Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f9593161-cbb0-3823-b583-d16a8824fc22.roa
File:                     f9593161-cbb0-3823-b583-d16a8824fc22.roa (raw, json)
Hash identifier:          jgi/t6dTq3vXrnnWcHiHGN8vr5TESu7apxm7n4t8+mY=
Subject key identifier:   B3:B8:FD:0B:65:16:56:DC:69:0D:B3:B3:BC:8B:9A:95:8A:7D:6F:3A
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858403AE03E506025C3AFC268B480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f9593161-cbb0-3823-b583-d16a8824fc22.roa
Signing time:             Tue 13 Dec 2022 12:00:00 +0000
ROA not before:           Tue 13 Dec 2022 12:00:00 +0000
ROA not after:            Wed 18 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        146.167.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3a:e0:3e:50:60:25:c3:af:c2:68:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 13 12:00:00 2022 GMT
            Not After : Jan 18 05:00:00 2023 GMT
        Subject: CN=c0acb736-8b27-44c2-b290-a37b519a1fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:45:4d:fc:3b:5d:97:43:22:33:55:2b:80:30:
                    3e:bb:ba:5f:f5:71:3c:2f:86:54:a3:75:1c:d8:67:
                    a3:3e:78:2f:65:39:6b:0c:c4:32:01:e0:3f:9e:c6:
                    6c:dd:0d:48:08:50:7e:59:28:99:c7:2a:84:58:e4:
                    03:07:f4:dc:e6:52:99:d3:bf:ee:67:51:47:73:90:
                    fc:67:04:de:8f:66:60:d3:fa:5c:9a:16:7c:0c:e9:
                    a6:f1:bf:70:5d:a0:ea:a0:92:22:a2:7b:94:8a:59:
                    6a:ee:71:af:4d:1f:7b:1a:6e:af:a2:ea:97:8f:3f:
                    2f:41:11:49:46:28:1b:60:28:2d:4c:31:c0:ac:fc:
                    f6:4a:fb:b6:cb:d5:06:b7:bc:47:6b:b5:89:58:8b:
                    30:4f:00:eb:08:d5:0a:fb:9a:a5:23:96:a6:fc:69:
                    c6:9a:21:66:0c:c3:22:17:86:a5:19:bb:20:d0:36:
                    a7:7b:76:f0:ea:15:a5:65:fd:f8:70:0a:7c:1d:47:
                    7b:38:50:b9:e2:54:63:ac:e4:bd:55:70:d9:f2:e5:
                    18:8f:8d:b6:c2:69:f1:f5:6d:e5:f4:bd:89:7b:81:
                    c9:10:3a:67:17:10:65:22:53:39:12:c9:29:e0:2a:
                    7e:35:3a:ec:65:6a:26:e6:50:f9:b9:99:54:d6:b0:
                    56:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B8:FD:0B:65:16:56:DC:69:0D:B3:B3:BC:8B:9A:95:8A:7D:6F:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f9593161-cbb0-3823-b583-d16a8824fc22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.167.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:ee:2c:4d:23:1f:72:18:d6:98:5f:86:13:ec:1f:d0:9f:c9:
         38:95:63:7e:f5:8d:15:1e:ee:08:12:c9:2a:86:7e:21:6b:27:
         49:fb:bd:76:8a:b6:ad:3d:f7:88:95:12:d4:c5:31:fe:79:ab:
         55:0d:6d:3f:cc:05:2e:e8:e2:fb:63:7d:1a:5a:b1:62:a4:fd:
         44:ea:6e:38:07:a2:1d:b7:01:ab:36:47:43:12:c2:fc:65:42:
         35:9c:da:6b:15:1a:b7:0a:81:7c:0b:2b:c3:7f:bb:9f:cf:b7:
         44:6d:0a:37:75:1d:d5:f6:6f:cf:6b:63:4a:1c:49:96:0e:f6:
         4a:c7:3c:91:16:15:1e:62:6e:02:5e:ad:32:e0:9e:45:10:bb:
         79:f4:7a:11:38:94:5a:ec:42:2c:dc:7a:1d:de:05:a5:ca:82:
         b7:f7:7e:3b:9e:a1:2a:29:8a:20:bd:0e:92:39:dc:c1:d4:0e:
         60:a7:5d:d5:d9:77:d3:cb:16:b4:3c:0a:75:b7:fa:7c:d1:ef:
         b4:fb:9a:f9:89:0f:77:6b:31:f5:ea:9a:67:05:af:c9:12:73:
         e3:ce:9e:7d:97:fa:51:6e:6b:7e:f1:32:b5:f1:3d:ec:59:b4:
         de:0b:53:f5:74:3f:0a:6f:36:90:b4:f2:cd:dc:73:a1:12:f6:
         8e:f9:97:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:11 2025 by rpki-client