Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f7fe37ce-c916-370d-9804-0e7e0c6dc36f.roa
File:                     f7fe37ce-c916-370d-9804-0e7e0c6dc36f.roa (raw, json)
Hash identifier:          Jo41VscTXYc2/tcKVurO2WKOVURcnC6hO87p/73Ai3U=
Subject key identifier:   D3:36:1A:44:5A:AE:8B:96:54:33:BF:35:17:60:46:BB:2B:B4:C4:5A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584024DCBA8F02C465A0AECF9300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f7fe37ce-c916-370d-9804-0e7e0c6dc36f.roa
Signing time:             Mon 05 Dec 2022 12:00:00 +0000
ROA not before:           Mon 05 Dec 2022 12:00:00 +0000
ROA not after:            Tue 10 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        135.22.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:24:dc:ba:8f:02:c4:65:a0:ae:cf:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  5 12:00:00 2022 GMT
            Not After : Jan 10 05:00:00 2023 GMT
        Subject: CN=b704f7be-4aec-4a71-9c01-ffa9cde3b58c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:be:54:a0:f9:36:dd:92:f5:f7:7d:90:81:3d:
                    35:5d:83:8d:68:cd:7a:9b:20:b6:e0:8b:3b:64:a0:
                    68:76:bd:d2:71:89:db:68:a5:1b:12:7e:35:7d:57:
                    04:a7:0d:0e:00:b1:2e:2c:84:9f:ff:65:98:4a:a0:
                    db:f1:ab:e5:2c:b3:ae:d4:29:a3:df:de:af:19:b6:
                    ea:31:57:d3:c0:d4:3d:f9:25:df:da:51:82:82:86:
                    d7:fe:37:af:9f:e2:9f:40:23:ef:a3:8b:ae:c8:49:
                    f7:4d:17:5d:78:7f:31:2d:28:10:30:d2:48:5d:cf:
                    58:ef:56:37:ab:14:3d:ed:bf:6d:74:a5:03:38:70:
                    85:0f:b6:81:cd:dc:3b:64:c5:fc:8c:88:f2:f9:de:
                    a7:52:1b:fd:30:3d:bf:8e:b2:8e:ba:02:ff:c9:2e:
                    6b:d2:b8:57:87:b3:fd:09:37:f1:4e:6d:e1:94:b4:
                    da:ec:29:b0:b3:79:38:aa:76:14:52:98:36:43:96:
                    f8:29:fb:0e:86:e5:66:c7:ca:e0:87:63:60:38:52:
                    5e:50:eb:7b:9c:8b:46:c3:c5:fe:bb:7b:61:b3:e8:
                    65:af:aa:6a:60:60:d7:b4:16:0e:fa:8a:98:5c:e9:
                    86:c2:7d:91:9e:11:d7:70:b4:de:83:5a:f2:65:df:
                    41:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:36:1A:44:5A:AE:8B:96:54:33:BF:35:17:60:46:BB:2B:B4:C4:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f7fe37ce-c916-370d-9804-0e7e0c6dc36f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.22.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:6e:01:03:c7:dd:4c:80:ef:38:42:94:57:5f:44:47:d5:1c:
         c8:f6:57:bb:f6:b3:c4:58:c1:d7:09:ec:c3:48:99:73:66:85:
         59:38:a6:55:6e:d6:4c:80:ed:7a:9f:3e:01:8c:37:af:4b:7e:
         90:6e:68:63:ad:dc:e7:1b:0a:7c:d1:5b:be:eb:38:54:9c:32:
         23:2e:e7:32:b8:68:dd:1b:be:2e:e2:83:68:ac:50:fa:b1:0c:
         1f:7a:e8:59:a1:cd:c1:c4:39:e0:d2:79:79:12:90:74:e3:cd:
         9e:7a:cf:8f:84:29:84:25:9e:1c:85:84:e4:05:89:37:18:e9:
         e9:87:ae:cd:74:db:e9:a3:df:91:2b:6a:99:ea:16:bb:28:18:
         85:3d:0b:9f:6b:74:72:88:93:d3:d4:28:87:78:dc:8e:85:76:
         e7:92:ec:68:ca:2c:4b:55:02:3c:ec:b4:a9:58:fa:73:d6:fd:
         61:39:b6:04:14:25:47:c2:16:85:e4:88:ad:d9:48:72:de:63:
         31:14:e1:e7:a4:91:30:c3:01:b8:b3:55:68:db:91:80:20:3c:
         02:c6:48:2d:0c:7c:b8:28:04:aa:22:4d:10:84:73:90:dd:5c:
         bd:dc:36:e0:b3:7f:00:33:2c:85:6e:2b:8b:69:31:1b:58:aa:
         c1:33:cd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:02 2025 by rpki-client