Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fd7493de-ad00-33e6-8052-22893e6752b9.roa
File:                     fd7493de-ad00-33e6-8052-22893e6752b9.roa (raw, json)
Hash identifier:          GJp/lXae+tzHbZRjE8mKHnZpI9mux9jFWHpLfl5xZdg=
Subject key identifier:   C6:FC:3F:9E:A6:67:D8:0E:41:8C:F3:1E:1E:4E:4F:8B:78:75:A9:A4
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583E6F58141A1785670773726980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fd7493de-ad00-33e6-8052-22893e6752b9.roa
Signing time:             Fri 01 Jul 2022 12:00:00 +0000
ROA not before:           Fri 01 Jul 2022 12:00:00 +0000
ROA not after:            Sat 06 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        23.20.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6f:58:14:1a:17:85:67:07:73:72:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jul  1 12:00:00 2022 GMT
            Not After : Aug  6 04:00:00 2022 GMT
        Subject: CN=813771af-c4de-483d-8505-99d68a59675c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:49:47:60:5c:9d:a8:f3:05:91:3f:6a:97:34:
                    55:37:db:85:2f:70:14:89:bd:15:1c:3d:8f:75:b5:
                    0d:0b:0b:0c:7f:76:4b:04:bc:29:aa:9a:bd:27:b6:
                    bb:c9:7d:4c:a2:00:80:a9:4a:23:a0:95:58:79:2d:
                    29:9e:15:74:cf:53:e3:b3:52:b7:b7:8c:05:44:4c:
                    f7:5c:7b:6b:fb:23:1b:a9:91:e3:f2:26:f6:64:b8:
                    47:6e:7c:4c:33:0b:6a:49:51:80:74:1d:65:e7:b9:
                    18:51:f6:17:73:5d:fb:2a:b0:08:2f:2a:63:11:30:
                    15:d3:1e:4a:f6:0e:0b:88:8f:ea:25:86:12:28:34:
                    e5:e8:3c:2f:d3:6e:93:cc:9c:24:7d:10:43:fd:de:
                    7b:ed:24:90:71:9c:72:2d:45:97:af:9e:d3:25:97:
                    8c:d4:85:e5:de:2e:a1:8d:04:69:22:fe:6d:37:cb:
                    ae:3d:53:fb:ba:bf:fe:f9:99:39:76:cf:e0:4e:27:
                    9c:e7:e8:49:c3:17:6f:78:0d:c3:a0:74:6e:fa:cb:
                    cd:56:34:91:1f:aa:f3:84:d9:b3:69:37:86:c5:d6:
                    88:5f:79:e2:f5:11:fb:54:77:f1:f6:71:03:4e:5c:
                    db:c0:c3:fd:b8:e3:c4:8f:53:04:4f:50:86:6b:0c:
                    b3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FC:3F:9E:A6:67:D8:0E:41:8C:F3:1E:1E:4E:4F:8B:78:75:A9:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fd7493de-ad00-33e6-8052-22893e6752b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.20.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:8d:a1:dc:4e:1d:90:09:20:cf:9b:cf:fd:e1:0e:6c:d5:1b:
         d1:d5:07:c5:e7:38:27:b3:10:94:ef:34:d0:9e:0e:09:e1:c3:
         24:e2:1c:84:4f:ef:3c:63:19:8d:33:7a:8d:75:ed:ea:a3:1b:
         31:4b:3c:cc:14:80:5b:5b:fc:98:54:8f:98:27:21:1e:09:7f:
         e6:05:3a:ed:41:7a:f0:f0:99:bb:37:d2:21:fe:4b:17:47:69:
         9f:77:f7:2c:f8:57:4f:ae:39:73:37:d4:ce:f3:d1:d4:72:5a:
         dd:27:45:3c:f2:f7:8a:25:35:83:9a:1d:73:0e:d4:6a:ff:31:
         a6:f1:62:da:fc:49:9a:66:7d:0a:d1:aa:be:b3:e5:07:d4:43:
         89:dd:5d:cf:9f:33:54:50:1b:e7:a1:d5:b8:71:b8:fb:c8:2e:
         61:93:75:74:a3:38:3a:2e:e8:57:1d:de:9b:cc:5b:6e:26:1d:
         7d:fd:8d:75:7f:94:ed:c2:84:78:42:fd:cd:4d:30:ae:16:7b:
         2b:06:56:67:c8:54:28:cd:a7:c0:d9:8b:2b:e0:1e:fe:a2:da:
         b8:36:83:78:8b:5e:8c:4b:97:ce:97:46:ff:3a:a6:5a:ba:17:
         89:cb:f1:50:ec:4e:fc:58:d6:8f:98:16:3d:c1:dd:38:60:cb:
         49:c1:e0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:24 2025 by rpki-client