Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/facec9a4-50e5-36bf-b0af-3e7f87975cd5.roa
File:                     facec9a4-50e5-36bf-b0af-3e7f87975cd5.roa (raw, json)
Hash identifier:          IUs8YJMpo5shBFmU3Vq4V5z/RGFd3qViOyH43/HXv3I=
Subject key identifier:   87:8D:35:50:78:41:C4:89:4F:F8:33:9A:B2:A1:5E:FA:0A:5D:C6:64
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F622B269A2A2B655C96C24580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/facec9a4-50e5-36bf-b0af-3e7f87975cd5.roa
Signing time:             Mon 26 Sep 2022 19:36:08 +0000
ROA not before:           Mon 26 Sep 2022 19:36:08 +0000
ROA not after:            Tue 01 Nov 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        135.22.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:62:2b:26:9a:2a:2b:65:5c:96:c2:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep 26 19:36:08 2022 GMT
            Not After : Nov  1 04:00:00 2022 GMT
        Subject: CN=a840c789-b76d-48a0-ac0f-860dbc658b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bc:8f:d6:52:a7:9a:22:48:81:87:fb:ee:10:
                    02:b4:b5:5b:ac:1b:72:f4:97:dd:26:39:96:6c:94:
                    ce:20:bb:a2:e7:4e:44:a2:cd:0c:9c:c8:28:5a:8b:
                    10:cb:10:1a:9a:0d:5f:88:a7:f2:34:79:15:ec:88:
                    11:e6:de:13:a9:f0:00:cc:c0:ad:7f:5c:04:ef:19:
                    56:f0:0f:6a:1f:d4:5e:85:0a:b8:7a:87:13:1f:7c:
                    fd:77:8c:db:56:fc:ba:88:6e:00:1c:2a:e8:00:e8:
                    a8:b3:04:1c:2c:ce:93:cb:29:61:dd:12:35:40:c0:
                    22:75:a2:51:87:7d:49:35:35:e1:1c:78:2e:ae:70:
                    93:21:81:ba:89:29:1d:08:01:8d:43:9c:e4:da:a2:
                    d1:a6:50:0b:5e:c9:04:e9:d5:76:d3:8a:cc:76:77:
                    ca:87:b5:d7:ad:33:64:88:8c:3f:64:3b:24:18:79:
                    93:9b:f1:69:7f:0f:06:ab:d1:98:ea:d5:dd:ba:71:
                    35:37:49:cd:ce:18:51:c6:2d:20:83:e8:85:ee:07:
                    39:b4:78:13:9c:ed:aa:0c:ff:88:1f:f7:05:17:33:
                    cc:2c:70:1b:7c:20:ea:2d:3a:79:76:ef:79:96:09:
                    a3:3c:56:a7:9e:c8:b3:29:a5:38:b3:1a:d0:23:7b:
                    4a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8D:35:50:78:41:C4:89:4F:F8:33:9A:B2:A1:5E:FA:0A:5D:C6:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/facec9a4-50e5-36bf-b0af-3e7f87975cd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.22.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:eb:5f:0a:10:2e:bb:41:19:ea:14:31:17:87:80:21:c4:87:
         0d:1c:c4:9e:a6:23:e5:c0:e5:3a:25:a8:fc:fd:42:a3:34:03:
         f5:8e:71:7a:14:6f:82:ce:4f:e6:4b:8a:d2:b2:64:96:3c:12:
         47:54:e3:ce:8e:d7:e1:7e:ba:c7:83:2e:0f:bc:50:54:8f:10:
         ca:37:0b:31:56:24:e4:1d:c7:b2:41:a4:b2:7d:f8:95:60:f0:
         f8:8d:77:df:c9:a3:b0:0d:ee:f9:21:10:59:40:85:dc:0f:43:
         e4:13:c9:ae:53:3a:b2:d9:b9:64:df:27:60:28:bd:9c:30:c3:
         cf:65:e2:01:7c:f1:e1:9b:2d:b3:3f:c0:74:28:30:04:6f:2b:
         f7:9f:e0:26:00:b0:27:8b:d4:68:f6:82:09:24:e7:74:7c:65:
         f7:a5:c2:11:8e:ae:f7:b1:83:df:77:6b:f4:d7:83:38:1b:98:
         3c:82:36:5b:db:51:c2:58:44:31:50:28:51:cc:9f:ab:e5:f4:
         a6:ca:0a:a9:7a:d2:e4:5f:7a:43:4b:99:69:87:6c:24:06:da:
         35:25:96:19:bb:23:45:82:b3:76:53:02:33:b7:30:a9:ca:90:
         ac:24:e2:2c:68:6e:f1:23:c2:5f:1a:f1:ff:95:08:58:f9:7b:
         61:b5:76:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:38:13 2025 by rpki-client