8:98:4d:0c:68:28:58:98:65:ba:4e:
                    8e:92:ca:27:bb:78:04:21:e7:6b:ca:0a:f7:b4:88:
                    a6:2e:20:54:e4:b0:3f:7e:f3:ce:5f:21:8d:fe:03:
                    5c:bc:86:e4:3a:6d:2e:fa:8b:79:ee:d1:f5:6f:2a:
                    8c:f5:5c:7e:af:eb:c2:86:d4:9a:a3:47:aa:b9:1b:
                    63:6c:4f:7a:67:c6:7f:53:7e:c1:17:11:17:74:6f:
                    49:51:29:1e:74:1a:be:5a:35:a8:f3:f8:bf:26:79:
                    9e:e4:67:2d:15:d1:a3:6d:d1:61:51:44:85:73:d0:
                    06:42:ee:e1:8d:11:2d:46:b5:6d:8d:4a:24:7e:d2:
                    75:5b:94:d0:58:4a:b8:35:12:de:93:51:38:66:75:
                    2c:e0:50:99:1f:82:4d:ba:69:89:ae:05:b9:be:71:
                    c6:69:75:22:dc:eb:76:71:18:39:23:ae:ce:61:77:
                    f1:1a:dd:d9:9a:56:e9:3b:a9:f5:65:9e:da:ca:d0:
                    c3:25:7e:ef:3c:7b:62:44:db:3c:e1:3e:f8:a7:e6:
                    8e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D6:66:4E:1D:B8:95:D1:5D:89:33:DB:63:0E:D3:96:98:36:A6:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f7f18b7a-2f3d-369e-ae16-c3bc26297901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.172.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:f4:39:2a:10:09:81:18:e1:a8:7f:a1:7a:50:e4:c2:05:60:
         30:b2:ae:9f:b8:61:e2:de:23:1b:7d:fe:82:07:62:ee:09:51:
         74:b6:93:8e:4b:90:cb:08:b2:aa:6d:10:de:ac:ef:fe:55:53:
         64:bc:83:ed:3d:dc:53:5a:fc:e7:fa:ca:26:4b:1a:74:bc:d8:
         30:42:52:9f:c0:2d:a1:08:0f:3d:7d:c2:e8:01:a3:1c:6b:ec:
         d0:45:ea:78:d7:ab:06:3e:3c:cd:09:e9:dd:3a:61:73:83:ca:
         42:8c:0f:83:6c:17:97:84:aa:14:b6:c4:d1:e1:94:17:26:e8:
         46:c2:40:28:d0:85:b7:65:2b:48:40:96:2b:38:f0:dd:40:39:
         8d:7a:11:2d:a9:e4:f4:48:80:87:1d:1f:56:23:17:96:8b:43:
         92:4d:57:8d:2c:ab:48:ab:38:32:49:8a:cf:d7:6b:09:08:45:
         fd:85:52:31:7d:18:fe:ad:18:eb:0d:b4:48:07:34:01:2a:bf:
         71:e8:cf:f3:12:76:84:95:cf:c1:1c:e7:7f:e4:26:f7:64:86:
         75:b8:47:1c:6f:87:44:5f:d7:d0:c3:eb:64:aa:4a:2f:ea:91:
         95:47:ed:bb:17:5e:00:78:f4:a5:bc:99:c4:6d:9b:fd:37:a5:
         ed:c6:37:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:53 2025 by rpki-client