Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fb98d0b2-77c7-3500-ac51-9be8432c3e3d.roa
File:                     fb98d0b2-77c7-3500-ac51-9be8432c3e3d.roa (raw, json)
Hash identifier:          diCA8vstJhTQTQBx4dDv6lSiUS0AS5OxzEj7bHUS4RI=
Subject key identifier:   20:4C:11:A3:C3:D1:B7:CE:ED:61:73:03:58:1F:B2:34:E9:6F:02:0F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583FF5937D8BD41448A7520FBC00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fb98d0b2-77c7-3500-ac51-9be8432c3e3d.roa
Signing time:             Fri 18 Nov 2022 12:00:00 +0000
ROA not before:           Fri 18 Nov 2022 12:00:00 +0000
ROA not after:            Sat 24 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        208.110.48.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f5:93:7d:8b:d4:14:48:a7:52:0f:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 18 12:00:00 2022 GMT
            Not After : Dec 24 05:00:00 2022 GMT
        Subject: CN=921899a4-3bb5-4ca1-aa89-49c30231cea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d6:c0:69:31:36:fd:bc:ab:7f:80:3c:1c:f3:
                    10:fa:a4:95:28:d2:73:c0:29:ba:2b:0c:12:ae:d8:
                    e4:35:c1:f7:10:53:3d:d9:38:7a:ed:49:59:4b:0f:
                    62:6c:f5:16:92:cd:75:ce:16:8b:b5:dd:12:d5:38:
                    96:1f:d2:42:c7:f6:cd:57:aa:79:0c:87:e8:b9:94:
                    ff:be:12:c8:4f:34:57:45:00:d8:49:67:5a:d4:d1:
                    77:4f:fb:7e:28:eb:44:d8:97:fe:c2:dc:d4:23:f9:
                    05:c8:1e:f1:98:6e:51:a6:cd:04:07:bf:2a:b7:d0:
                    e1:40:72:83:60:e6:a6:e1:5f:d8:0d:be:00:be:7e:
                    28:bf:af:71:43:84:a3:57:ae:c5:6f:37:c7:cd:ec:
                    b1:2b:82:4f:4b:af:c6:6f:62:e0:67:df:ef:e1:70:
                    c6:ae:0b:6b:42:39:6b:56:84:85:6f:66:f7:d3:0d:
                    ee:a6:2d:4c:aa:82:a6:49:cd:24:75:2a:8c:72:6a:
                    e6:50:75:ad:94:a3:20:1c:60:0c:5e:3c:6a:78:ed:
                    a2:fe:2c:f8:0c:17:41:00:25:3c:f6:78:a2:2d:25:
                    30:c7:bb:a1:47:bd:53:27:6e:01:10:f1:17:7a:fb:
                    cb:1e:f7:d8:03:dd:8a:39:e4:9c:07:0e:6a:c2:34:
                    16:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4C:11:A3:C3:D1:B7:CE:ED:61:73:03:58:1F:B2:34:E9:6F:02:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fb98d0b2-77c7-3500-ac51-9be8432c3e3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.110.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:57:71:66:66:dc:05:bc:e9:7c:2c:e5:dd:93:10:10:97:bd:
         6d:b2:24:47:e8:f2:19:34:18:d3:9d:0c:7f:ea:0d:da:8d:cd:
         6a:0e:e8:66:4e:a5:ab:fc:51:2c:90:a0:fa:5f:18:d9:5f:21:
         f8:6a:0d:76:97:7f:18:57:6c:ff:9d:da:af:bb:e5:14:d6:75:
         18:e2:8a:02:b9:40:4d:df:79:1d:d3:f8:bd:6b:3c:b1:65:c6:
         40:e2:36:c9:39:c1:c3:1f:45:6f:8b:8c:bd:8d:2e:07:dd:4b:
         73:8a:14:a6:82:54:c9:6b:01:cf:49:6d:d1:a5:e1:12:ec:50:
         85:fb:fa:c6:9c:5a:d6:8c:fa:c3:8c:e5:dc:ba:80:75:ba:bf:
         b4:2d:0c:25:7d:ba:52:02:1b:f2:a7:eb:55:d9:b5:eb:6f:cd:
         be:8a:c5:4c:1d:8e:d4:ba:70:75:ff:16:61:7a:d2:1f:59:da:
         9e:bb:bf:7a:34:08:c5:79:f9:87:34:11:50:47:b9:7d:6e:2e:
         3a:86:1c:b7:b6:5f:0b:84:7d:da:93:b5:71:8e:25:7c:40:39:
         6c:87:44:26:1e:8d:a8:d3:b4:4a:db:ab:a9:63:10:70:5d:67:
         b0:5a:3b:ba:83:4d:72:56:ea:6a:a2:a7:95:65:a8:10:e0:c1:
         b7:7c:bb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:39 2025 by rpki-client